Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CCEDEAC3F411EFB97DACAA762E951A.roa
File: 29CCEDEAC3F411EFB97DACAA762E951A.roa (raw, json)
Hash identifier: APfmoHL/rFExA83cLR9HA9gZj3KV3mhNZXInw3o8rtg=
Subject key identifier: 22:30:81:5C:77:77:AC:D9:B7:43:75:A6:B4:EB:AC:78:46:CE:CB:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CCEDEAC3F411EFB97DACAA762E951A.roa
Signing time: Fri 27 Dec 2024 01:44:51 +0000
ROA not before: Fri 27 Dec 2024 01:44:47 +0000
ROA not after: Sun 12 Dec 2027 01:44:47 +0000
asID: 17561
IP address blocks: 45.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61296 (0xef70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:44:47 2024 GMT
Not After : Dec 12 01:44:47 2027 GMT
Subject: CN=676e0693-3641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:bc:ce:33:36:5d:ef:ea:1a:be:df:69:32:
de:20:1e:ec:3d:1f:68:5b:84:b3:0f:7a:aa:ef:5c:
a6:ba:3c:6e:8d:50:aa:0e:f7:e8:ab:ae:57:17:86:
f1:89:86:14:09:95:0b:7e:2f:37:54:0a:bc:fb:27:
dd:14:7f:ff:e9:86:b8:42:c9:72:4e:ab:d1:08:a0:
13:82:25:cc:17:2a:50:f8:f5:40:fe:78:7b:c5:4f:
da:de:53:3d:77:e3:cf:16:a6:ef:52:bd:b2:bd:fc:
db:09:2f:60:7a:3e:00:16:bb:a0:19:9e:b8:81:ec:
42:19:fd:e5:52:9c:70:ae:df:48:75:a3:d9:55:ce:
db:5d:21:cc:55:35:43:ba:dd:a0:9a:45:e6:7b:7a:
34:a6:49:c1:90:bd:86:cd:4f:27:75:54:24:5a:43:
0d:6c:aa:9e:72:23:57:55:b5:cb:bf:6f:29:c0:c2:
1e:cf:1a:c7:70:66:4a:50:36:4c:74:d6:be:81:53:
d7:d5:d5:eb:19:59:5e:67:82:c1:f9:ac:e5:31:48:
40:80:93:11:5c:44:8c:a7:59:d1:ac:dc:04:f4:ba:
4c:1c:57:2c:8b:48:ff:13:f9:e9:ce:bc:d8:9e:78:
62:29:65:3d:a3:b3:48:ad:d8:d5:d3:c4:c3:e9:35:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:30:81:5C:77:77:AC:D9:B7:43:75:A6:B4:EB:AC:78:46:CE:CB:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29CCEDEAC3F411EFB97DACAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:56:c4:9a:7b:67:03:91:89:05:5a:17:98:ad:48:bf:a6:42:
51:8f:c4:29:c8:99:5d:c0:8a:e3:e6:0b:c3:96:0a:13:3c:54:
86:e7:58:d2:81:f8:20:57:fb:b9:0a:1f:1c:f8:18:24:09:5e:
e3:1c:0b:ac:f6:c6:ad:42:88:71:3a:d9:3b:5f:d6:32:0b:af:
6d:74:79:3b:21:52:39:50:50:88:0f:c5:51:66:4f:2b:c1:1a:
3d:59:0e:62:9a:f4:5a:db:ff:6b:0e:7f:90:90:df:a1:5e:94:
5d:88:eb:a9:a3:98:42:8f:2a:0c:4e:90:8e:cf:92:34:1a:fa:
24:6c:a3:c4:dc:69:68:bb:71:70:e4:ea:d6:d2:53:fa:5e:24:
bb:bc:f8:e8:31:3f:3c:f7:56:85:cb:1d:ac:98:c9:7a:95:83:
fb:4e:0b:f9:c2:19:c5:a5:06:b7:8a:fd:6f:32:36:89:62:4f:
dd:56:cb:ef:32:e4:a9:cf:98:0e:9a:15:d1:36:93:8e:77:56:
00:e0:4b:af:d4:94:f7:ff:43:b2:65:8a:ca:4f:9c:18:af:73:
29:dd:9d:bb:2a:0a:cb:06:63:f3:7e:a0:3d:c1:88:85:4c:3b:
da:b6:1f:cc:26:ed:c9:88:71:18:30:61:e2:9b:f0:58:a2:32:
9a:0a:4a:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO9wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDE0NDQ3WhcNMjcxMjEyMDE0NDQ3WjAYMRYw
FAYDVQQDEw02NzZlMDY5My0zNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApqm8zjM2Xe/qGr7faTLeIB7sPR9oW4SzD3qq71ymujxujVCqDvfoq65X
F4bxiYYUCZULfi83VAq8+yfdFH//6Ya4QslyTqvRCKATgiXMFypQ+PVA/nh7xU/a
3lM9d+PPFqbvUr2yvfzbCS9gej4AFrugGZ64gexCGf3lUpxwrt9IdaPZVc7bXSHM
VTVDut2gmkXme3o0pknBkL2GzU8ndVQkWkMNbKqeciNXVbXLv28pwMIezxrHcGZK
UDZMdNa+gVPX1dXrGVleZ4LB+azlMUhAgJMRXESMp1nRrNwE9LpMHFcsi0j/E/np
zrzYnnhiKWU9o7NIrdjV08TD6TUzSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCIw
gVx3d6zZt0N1prTrrHhGzstoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOUNDRURFQUMzRjQxMUVGQjk3REFDQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcILMA0GCSqGSIb3DQEBCwUA
A4IBAQC2VsSae2cDkYkFWheYrUi/pkJRj8QpyJldwIrj5gvDlgoTPFSG51jSgfgg
V/u5Ch8c+BgkCV7jHAus9satQohxOtk7X9YyC69tdHk7IVI5UFCID8VRZk8rwRo9
WQ5imvRa2/9rDn+QkN+hXpRdiOupo5hCjyoMTpCOz5I0GvokbKPE3Glou3Fw5OrW
0lP6XiS7vPjoMT8891aFyx2smMl6lYP7Tgv5whnFpQa3iv1vMjaJYk/dVsvvMuSp
z5gOmhXRNpOOd1YA4Euv1JT3/0OyZYrKT5wYr3Mp3Z27KgrLBmPzfqA9wYiFTDva
th/MJu3JiHEYMGHim/BYojKaCkqH
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:47 2025 by rpki-client