Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D5CD84C3F711EF942224BF762E951A.roa
File: 17D5CD84C3F711EF942224BF762E951A.roa (raw, json)
Hash identifier: qu7nvUpus9AeeFbeJOwQRhGXUPmsSm6+bNufg855qqY=
Subject key identifier: BE:58:0F:D7:87:FC:B9:31:7F:49:C4:13:FC:5F:33:8C:C3:B6:D2:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D5CD84C3F711EF942224BF762E951A.roa
Signing time: Fri 27 Dec 2024 02:05:50 +0000
ROA not before: Fri 27 Dec 2024 02:05:45 +0000
ROA not after: Fri 12 Dec 2025 02:05:45 +0000
asID: 984
IP address blocks: 45.194.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61304 (0xef78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:05:45 2024 GMT
Not After : Dec 12 02:05:45 2025 GMT
Subject: CN=676e0b7e-163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:37:64:40:45:3a:af:13:c8:2a:96:9e:25:
fc:00:47:42:3f:8a:12:54:30:d1:f3:3a:af:9d:43:
81:89:37:49:76:cf:8e:96:d4:1d:90:20:9e:49:a3:
1c:fb:b0:8a:87:7a:4c:2e:06:7b:da:4e:41:50:ac:
d6:14:d3:b8:36:bc:75:50:60:10:4a:67:6e:de:4e:
91:5d:e2:de:91:00:19:af:c6:6b:00:b6:1f:46:76:
da:7a:a4:27:f5:c9:35:af:91:ce:0b:bd:07:4d:23:
21:02:3e:be:d0:72:b4:ef:5f:a0:2b:ba:c5:75:b9:
6a:f7:a2:76:8b:05:6c:69:78:81:0a:af:c5:27:e0:
4a:98:2e:36:19:22:07:62:01:90:f9:63:84:5d:56:
b0:d4:c3:c0:4f:34:86:4f:6f:da:26:f9:97:90:25:
6f:7a:92:21:bf:48:c9:03:cd:5a:ef:65:1b:f1:d2:
d5:00:fb:02:15:fc:0b:75:e9:c1:ca:5d:32:ae:a4:
53:8c:eb:71:9d:8e:d8:fc:2e:5b:35:ea:ec:31:5f:
5d:3f:81:b0:04:38:9c:17:99:1f:cf:bc:d3:59:96:
d7:89:e7:e9:3d:40:ce:de:72:55:a2:33:83:10:47:
25:ba:ca:30:0d:72:8c:b0:73:4f:ae:50:c8:8b:f5:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:58:0F:D7:87:FC:B9:31:7F:49:C4:13:FC:5F:33:8C:C3:B6:D2:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D5CD84C3F711EF942224BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.15.0/24
Signature Algorithm: sha256WithRSAEncryption
31:66:32:ec:e2:10:1c:ca:66:77:f8:e1:5b:75:58:7f:50:a8:
57:34:af:cd:6d:51:66:9a:cc:f3:b4:25:63:2a:54:97:d6:b2:
8f:5a:ea:0c:0c:15:c5:2d:ba:54:e4:08:fb:17:7f:17:77:8f:
2d:6c:3f:69:f6:f6:11:96:60:ad:c8:2a:aa:09:4d:3e:1d:88:
7e:fb:6e:ce:bb:0a:1b:27:77:91:d5:ea:04:c4:86:3a:4d:25:
c3:87:52:cc:81:f9:35:7c:96:b0:c7:b4:de:46:7c:28:24:a5:
b1:66:75:01:99:30:15:28:26:b5:e1:5a:e9:02:2b:3b:00:46:
d4:40:ec:4d:f0:86:fe:de:4a:62:6a:ad:f1:49:bf:8c:4d:3a:
5d:a3:64:59:9b:74:0c:ab:0c:26:b5:85:ee:0c:da:7f:62:51:
1b:33:83:97:28:2e:92:79:17:49:aa:46:ba:36:d5:68:41:f3:
ed:11:bb:ea:9a:3e:30:5f:ff:d8:08:c7:06:29:53:ac:7a:1a:
99:12:1e:78:e4:04:34:d0:b6:e8:7a:d3:8e:05:24:0e:db:b6:
bf:cf:f3:03:81:e8:68:53:24:cf:0b:2a:6d:bf:0f:2b:74:5b:
65:1a:b7:5f:61:af:05:d0:b3:ff:be:03:12:07:f9:2f:7f:20:
54:5d:c6:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO94MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDIwNTQ1WhcNMjUxMjEyMDIwNTQ1WjAYMRYw
FAYDVQQDEw02NzZlMGI3ZS0xNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2sM3ZEBFOq8TyCqWniX8AEdCP4oSVDDR8zqvnUOBiTdJds+OltQdkCCe
SaMc+7CKh3pMLgZ72k5BUKzWFNO4Nrx1UGAQSmdu3k6RXeLekQAZr8ZrALYfRnba
eqQn9ck1r5HOC70HTSMhAj6+0HK071+gK7rFdblq96J2iwVsaXiBCq/FJ+BKmC42
GSIHYgGQ+WOEXVaw1MPATzSGT2/aJvmXkCVvepIhv0jJA81a72Ub8dLVAPsCFfwL
denByl0yrqRTjOtxnY7Y/C5bNersMV9dP4GwBDicF5kfz7zTWZbXiefpPUDO3nJV
ojODEEclusowDXKMsHNPrlDIi/XniwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL5Y
D9eH/Lkxf0nEE/xfM4zDttI2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xN0Q1Q0Q4NEMzRjcxMUVGOTQyMjI0QkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIPMA0GCSqGSIb3DQEBCwUA
A4IBAQAxZjLs4hAcymZ3+OFbdVh/UKhXNK/NbVFmmszztCVjKlSX1rKPWuoMDBXF
LbpU5Aj7F38Xd48tbD9p9vYRlmCtyCqqCU0+HYh++27OuwobJ3eR1eoExIY6TSXD
h1LMgfk1fJawx7TeRnwoJKWxZnUBmTAVKCa14VrpAis7AEbUQOxN8Ib+3kpiaq3x
Sb+MTTpdo2RZm3QMqwwmtYXuDNp/YlEbM4OXKC6SeRdJqka6NtVoQfPtEbvqmj4w
X//YCMcGKVOsehqZEh545AQ00LboetOOBSQO27a/z/MDgehoUyTPCyptvw8rdFtl
GrdfYa8F0LP/vgMSB/kvfyBUXcbr
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:23 2025 by rpki-client