Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CB547D8C3F011EF9034D78B762E951A.roa
File: 0CB547D8C3F011EF9034D78B762E951A.roa (raw, json)
Hash identifier: 3VWZjzYT3Q3Z+et7X5F3fagTG8Wpyt6y3qNK6prUBvQ=
Subject key identifier: B8:2F:E8:93:3D:C4:75:F9:FD:B8:E2:F5:6E:83:8B:AF:B8:0C:16:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CB547D8C3F011EF9034D78B762E951A.roa
Signing time: Fri 27 Dec 2024 01:15:24 +0000
ROA not before: Fri 27 Dec 2024 01:15:21 +0000
ROA not after: Sun 12 Dec 2027 01:15:21 +0000
asID: 17561
IP address blocks: 45.192.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61254 (0xef46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:15:21 2024 GMT
Not After : Dec 12 01:15:21 2027 GMT
Subject: CN=676dffac-d5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:72:5b:fa:87:b5:8b:a2:d5:2a:aa:bb:cc:
6d:d5:52:17:8d:08:ee:2e:6b:51:46:7e:21:81:ad:
54:bf:1b:12:fc:e2:69:d8:f6:05:4e:ad:2a:bf:a3:
0d:d7:1f:50:2c:82:18:91:87:e2:61:c4:84:53:27:
6c:c1:9f:cf:b7:04:fe:1b:3e:07:2d:1d:ea:9d:3a:
63:8a:7c:d3:77:fd:4f:24:60:7f:c5:5f:0a:a5:10:
24:ee:84:88:ef:ca:c8:44:79:43:05:2a:a8:e6:33:
f6:cb:3c:77:e9:10:be:da:a8:e2:34:b0:f8:ee:0f:
e3:e4:4e:a7:00:26:a5:0d:4f:1c:c2:75:8a:2b:e5:
03:f0:32:24:0c:f1:f6:c2:c6:1a:c1:7d:9f:5d:21:
6d:47:32:fb:5b:35:55:25:04:ac:20:c0:ba:3c:b8:
41:55:5f:a7:6f:59:72:7a:26:61:62:68:ce:90:0a:
eb:a2:41:43:9d:b3:9e:af:74:f8:83:be:82:aa:a9:
b6:05:a0:54:76:c7:98:41:f9:14:97:98:ab:89:b3:
c5:19:44:58:24:44:db:ef:b1:25:0d:8d:40:d8:bd:
0e:3c:7a:d5:de:c4:17:39:1c:12:1e:2c:90:2d:13:
5d:4c:fb:bf:3f:10:65:39:a5:1a:b7:af:ef:26:e1:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:E8:93:3D:C4:75:F9:FD:B8:E2:F5:6E:83:8B:AF:B8:0C:16:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CB547D8C3F011EF9034D78B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.243.0/24
Signature Algorithm: sha256WithRSAEncryption
11:14:57:b8:d9:c9:28:41:9d:e8:f1:56:b7:41:ba:26:4e:ef:
68:82:f9:6d:18:0c:f1:bb:be:46:42:55:b6:e5:c2:b1:26:5f:
2f:20:b0:94:fc:11:fc:46:2a:7f:4f:20:77:72:c2:72:e5:0d:
c4:55:96:e2:54:b5:4c:c4:2a:5a:b1:e8:65:d8:96:bf:7f:f2:
bd:e4:69:e6:a4:eb:80:ee:c5:79:10:16:5c:c0:94:18:5d:e9:
cb:71:f0:52:43:66:b5:d0:56:bd:e0:33:0e:4d:ea:f7:5b:54:
ac:1b:ad:e5:fb:24:7d:34:f7:98:42:7e:af:d1:19:7c:38:04:
8d:c9:2a:3e:bd:2f:a0:4c:06:b6:ab:a7:74:be:04:33:6f:10:
4c:8e:f0:2f:e1:32:bb:81:ff:c4:78:e0:ec:7a:25:c9:a0:be:
dc:05:44:b1:86:25:53:42:4c:38:5c:78:7a:8b:fa:05:d2:47:
c6:38:e8:76:3e:c4:86:ae:93:5c:17:74:53:5b:47:4c:01:ea:
2c:bd:41:6b:3a:73:79:d0:c9:ac:26:9f:e2:dd:21:59:7c:21:
93:8b:55:26:3d:fe:78:51:e5:07:67:b7:26:0e:6b:a6:10:70:
f4:81:33:15:5f:21:65:c4:89:1a:85:ee:85:d3:7a:45:07:4f:
f8:79:51:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO9GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDExNTIxWhcNMjcxMjEyMDExNTIxWjAYMRYw
FAYDVQQDEw02NzZkZmZhYy1kNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx8RyW/qHtYui1Sqqu8xt1VIXjQjuLmtRRn4hga1UvxsS/OJp2PYFTq0q
v6MN1x9QLIIYkYfiYcSEUydswZ/PtwT+Gz4HLR3qnTpjinzTd/1PJGB/xV8KpRAk
7oSI78rIRHlDBSqo5jP2yzx36RC+2qjiNLD47g/j5E6nACalDU8cwnWKK+UD8DIk
DPH2wsYawX2fXSFtRzL7WzVVJQSsIMC6PLhBVV+nb1lyeiZhYmjOkArrokFDnbOe
r3T4g76Cqqm2BaBUdseYQfkUl5iribPFGURYJETb77ElDY1A2L0OPHrV3sQXORwS
HiyQLRNdTPu/PxBlOaUat6/vJuFUJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLgv
6JM9xHX5/bji9W6Di6+4DBYSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQ0I1NDdEOEMzRjAxMUVGOTAzNEQ3OEI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDzMA0GCSqGSIb3DQEBCwUA
A4IBAQARFFe42ckoQZ3o8Va3QbomTu9ogvltGAzxu75GQlW25cKxJl8vILCU/BH8
Rip/TyB3csJy5Q3EVZbiVLVMxCpasehl2Ja/f/K95GnmpOuA7sV5EBZcwJQYXenL
cfBSQ2a10Fa94DMOTer3W1SsG63l+yR9NPeYQn6v0Rl8OASNySo+vS+gTAa2q6d0
vgQzbxBMjvAv4TK7gf/EeODseiXJoL7cBUSxhiVTQkw4XHh6i/oF0kfGOOh2PsSG
rpNcF3RTW0dMAeosvUFrOnN50MmsJp/i3SFZfCGTi1UmPf54UeUHZ7cmDmumEHD0
gTMVXyFlxIkahe6F03pFB0/4eVFc
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:37 2025 by rpki-client