Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242A5688D24B11EF92D49B49762E951A.roa
File: 242A5688D24B11EF92D49B49762E951A.roa (raw, json)
Hash identifier: DSZhm/4GNEJU432Dut80b3EnzQBWWjRlCCrIIwOUtl0=
Subject key identifier: DA:75:C4:3B:DE:8C:F4:DD:A7:E2:3D:5D:00:02:17:39:1A:87:CB:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242A5688D24B11EF92D49B49762E951A.roa
Signing time: Tue 14 Jan 2025 07:42:44 +0000
ROA not before: Tue 14 Jan 2025 07:42:41 +0000
ROA not after: Sun 11 Jan 2026 07:42:41 +0000
asID: 151206
IP address blocks: 45.200.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67314 (0x106f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:42:41 2025 GMT
Not After : Jan 11 07:42:41 2026 GMT
Subject: CN=67861574-e6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:4f:c9:30:a1:7a:d7:37:e8:b8:a4:7e:59:
3e:ba:85:8b:15:c0:05:2a:6c:ee:0b:fa:79:6e:fb:
23:5d:0e:89:4b:e2:2a:53:82:3f:8f:3c:5b:e9:06:
22:9c:62:16:05:e1:7a:8d:2e:4f:93:40:46:19:0c:
08:22:de:d2:bf:15:41:d8:d8:2b:79:d4:58:b7:10:
a2:e5:98:5c:16:4f:bd:cf:06:90:97:88:87:ad:dd:
56:ae:8e:e5:ef:09:11:33:50:e9:37:61:2d:02:90:
86:78:75:df:29:99:df:1e:12:5f:ed:57:24:66:a5:
08:9a:1d:72:1e:21:b7:60:99:29:15:d6:54:64:56:
21:95:da:3f:97:54:d7:c5:ba:4e:10:de:b7:4a:24:
b0:41:67:3b:45:a5:6b:7f:c3:7e:74:52:96:20:52:
8e:bb:1c:4a:e7:6b:81:5c:47:03:e3:0a:07:7a:c8:
c4:0d:a1:26:f9:a0:83:bb:cb:fa:c0:01:5d:b5:4a:
bb:1f:01:b2:4d:8d:c7:db:f0:6d:c6:c1:a2:5e:c5:
87:15:99:84:2b:6f:e0:86:a2:06:7a:37:7f:bd:fd:
8f:e1:16:69:b0:ff:7b:38:0c:1a:69:1b:22:f4:14:
2b:bd:b8:64:6d:f8:95:f2:66:40:2a:7a:40:a5:51:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:75:C4:3B:DE:8C:F4:DD:A7:E2:3D:5D:00:02:17:39:1A:87:CB:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/242A5688D24B11EF92D49B49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.123.0/24
Signature Algorithm: sha256WithRSAEncryption
25:47:37:ef:03:3f:81:7f:68:c4:05:ef:c9:c2:6c:62:65:f0:
28:53:50:52:21:30:71:50:52:58:84:22:50:d0:31:d9:69:59:
ed:f8:35:d2:db:54:9a:c8:c9:26:04:70:2c:ca:e8:67:2b:31:
a9:49:c5:09:2a:77:78:52:31:55:66:4e:19:cf:08:2c:6a:2e:
3a:87:d0:16:e0:b2:47:d4:26:8f:38:ac:b2:99:e2:43:b3:11:
2e:23:a1:db:52:1e:1f:af:47:e2:ed:63:1b:f3:f9:86:51:53:
ca:d2:fe:a2:ea:c6:40:c9:a7:65:b0:ff:f0:ee:06:52:a0:5d:
b6:06:e8:f9:22:5c:8e:49:39:f0:2c:6b:66:31:20:54:e3:b4:
0b:ca:ca:27:0b:79:b6:35:b4:e1:37:84:c0:53:a4:93:05:bf:
00:cf:01:f9:50:2d:44:99:64:40:fb:9a:ff:c6:c0:68:7f:d4:
7f:85:ee:de:cf:98:1e:35:10:66:81:7a:5b:a8:8d:f9:8e:ec:
d0:59:17:c0:52:21:3b:e4:df:d7:6d:a7:e8:8a:1a:85:ff:a2:
f4:60:a7:32:48:24:80:54:7b:6d:ec:95:35:52:6f:1f:40:31:
46:e4:83:84:88:34:b2:90:80:bc:de:d1:5a:0f:11:35:d5:98:
1a:6e:58:8d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQbyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE0MDc0MjQxWhcNMjYwMTExMDc0MjQxWjAYMRYw
FAYDVQQDEw02Nzg2MTU3NC1lNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4+tPyTChetc36Likflk+uoWLFcAFKmzuC/p5bvsjXQ6JS+IqU4I/jzxb
6QYinGIWBeF6jS5Pk0BGGQwIIt7SvxVB2NgredRYtxCi5ZhcFk+9zwaQl4iHrd1W
ro7l7wkRM1DpN2EtApCGeHXfKZnfHhJf7VckZqUImh1yHiG3YJkpFdZUZFYhldo/
l1TXxbpOEN63SiSwQWc7RaVrf8N+dFKWIFKOuxxK52uBXEcD4woHesjEDaEm+aCD
u8v6wAFdtUq7HwGyTY3H2/BtxsGiXsWHFZmEK2/ghqIGejd/vf2P4RZpsP97OAwa
aRsi9BQrvbhkbfiV8mZAKnpApVEdgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNp1
xDvejPTdp+I9XQACFzkah8sDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDJBNTY4OEQyNEIxMUVGOTJENDlCNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALch7MA0GCSqGSIb3DQEBCwUA
A4IBAQAlRzfvAz+Bf2jEBe/JwmxiZfAoU1BSITBxUFJYhCJQ0DHZaVnt+DXS21Sa
yMkmBHAsyuhnKzGpScUJKnd4UjFVZk4Zzwgsai46h9AW4LJH1CaPOKyymeJDsxEu
I6HbUh4fr0fi7WMb8/mGUVPK0v6i6sZAyadlsP/w7gZSoF22Buj5IlyOSTnwLGtm
MSBU47QLysonC3m2NbThN4TAU6STBb8AzwH5UC1EmWRA+5r/xsBof9R/he7ez5ge
NRBmgXpbqI35juzQWRfAUiE75N/XbafoihqF/6L0YKcySCSAVHtt7JU1Um8fQDFG
5IOEiDSykIC83tFaDxE11ZgabliN
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:42 2025 by rpki-client