Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E999644ACA111EFB1CF79A2762E951A.roa
File: 2E999644ACA111EFB1CF79A2762E951A.roa (raw, json)
Hash identifier: uousFeg+EQ1isCpP88AJ4tZx56cx8Se/jrLtZOeJDwc=
Subject key identifier: D1:94:66:96:C3:BA:27:8D:24:5B:28:D0:1B:CC:87:B5:41:0F:E2:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DBD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E999644ACA111EFB1CF79A2762E951A.roa
Signing time: Wed 27 Nov 2024 09:22:54 +0000
ROA not before: Wed 27 Nov 2024 09:22:51 +0000
ROA not after: Tue 11 Feb 2025 09:22:51 +0000
asID: 7029
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56276 (0xdbd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 27 09:22:51 2024 GMT
Not After : Feb 11 09:22:51 2025 GMT
Subject: CN=6746e4ee-927b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:be:92:e6:21:51:87:dc:90:0d:92:62:c4:
d9:8a:13:2d:06:c3:c1:60:ee:8d:d3:92:e7:8c:fe:
ef:e1:55:67:f0:a0:62:d5:c8:22:2f:b0:00:cc:94:
cc:b8:b4:c6:88:72:cf:60:c1:a4:f6:6f:fa:1b:6c:
6e:01:28:b6:e8:a4:39:a4:d1:2f:d4:e4:70:89:17:
fc:33:a1:31:aa:5c:f9:7d:f1:90:34:6a:f2:92:dc:
26:97:6a:c1:9c:0a:9f:e5:43:da:4f:a4:e8:11:1d:
dc:c7:b6:c2:7f:ec:b9:f4:97:e9:cb:82:66:9d:75:
1b:f3:46:38:44:df:be:af:8b:ba:b0:d9:17:c5:d7:
cf:9c:8c:31:4c:ab:23:bf:7c:77:53:c2:d0:27:28:
eb:98:7b:33:74:1e:ff:00:06:a2:b1:72:19:4b:88:
1a:2b:6d:a3:f0:5a:ab:50:2d:d3:5f:78:ee:19:60:
60:1d:83:ac:5a:14:2d:ba:1c:ee:56:20:eb:7d:c6:
b1:07:88:89:58:fc:7b:58:14:31:77:a8:bf:9a:3e:
e0:57:2c:0a:4a:61:22:59:1a:6c:93:ba:82:d2:ca:
c8:25:14:81:79:b6:12:9c:5e:70:8d:d3:da:16:3f:
97:23:bb:c2:ad:6d:41:69:e9:e9:c0:19:9e:b9:3f:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:66:96:C3:BA:27:8D:24:5B:28:D0:1B:CC:87:B5:41:0F:E2:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E999644ACA111EFB1CF79A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
76:c5:80:62:c2:05:ba:d4:64:1d:94:8c:97:6a:71:d8:06:d3:
6a:37:8e:f2:79:3b:28:57:bc:3e:88:98:df:49:68:28:19:42:
7b:32:f5:99:4c:9a:8f:6b:94:e4:45:e5:14:6e:e0:32:dd:52:
20:9a:66:ac:83:cc:31:21:83:ab:74:47:f9:90:2a:56:88:a7:
05:54:c2:3e:dc:cf:46:22:d4:04:4e:52:1d:e8:e8:4e:0f:82:
8b:79:bd:3d:04:2f:07:37:c7:6b:3d:af:89:22:39:f1:29:38:
fb:4d:6e:eb:cf:f9:eb:07:b1:ed:f0:cb:ca:e7:b3:a0:06:0d:
81:a0:a0:f6:a4:44:f8:8c:63:3c:2b:ff:b7:44:50:f6:0f:51:
24:c9:5d:e2:2c:0f:50:7d:1b:97:e0:e2:00:1b:57:7c:82:83:
f2:94:ba:e5:b9:e2:9b:56:92:1c:4a:0d:29:65:d0:4b:23:9b:
01:08:d0:18:8d:5a:37:9d:83:bd:db:ac:2c:7d:a7:11:dc:1c:
f4:f0:aa:7e:db:54:d8:a0:5a:b6:8d:a8:ba:ac:4a:c8:aa:22:
7f:eb:e8:60:16:23:7a:56:b2:17:5e:ac:ff:d2:a4:4a:12:4d:
75:b6:ad:9a:b5:9d:cc:15:b7:a7:d0:27:b4:43:1b:e0:39:d6:
1b:8d:73:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANvUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTI3MDkyMjUxWhcNMjUwMjExMDkyMjUxWjAYMRYw
FAYDVQQDEw02NzQ2ZTRlZS05MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApg6+kuYhUYfckA2SYsTZihMtBsPBYO6N05LnjP7v4VVn8KBi1cgiL7AA
zJTMuLTGiHLPYMGk9m/6G2xuASi26KQ5pNEv1ORwiRf8M6Exqlz5ffGQNGryktwm
l2rBnAqf5UPaT6ToER3cx7bCf+y59Jfpy4JmnXUb80Y4RN++r4u6sNkXxdfPnIwx
TKsjv3x3U8LQJyjrmHszdB7/AAaisXIZS4gaK22j8FqrUC3TX3juGWBgHYOsWhQt
uhzuViDrfcaxB4iJWPx7WBQxd6i/mj7gVywKSmEiWRpsk7qC0srIJRSBebYSnF5w
jdPaFj+XI7vCrW1BaenpwBmeuT/YTwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNGU
ZpbDuieNJFso0BvMh7VBD+K0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRTk5OTY0NEFDQTExMUVGQjFDRjc5QTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQwMA0GCSqGSIb3DQEBCwUA
A4IBAQB2xYBiwgW61GQdlIyXanHYBtNqN47yeTsoV7w+iJjfSWgoGUJ7MvWZTJqP
a5TkReUUbuAy3VIgmmasg8wxIYOrdEf5kCpWiKcFVMI+3M9GItQETlId6OhOD4KL
eb09BC8HN8drPa+JIjnxKTj7TW7rz/nrB7Ht8MvK57OgBg2BoKD2pET4jGM8K/+3
RFD2D1EkyV3iLA9QfRuX4OIAG1d8goPylLrlueKbVpIcSg0pZdBLI5sBCNAYjVo3
nYO926wsfacR3Bz08Kp+21TYoFq2jai6rErIqiJ/6+hgFiN6VrIXXqz/0qRKEk11
tq2atZ3MFben0Ce0QxvgOdYbjXP2
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:49 2025 by rpki-client