Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13A21B8ECDA511EF9C3AB04F762E951A.roa
File: 13A21B8ECDA511EF9C3AB04F762E951A.roa (raw, json)
Hash identifier: 27KS9WwE171+4V8ORJAfqtUGveLZ8eewVd/OxkeVxvQ=
Subject key identifier: 50:FB:3C:2D:7C:35:26:72:06:2C:48:3B:9F:83:F3:8D:4C:89:4B:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01011B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13A21B8ECDA511EF9C3AB04F762E951A.roa
Signing time: Wed 08 Jan 2025 09:43:55 +0000
ROA not before: Wed 08 Jan 2025 09:43:52 +0000
ROA not after: Thu 23 Dec 2027 09:43:52 +0000
asID: 17561
IP address blocks: 45.202.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65819 (0x1011b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:43:52 2025 GMT
Not After : Dec 23 09:43:52 2027 GMT
Subject: CN=677e48db-3ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:b5:f4:71:2a:9e:c8:05:50:ef:04:dc:d7:
7c:19:b9:28:80:04:7c:d1:52:8c:b0:16:fd:ac:62:
ef:09:76:6c:47:32:be:4e:32:e1:c4:fd:5c:fb:9e:
e8:e4:43:16:c8:ea:3e:15:28:2a:68:63:e3:91:fb:
41:19:fa:25:34:20:8c:d4:6e:80:73:de:f1:67:da:
d9:b6:a2:98:8f:45:da:80:84:36:50:97:03:d0:65:
73:5e:7e:18:4c:5f:af:fb:93:9d:09:c0:87:6c:6c:
15:ff:f5:9f:0a:87:28:ae:66:02:38:38:07:fe:a4:
a5:be:d4:76:1c:a7:58:d5:1a:8c:c2:29:bb:87:75:
4d:34:bd:1d:5b:d0:3c:cf:28:e7:9c:78:93:13:9e:
c7:37:be:21:0d:f4:16:20:c7:c9:db:07:3b:06:9f:
05:90:fa:f6:6f:a6:15:95:39:31:e0:5e:c9:2e:21:
d5:d6:ff:2b:93:4c:59:0f:5c:54:fb:b0:fb:67:67:
42:d5:5a:10:20:d0:f8:d7:a7:61:83:7a:61:aa:9d:
b2:55:a9:d3:5f:49:8b:33:91:36:80:68:9c:19:1e:
56:10:24:91:66:95:2c:39:1a:e7:90:1f:17:5f:1c:
f7:86:d7:5a:83:a2:2d:a4:c1:1c:3d:bd:13:be:a7:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:3C:2D:7C:35:26:72:06:2C:48:3B:9F:83:F3:8D:4C:89:4B:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13A21B8ECDA511EF9C3AB04F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e0:63:5a:1b:3e:de:46:5e:c9:2e:00:7e:81:be:b0:05:f9:
25:24:e7:61:64:a4:5c:5f:9b:cd:c0:c4:0c:1f:9f:66:b8:4b:
7f:86:0c:c7:8f:fa:ab:c9:d7:ab:28:41:03:eb:45:90:83:82:
70:ab:8f:57:e2:fd:26:10:55:55:77:e6:6f:41:08:a2:de:c6:
f9:f9:15:7a:6e:f9:5c:d6:76:51:e1:67:b6:03:01:b4:02:95:
48:7f:eb:f6:bf:b3:e4:b0:51:52:94:54:25:81:0f:b0:f4:b8:
f4:63:2f:65:1f:a7:88:98:5f:e2:4f:ce:9d:2a:33:7c:e7:6e:
90:af:5a:96:a9:52:c7:1b:19:6c:e9:1a:92:ed:95:36:1e:92:
28:b7:cb:c4:0c:90:5a:6e:d8:64:8e:65:58:13:d9:a8:19:ff:
89:4a:96:df:fa:86:a7:58:b2:f6:ee:07:4f:21:4b:8c:91:da:
da:ac:e5:5e:f0:f6:e8:93:9f:2e:78:7e:d4:2c:bb:34:8c:75:
bf:f7:db:7f:36:33:39:46:25:e6:c4:1c:8a:80:d5:29:11:6e:
dc:24:2b:32:42:35:8b:3c:86:41:b4:0a:3e:13:a7:8d:8e:54:
a5:f9:4e:f3:5b:cc:bf:6a:2f:c1:ad:41:cf:87:95:90:78:fe:
6d:94:e4:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQEbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDk0MzUyWhcNMjcxMjIzMDk0MzUyWjAYMRYw
FAYDVQQDEw02NzdlNDhkYi0zY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8XC19HEqnsgFUO8E3Nd8GbkogAR80VKMsBb9rGLvCXZsRzK+TjLhxP1c
+57o5EMWyOo+FSgqaGPjkftBGfolNCCM1G6Ac97xZ9rZtqKYj0XagIQ2UJcD0GVz
Xn4YTF+v+5OdCcCHbGwV//WfCocormYCODgH/qSlvtR2HKdY1RqMwim7h3VNNL0d
W9A8zyjnnHiTE57HN74hDfQWIMfJ2wc7Bp8FkPr2b6YVlTkx4F7JLiHV1v8rk0xZ
D1xU+7D7Z2dC1VoQIND416dhg3phqp2yVanTX0mLM5E2gGicGR5WECSRZpUsORrn
kB8XXxz3htdag6ItpMEcPb0Tvqe/HQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFD7
PC18NSZyBixIO5+D841MiUtrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xM0EyMUI4RUNEQTUxMUVGOUMzQUIwNEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcrPMA0GCSqGSIb3DQEBCwUA
A4IBAQBc4GNaGz7eRl7JLgB+gb6wBfklJOdhZKRcX5vNwMQMH59muEt/hgzHj/qr
yderKEED60WQg4Jwq49X4v0mEFVVd+ZvQQii3sb5+RV6bvlc1nZR4We2AwG0ApVI
f+v2v7PksFFSlFQlgQ+w9Lj0Yy9lH6eImF/iT86dKjN8526Qr1qWqVLHGxls6RqS
7ZU2HpIot8vEDJBabthkjmVYE9moGf+JSpbf+oanWLL27gdPIUuMkdrarOVe8Pbo
k58ueH7ULLs0jHW/99t/NjM5RiXmxByKgNUpEW7cJCsyQjWLPIZBtAo+E6eNjlSl
+U7zW8y/ai/BrUHPh5WQeP5tlOTn
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:57 2025 by rpki-client