Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EBE74F4BDC311EF8421AD83762E951A.roa
File: 2EBE74F4BDC311EF8421AD83762E951A.roa (raw, json)
Hash identifier: iRq/YbBSsmLZUHP9pt4ahsTc/u6h0seNoTO2/OhBOSM=
Subject key identifier: 2F:54:B9:9A:51:46:77:82:91:C1:08:7F:4E:88:6D:6F:09:3B:D9:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E587
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EBE74F4BDC311EF8421AD83762E951A.roa
Signing time: Thu 19 Dec 2024 04:39:07 +0000
ROA not before: Thu 19 Dec 2024 04:39:04 +0000
ROA not after: Wed 10 Dec 2025 04:39:04 +0000
asID: 984
IP address blocks: 45.206.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58759 (0xe587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:39:04 2024 GMT
Not After : Dec 10 04:39:04 2025 GMT
Subject: CN=6763a36b-007d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:41:7a:22:59:fd:92:f4:b8:aa:cb:45:a2:
f0:35:e8:93:4c:02:42:57:54:3e:62:d3:ee:6d:5a:
d9:08:6d:9e:5f:dc:8a:81:21:56:90:71:a5:f0:69:
ae:7a:be:c6:bf:ed:4a:fa:66:d0:13:9e:85:be:3c:
5c:49:98:d2:35:79:70:b2:4f:33:a9:9a:a1:c9:3a:
f7:9b:83:98:6b:6b:2c:3a:ed:57:a6:c4:cb:7a:6e:
89:a7:3d:4f:37:25:4a:9d:bd:b3:81:51:48:a4:fe:
68:fe:af:9d:75:9e:a0:1f:33:a3:77:a3:89:3d:1f:
13:7a:e5:44:88:30:5e:17:35:f1:16:c1:69:56:6a:
df:5a:fd:fa:a4:19:c7:a8:41:1f:98:52:62:d1:0a:
5e:d3:f7:30:c4:87:72:8c:e8:a7:c3:71:10:d3:2d:
59:86:b2:1a:79:c8:f6:b3:11:b7:b8:30:71:2a:df:
3b:7d:c2:cd:8b:a2:26:1a:d4:37:28:77:6b:76:51:
60:53:dd:3a:5b:42:62:d4:09:3a:e1:06:34:c2:9e:
6e:00:5a:4b:77:ab:04:39:35:79:d3:e8:2a:3f:6d:
1e:6f:49:55:28:52:38:16:60:25:9d:14:1c:f2:78:
52:b3:57:c2:17:bb:08:ad:59:b1:90:fc:26:f0:8c:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:54:B9:9A:51:46:77:82:91:C1:08:7F:4E:88:6D:6F:09:3B:D9:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EBE74F4BDC311EF8421AD83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b0:02:82:12:7e:4f:eb:cd:49:53:47:6c:43:4b:cf:d5:6b:
34:26:c3:bb:95:d0:53:d7:04:ab:06:16:76:ad:21:4a:9b:3c:
59:16:25:20:7a:9f:86:9a:9f:89:d8:10:03:8d:55:3d:ec:c2:
9f:13:1e:3e:73:f2:84:55:08:3e:20:ab:f1:f5:68:9b:1e:da:
ad:56:f2:85:50:d7:55:15:45:98:64:7f:03:a7:9d:ed:f8:61:
df:5e:22:bc:08:3f:de:ed:92:38:ca:34:48:03:4e:f4:dd:03:
06:04:c8:43:da:a1:4a:b0:91:33:dc:ea:68:70:6e:b0:7b:ab:
44:24:f2:f5:ed:07:47:7a:3d:c8:6f:58:28:af:17:a7:f1:03:
44:d7:3b:e7:5d:ae:ee:3a:83:fa:1d:a8:c8:6e:d2:80:3d:90:
7f:71:72:11:bc:b4:74:c6:e0:82:f3:7c:ae:f9:0e:fa:b8:bb:
cd:6d:b2:2c:10:49:98:e8:1d:48:98:d4:6d:0e:2a:c0:f4:d5:
78:a6:19:02:f8:88:33:d1:d0:fc:15:0b:ea:51:96:e5:1a:6c:
e2:96:15:b0:6c:d4:70:82:f1:18:81:b2:32:bb:ca:09:17:0e:
d3:a8:87:2a:cd:5d:a0:48:bf:ef:39:56:fb:82:c0:55:71:97:
3e:a2:09:b9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOWHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDQzOTA0WhcNMjUxMjEwMDQzOTA0WjAYMRYw
FAYDVQQDEw02NzYzYTM2Yi0wMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvNFBeiJZ/ZL0uKrLRaLwNeiTTAJCV1Q+YtPubVrZCG2eX9yKgSFWkHGl
8Gmuer7Gv+1K+mbQE56FvjxcSZjSNXlwsk8zqZqhyTr3m4OYa2ssOu1XpsTLem6J
pz1PNyVKnb2zgVFIpP5o/q+ddZ6gHzOjd6OJPR8TeuVEiDBeFzXxFsFpVmrfWv36
pBnHqEEfmFJi0Qpe0/cwxIdyjOinw3EQ0y1ZhrIaecj2sxG3uDBxKt87fcLNi6Im
GtQ3KHdrdlFgU906W0Ji1Ak64QY0wp5uAFpLd6sEOTV50+gqP20eb0lVKFI4FmAl
nRQc8nhSs1fCF7sIrVmxkPwm8IzKNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC9U
uZpRRneCkcEIf06IbW8JO9mUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRUJFNzRGNEJEQzMxMUVGODQyMUFEODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc5mMA0GCSqGSIb3DQEBCwUA
A4IBAQBrsAKCEn5P681JU0dsQ0vP1Ws0JsO7ldBT1wSrBhZ2rSFKmzxZFiUgep+G
mp+J2BADjVU97MKfEx4+c/KEVQg+IKvx9WibHtqtVvKFUNdVFUWYZH8Dp53t+GHf
XiK8CD/e7ZI4yjRIA0703QMGBMhD2qFKsJEz3OpocG6we6tEJPL17QdHej3Ib1go
rxen8QNE1zvnXa7uOoP6HajIbtKAPZB/cXIRvLR0xuCC83yu+Q76uLvNbbIsEEmY
6B1ImNRtDirA9NV4phkC+Igz0dD8FQvqUZblGmzilhWwbNRwgvEYgbIyu8oJFw7T
qIcqzV2gSL/vOVb7gsBVcZc+ogm5
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:58 2025 by rpki-client