Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/224E2C14C39F11EF89AD288B762E951A.roa
File: 224E2C14C39F11EF89AD288B762E951A.roa (raw, json)
Hash identifier: GgyEMCEiIIbh6zAGF/5n4JsQp4JrSlVcalD1xvkD+xU=
Subject key identifier: 02:5B:32:FC:7E:9C:46:A6:60:4A:E9:C6:73:86:AA:EF:B3:30:F9:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/224E2C14C39F11EF89AD288B762E951A.roa
Signing time: Thu 26 Dec 2024 15:36:11 +0000
ROA not before: Thu 26 Dec 2024 15:36:08 +0000
ROA not after: Fri 12 Dec 2025 15:36:08 +0000
asID: 984
IP address blocks: 45.199.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60803 (0xed83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:36:08 2024 GMT
Not After : Dec 12 15:36:08 2025 GMT
Subject: CN=676d77eb-6cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:8e:ef:68:83:a1:17:ac:e9:9b:87:1a:c3:
f5:6e:9c:1f:54:13:b0:f5:11:ac:99:e2:77:ec:7e:
d9:ff:f6:bc:7b:96:01:0e:99:2b:20:40:64:e6:ee:
c6:ce:40:61:31:19:cb:21:f2:b5:1d:63:a3:aa:d2:
d9:50:2a:c5:5f:ba:8b:e0:85:5d:2e:2b:d1:56:35:
ff:a3:8e:45:39:17:1b:dd:2b:0f:10:17:32:e5:1b:
82:97:ab:16:49:1d:d1:a6:71:a3:66:69:78:a6:31:
9a:60:1b:cb:9b:cf:3e:4a:fa:05:19:7d:3f:47:d9:
73:89:d4:bf:3a:0a:6a:48:21:d3:69:3a:4c:b3:c4:
e2:57:98:0d:95:96:85:af:48:50:1d:f7:1e:ed:1a:
c6:eb:63:1e:3b:36:29:90:df:8d:8f:24:14:d9:78:
ca:ba:f1:75:e0:7e:c6:c5:81:c1:1e:0a:26:2e:df:
8c:4b:3f:2a:3d:3f:8f:7a:05:6a:50:d8:8c:2b:d6:
fa:58:6f:2d:6c:cc:35:ee:05:d0:9c:e6:29:ce:1b:
2f:9a:2f:51:db:cf:1f:43:1e:8d:a7:51:63:4d:d5:
5d:be:3c:4a:68:c9:56:10:d8:8a:b8:d1:6e:a5:4b:
12:08:1e:ad:eb:64:c3:9b:ca:ae:76:87:ef:00:4c:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:32:FC:7E:9C:46:A6:60:4A:E9:C6:73:86:AA:EF:B3:30:F9:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/224E2C14C39F11EF89AD288B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.191.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ca:97:78:35:90:1e:ba:39:85:e7:39:57:cb:75:66:f2:1d:
73:2a:31:53:d7:3d:37:d4:90:e0:22:7a:39:75:e1:3d:a4:ad:
8f:91:8a:b8:9b:e8:5f:58:ba:4f:87:b6:cc:fc:2b:3c:77:39:
74:88:6f:88:45:cd:75:d6:5f:85:6a:90:90:b2:70:01:e0:4c:
7d:43:80:a7:a4:59:fa:1e:39:4b:01:b4:7f:36:3b:a9:89:dd:
46:4d:8c:b0:1d:b1:c4:96:04:7b:c6:75:bc:d4:32:ab:52:4a:
3d:19:c4:89:6d:c5:96:c9:4b:e5:0e:f1:29:51:45:9e:a9:c9:
f7:a8:c8:44:ad:4c:d5:68:83:ff:d5:2f:10:00:88:04:0f:94:
cf:6e:7e:f4:44:31:74:c2:4d:f8:59:ee:4f:d4:cd:4e:22:fb:
45:46:3f:9b:42:29:45:c6:06:92:f6:a3:52:fb:04:d3:33:e6:
3a:20:b6:1c:b4:7d:74:21:cb:37:ad:ca:8d:6d:d0:aa:ee:f9:
1e:24:20:ea:16:1b:8b:78:21:83:85:a7:9c:89:7f:e7:79:d5:
c5:4e:8f:80:85:c5:84:71:f6:4d:02:70:07:7e:76:d0:6c:33:
f7:11:bf:92:29:df:fc:e5:5c:7e:52:e1:1d:b2:31:c2:eb:4c:
d4:bb:40:43
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO2DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTUzNjA4WhcNMjUxMjEyMTUzNjA4WjAYMRYw
FAYDVQQDEw02NzZkNzdlYi02Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq92O72iDoRes6ZuHGsP1bpwfVBOw9RGsmeJ37H7Z//a8e5YBDpkrIEBk
5u7GzkBhMRnLIfK1HWOjqtLZUCrFX7qL4IVdLivRVjX/o45FORcb3SsPEBcy5RuC
l6sWSR3RpnGjZml4pjGaYBvLm88+SvoFGX0/R9lzidS/OgpqSCHTaTpMs8TiV5gN
lZaFr0hQHfce7RrG62MeOzYpkN+NjyQU2XjKuvF14H7GxYHBHgomLt+MSz8qPT+P
egVqUNiMK9b6WG8tbMw17gXQnOYpzhsvmi9R288fQx6Np1FjTdVdvjxKaMlWENiK
uNFupUsSCB6t62TDm8qudofvAEyn0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAJb
Mvx+nEamYErpxnOGqu+zMPmUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMjRFMkMxNEMzOUYxMUVGODlBRDI4OEI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce/MA0GCSqGSIb3DQEBCwUA
A4IBAQBAypd4NZAeujmF5zlXy3Vm8h1zKjFT1z031JDgIno5deE9pK2PkYq4m+hf
WLpPh7bM/Cs8dzl0iG+IRc111l+FapCQsnAB4Ex9Q4CnpFn6HjlLAbR/Njupid1G
TYywHbHElgR7xnW81DKrUko9GcSJbcWWyUvlDvEpUUWeqcn3qMhErUzVaIP/1S8Q
AIgED5TPbn70RDF0wk34We5P1M1OIvtFRj+bQilFxgaS9qNS+wTTM+Y6ILYctH10
Ics3rcqNbdCq7vkeJCDqFhuLeCGDhaeciX/nedXFTo+AhcWEcfZNAnAHfnbQbDP3
Eb+SKd/85Vx+UuEdsjHC60zUu0BD
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:07 2025 by rpki-client