Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FB70D86CEF411EFB7360C9E762E951A.roa
File: 0FB70D86CEF411EFB7360C9E762E951A.roa (raw, json)
Hash identifier: 52ZvavQLr2+GKYZ1QKeiA6ofIBrODBNakjKNGnmGySQ=
Subject key identifier: C4:B1:6E:48:C5:AA:13:CE:DE:E0:AB:6D:A8:6C:D5:F1:4E:88:A5:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010487
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FB70D86CEF411EFB7360C9E762E951A.roa
Signing time: Fri 10 Jan 2025 01:41:51 +0000
ROA not before: Fri 10 Jan 2025 01:41:47 +0000
ROA not after: Wed 12 Feb 2025 01:41:47 +0000
asID: 395793
IP address blocks: 45.198.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66695 (0x10487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:41:47 2025 GMT
Not After : Feb 12 01:41:47 2025 GMT
Subject: CN=67807ade-fed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:31:00:08:29:ab:85:a4:a2:76:07:9c:81:
40:ca:c4:bf:5c:41:b2:fc:fc:3f:fc:a5:1b:7e:e1:
b8:7a:d4:88:52:c2:77:9c:ef:f0:36:10:a7:04:ab:
24:ef:f2:a4:36:1c:3e:49:7e:ab:bd:b5:e1:9c:44:
99:ff:07:c5:be:42:95:a3:99:47:04:c1:d5:11:50:
49:75:72:31:5e:22:9b:f5:10:93:ae:3f:21:8c:5d:
41:d6:17:f2:aa:13:c4:cc:e2:5a:f4:22:55:dc:c0:
89:1e:3c:5c:3a:45:e3:52:c4:68:35:61:d4:8f:80:
0f:39:c3:32:52:b3:17:64:de:cb:98:4d:5c:d1:25:
fe:22:66:13:1c:75:ae:be:fb:45:ab:56:f2:bc:c1:
de:eb:cc:a1:92:3e:3f:e3:dc:81:57:91:06:58:8f:
86:a5:5b:d0:e4:34:8b:16:f0:c5:20:a8:6f:97:4e:
ca:01:73:66:28:f9:66:b5:45:6f:83:8a:8c:f8:9f:
bb:4d:5b:6f:8f:4f:02:19:9d:df:23:85:1c:72:78:
2d:30:39:97:6c:d4:0a:23:8d:31:81:0e:ab:0f:73:
1f:15:1a:a1:71:b7:bb:bc:6f:6c:55:c3:1c:b4:65:
96:b1:56:7d:5f:2b:b8:d3:c9:e6:72:f7:97:dc:cd:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:6E:48:C5:AA:13:CE:DE:E0:AB:6D:A8:6C:D5:F1:4E:88:A5:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FB70D86CEF411EFB7360C9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:f0:87:6b:d9:7b:ed:a9:2f:7c:87:9e:88:45:cb:03:ea:80:
76:1f:53:2c:53:cd:f9:31:14:0a:72:d0:9b:c2:14:9d:d3:cf:
18:a3:7f:44:f2:7f:48:52:6c:4f:f2:2f:3e:8d:b5:45:8e:d1:
b1:c1:c7:5c:2c:42:33:a4:be:99:db:0f:03:26:59:fd:0d:b6:
cd:2b:e4:f0:a3:60:07:9c:3d:83:40:00:c1:b2:3a:06:24:83:
98:3d:98:77:34:39:94:d5:9a:49:74:75:01:0d:ca:02:65:d3:
93:04:0d:21:45:68:c5:ea:35:ac:73:8c:45:2c:51:f6:ca:31:
e1:d8:73:5a:8c:0e:66:17:83:2e:b5:a4:dc:a4:b1:f9:14:a8:
0a:60:da:a3:b8:5b:2e:07:db:79:d7:94:95:93:3c:2c:0e:d6:
fc:53:37:60:57:7a:0a:71:f2:7d:a8:c6:18:8b:1b:ba:2b:5f:
ca:2b:37:51:9d:fb:95:04:18:92:a3:5d:b1:58:d0:6c:d7:e7:
d7:d4:72:fc:7c:73:38:70:8d:26:e2:7c:cf:cd:a3:7b:47:c6:
56:e5:16:8f:be:11:1e:52:c7:84:59:47:ba:98:19:56:d0:b0:
69:35:62:f2:81:02:e3:5a:c8:d4:97:81:c2:69:4b:5f:74:d6:
1b:0e:e4:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQSHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDE0MTQ3WhcNMjUwMjEyMDE0MTQ3WjAYMRYw
FAYDVQQDEw02NzgwN2FkZS1mZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtAgxAAgpq4WkonYHnIFAysS/XEGy/Pw//KUbfuG4etSIUsJ3nO/wNhCn
BKsk7/KkNhw+SX6rvbXhnESZ/wfFvkKVo5lHBMHVEVBJdXIxXiKb9RCTrj8hjF1B
1hfyqhPEzOJa9CJV3MCJHjxcOkXjUsRoNWHUj4APOcMyUrMXZN7LmE1c0SX+ImYT
HHWuvvtFq1byvMHe68yhkj4/49yBV5EGWI+GpVvQ5DSLFvDFIKhvl07KAXNmKPlm
tUVvg4qM+J+7TVtvj08CGZ3fI4UccngtMDmXbNQKI40xgQ6rD3MfFRqhcbe7vG9s
VcMctGWWsVZ9Xyu408nmcveX3M2xtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMSx
bkjFqhPO3uCrbahs1fFOiKVvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRkI3MEQ4NkNFRjQxMUVGQjczNjBDOUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcbkMA0GCSqGSIb3DQEBCwUA
A4IBAQBe8Idr2XvtqS98h56IRcsD6oB2H1MsU835MRQKctCbwhSd088Yo39E8n9I
UmxP8i8+jbVFjtGxwcdcLEIzpL6Z2w8DJln9DbbNK+Two2AHnD2DQADBsjoGJIOY
PZh3NDmU1ZpJdHUBDcoCZdOTBA0hRWjF6jWsc4xFLFH2yjHh2HNajA5mF4MutaTc
pLH5FKgKYNqjuFsuB9t515SVkzwsDtb8UzdgV3oKcfJ9qMYYixu6K1/KKzdRnfuV
BBiSo12xWNBs1+fX1HL8fHM4cI0m4nzPzaN7R8ZW5RaPvhEeUseEWUe6mBlW0LBp
NWLygQLjWsjUl4HCaUtfdNYbDuSZ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:41 2025 by rpki-client