Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F1F072C3F811EFA593A446762E951A.roa
File: 11F1F072C3F811EFA593A446762E951A.roa (raw, json)
Hash identifier: C9enSVYgcckc519Z6XB9nP2TxnzYHI9eEZfs9aAw/Sw=
Subject key identifier: 8F:DE:A1:84:4F:AB:5B:BE:12:3C:BB:E7:C2:49:85:FF:30:90:8F:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F1F072C3F811EFA593A446762E951A.roa
Signing time: Fri 27 Dec 2024 02:12:49 +0000
ROA not before: Fri 27 Dec 2024 02:12:45 +0000
ROA not after: Sun 12 Dec 2027 02:12:45 +0000
asID: 17561
IP address blocks: 45.194.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61314 (0xef82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:12:45 2024 GMT
Not After : Dec 12 02:12:45 2027 GMT
Subject: CN=676e0d21-d856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:c1:e9:bc:0a:42:5a:b2:6c:e5:ed:1b:3d:
b8:e6:f9:82:ff:02:e9:9a:04:69:5b:1f:c8:4f:55:
28:98:bd:40:10:55:84:85:85:dc:13:36:7c:a9:fa:
ab:57:41:6a:a6:98:fb:c7:e4:ea:f7:93:67:52:a8:
ff:5a:01:76:de:bd:90:9d:09:50:df:f2:a6:30:08:
03:0a:6a:74:ce:dd:f1:8d:e8:04:51:f8:37:a8:3f:
cb:6d:c4:1e:44:7e:94:32:76:05:c4:2a:f8:78:1a:
4f:04:74:64:f4:9e:ac:7b:76:30:e4:30:11:5c:67:
de:20:e5:d8:8f:6f:01:b4:10:30:31:f2:dc:a0:7e:
d1:e4:69:9e:66:d7:02:22:a3:c2:2c:f4:8e:52:7b:
f4:5a:ce:61:5c:e0:c4:77:05:e3:54:ac:06:36:c6:
67:8c:51:4d:24:52:03:93:3c:9e:08:bf:92:38:b3:
aa:d0:77:81:4a:ae:bf:50:02:fe:47:c7:11:b7:6d:
01:57:ab:ab:20:11:f7:98:47:ad:b2:e2:c6:95:5e:
64:44:2d:fe:29:08:4f:ac:17:c7:a4:0c:a0:87:85:
a7:50:6b:87:87:fa:ea:5c:a6:3d:e2:f7:48:5a:64:
35:41:d3:7b:80:1b:c2:26:58:fb:ae:ad:fd:c7:91:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:A1:84:4F:AB:5B:BE:12:3C:BB:E7:C2:49:85:FF:30:90:8F:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11F1F072C3F811EFA593A446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.81.0/24
Signature Algorithm: sha256WithRSAEncryption
85:98:48:ab:00:f1:11:e1:84:d0:2a:6a:f4:42:05:56:82:16:
d8:de:d9:e8:31:44:9d:46:9e:df:a7:aa:86:92:e0:04:b6:6a:
52:33:15:62:18:70:8d:c4:1d:c5:e3:13:2c:fb:08:ab:95:7d:
a0:fc:ec:00:f5:46:03:a9:e4:8d:14:fb:46:1c:87:bd:e8:ed:
01:96:be:1e:34:a8:8d:5b:97:4a:e0:07:41:90:42:0c:19:83:
a4:97:97:9d:41:86:48:5c:0f:84:d4:25:d1:a9:e4:f3:4e:b6:
f2:c7:e9:f4:95:d3:b6:e3:ed:ee:d5:18:4f:60:63:8b:3a:17:
71:0f:bf:e3:8e:67:8e:72:63:04:18:97:27:0d:25:3a:89:e6:
56:e1:5e:ea:21:68:ef:2b:3c:ca:bb:7b:0b:0a:44:24:7d:a1:
d1:c2:da:6d:ef:25:36:62:c7:a0:40:c1:38:d0:33:5d:7a:1e:
11:c7:11:27:fe:5a:b8:61:10:21:49:8d:3b:f8:84:01:0e:61:
60:34:0f:2e:a7:22:d6:6f:8b:b8:ea:e4:05:c6:a8:43:44:75:
e7:d6:34:c4:bc:a9:fe:d8:e7:48:7c:a8:85:e9:14:2b:5e:7b:
ce:fb:72:43:8b:07:62:f7:8f:25:a0:14:ba:e0:88:01:b2:5b:
36:8f:b3:81
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO+CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDIxMjQ1WhcNMjcxMjEyMDIxMjQ1WjAYMRYw
FAYDVQQDEw02NzZlMGQyMS1kODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvOzB6bwKQlqybOXtGz245vmC/wLpmgRpWx/IT1UomL1AEFWEhYXcEzZ8
qfqrV0Fqppj7x+Tq95NnUqj/WgF23r2QnQlQ3/KmMAgDCmp0zt3xjegEUfg3qD/L
bcQeRH6UMnYFxCr4eBpPBHRk9J6se3Yw5DARXGfeIOXYj28BtBAwMfLcoH7R5Gme
ZtcCIqPCLPSOUnv0Ws5hXODEdwXjVKwGNsZnjFFNJFIDkzyeCL+SOLOq0HeBSq6/
UAL+R8cRt20BV6urIBH3mEetsuLGlV5kRC3+KQhPrBfHpAygh4WnUGuHh/rqXKY9
4vdIWmQ1QdN7gBvCJlj7rq39x5GpAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI/e
oYRPq1u+Ejy758JJhf8wkI+CMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUYxRjA3MkMzRjgxMUVGQTU5M0E0NDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJRMA0GCSqGSIb3DQEBCwUA
A4IBAQCFmEirAPER4YTQKmr0QgVWghbY3tnoMUSdRp7fp6qGkuAEtmpSMxViGHCN
xB3F4xMs+wirlX2g/OwA9UYDqeSNFPtGHIe96O0Blr4eNKiNW5dK4AdBkEIMGYOk
l5edQYZIXA+E1CXRqeTzTrbyx+n0ldO24+3u1RhPYGOLOhdxD7/jjmeOcmMEGJcn
DSU6ieZW4V7qIWjvKzzKu3sLCkQkfaHRwtpt7yU2YsegQME40DNdeh4RxxEn/lq4
YRAhSY07+IQBDmFgNA8upyLWb4u46uQFxqhDRHXn1jTEvKn+2OdIfKiF6RQrXnvO
+3JDiwdi948loBS64IgBsls2j7OB
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:15 2025 by rpki-client