Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2337CF36BE7211EFB70EFCBD762E951A.roa
File: 2337CF36BE7211EFB70EFCBD762E951A.roa (raw, json)
Hash identifier: N8WKYGmmZ7q5jaTZtUah7qMlIbdJ216gnj8Vl4hBsXA=
Subject key identifier: 28:8D:AB:DE:2C:CA:09:82:65:A6:97:50:B7:A5:C3:5D:92:A0:07:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2337CF36BE7211EFB70EFCBD762E951A.roa
Signing time: Fri 20 Dec 2024 01:31:30 +0000
ROA not before: Fri 20 Dec 2024 01:31:26 +0000
ROA not after: Wed 10 Dec 2025 01:31:26 +0000
asID: 984
IP address blocks: 45.206.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58872 (0xe5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:31:26 2024 GMT
Not After : Dec 10 01:31:26 2025 GMT
Subject: CN=6764c8f2-e737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:82:81:0b:fc:65:22:a2:b1:17:b2:4f:52:1c:
16:49:5f:54:55:20:58:ac:09:d4:e5:25:52:ae:bd:
0e:be:ab:20:0c:79:6a:c2:e6:e0:30:b1:47:5e:16:
75:97:06:30:a1:81:78:8b:c8:bf:a0:7a:56:e3:db:
97:7f:54:6c:74:58:65:df:d5:4c:f3:d0:dc:2c:16:
47:d5:87:d0:42:5f:7e:97:07:40:7a:85:8a:de:d9:
ee:bd:06:d6:ef:af:ce:f2:bd:23:56:d9:b0:63:22:
a0:ea:ad:84:a5:1d:13:66:37:f1:78:6c:6c:00:c3:
8c:00:ff:fb:be:8e:d2:bb:b9:db:cf:ff:4c:c5:f3:
c5:4c:16:b7:11:9f:25:60:bf:1e:6e:20:52:b3:2b:
68:00:ce:71:4d:07:43:c6:f0:c8:8d:74:76:f1:e0:
37:e9:d3:09:10:4e:02:e1:18:4e:62:15:4f:f1:9b:
b2:0d:6e:d9:7e:70:2c:2c:0c:b3:38:b5:44:7f:ec:
3f:35:5f:6d:b2:c2:95:3c:da:a2:cf:9c:ba:d2:78:
e3:61:b8:ac:77:ba:6c:05:de:fc:24:65:1f:1a:9b:
49:6d:9e:fd:94:ad:11:47:d9:a6:7e:23:1b:ad:06:
e8:74:b0:24:85:46:46:61:54:b5:4e:aa:f6:23:7b:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:AB:DE:2C:CA:09:82:65:A6:97:50:B7:A5:C3:5D:92:A0:07:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2337CF36BE7211EFB70EFCBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:91:7c:96:d6:af:50:aa:c1:7c:68:b4:cd:e7:02:d6:20:56:
73:63:f2:ef:51:b4:f8:65:51:29:57:e5:40:15:02:72:a1:82:
fe:7c:b9:57:05:06:27:7c:6f:4c:6a:2f:68:38:30:74:c4:f3:
59:0c:0f:e0:96:57:73:d4:8e:49:98:cd:99:39:a7:31:1c:c6:
d4:9d:58:5c:40:6e:f4:21:86:6a:27:a8:6b:8b:24:04:1d:2d:
30:e5:ef:12:5c:d2:73:fd:f3:20:14:ee:81:c7:ff:9c:a1:c4:
cc:f8:f2:84:0e:fb:45:34:06:98:6c:44:55:8a:3c:7a:52:19:
e1:c1:30:83:8b:0f:07:51:9b:12:f4:62:3b:cf:7b:4a:7a:af:
ab:41:36:8f:df:13:65:62:e1:6c:02:69:ea:06:d0:29:5a:7c:
3e:3f:73:3a:c3:33:2a:8e:0d:a3:92:5f:50:86:bc:0e:47:21:
4b:42:49:9c:fa:08:21:76:57:ce:b6:b6:da:ed:ef:a3:6a:20:
4d:34:bc:fd:7a:14:83:fe:50:6a:91:93:85:31:1c:a7:c3:83:
30:23:f7:8f:1c:4d:fa:81:b4:68:90:a1:63:20:c8:fc:4e:61:
1b:fb:6d:39:c4:52:a9:fd:c5:39:05:16:45:6d:e1:95:31:40:
6c:4a:ab:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOX4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDEzMTI2WhcNMjUxMjEwMDEzMTI2WjAYMRYw
FAYDVQQDEw02NzY0YzhmMi1lNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9YKBC/xlIqKxF7JPUhwWSV9UVSBYrAnU5SVSrr0OvqsgDHlqwubgMLFH
XhZ1lwYwoYF4i8i/oHpW49uXf1RsdFhl39VM89DcLBZH1YfQQl9+lwdAeoWK3tnu
vQbW76/O8r0jVtmwYyKg6q2EpR0TZjfxeGxsAMOMAP/7vo7Su7nbz/9MxfPFTBa3
EZ8lYL8ebiBSsytoAM5xTQdDxvDIjXR28eA36dMJEE4C4RhOYhVP8ZuyDW7ZfnAs
LAyzOLVEf+w/NV9tssKVPNqiz5y60njjYbisd7psBd78JGUfGptJbZ79lK0RR9mm
fiMbrQbodLAkhUZGYVS1Tqr2I3vLaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCiN
q94sygmCZaaXULelw12SoAfiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMzM3Q0YzNkJFNzIxMUVGQjcwRUZDQkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc57MA0GCSqGSIb3DQEBCwUA
A4IBAQA1kXyW1q9QqsF8aLTN5wLWIFZzY/LvUbT4ZVEpV+VAFQJyoYL+fLlXBQYn
fG9Mai9oODB0xPNZDA/glldz1I5JmM2ZOacxHMbUnVhcQG70IYZqJ6hriyQEHS0w
5e8SXNJz/fMgFO6Bx/+cocTM+PKEDvtFNAaYbERVijx6UhnhwTCDiw8HUZsS9GI7
z3tKeq+rQTaP3xNlYuFsAmnqBtApWnw+P3M6wzMqjg2jkl9QhrwORyFLQkmc+ggh
dlfOtrba7e+jaiBNNLz9ehSD/lBqkZOFMRynw4MwI/ePHE36gbRokKFjIMj8TmEb
+205xFKp/cU5BRZFbeGVMUBsSqsK
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:13 2025 by rpki-client