Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3699BF0CBE8711EFA56A9253762E951A.roa
File: 3699BF0CBE8711EFA56A9253762E951A.roa (raw, json)
Hash identifier: NSd/0bSEIKRRdeqGIccbHrmeDFg05AOSXOMcHtHtxD8=
Subject key identifier: 37:D3:43:60:00:CB:36:FF:CA:07:08:98:18:36:FD:93:99:F0:C7:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E696
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3699BF0CBE8711EFA56A9253762E951A.roa
Signing time: Fri 20 Dec 2024 04:02:22 +0000
ROA not before: Fri 20 Dec 2024 04:02:18 +0000
ROA not after: Wed 10 Dec 2025 04:02:18 +0000
asID: 984
IP address blocks: 45.206.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59030 (0xe696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 04:02:18 2024 GMT
Not After : Dec 10 04:02:18 2025 GMT
Subject: CN=6764ec4e-eac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:9e:cc:8f:5d:8f:f2:f4:3b:c5:99:41:be:
e2:38:d2:d1:f3:d7:de:ee:b3:11:41:bb:6f:67:27:
a3:be:1e:48:05:c6:c6:9e:ff:79:74:31:6a:26:90:
0b:f1:cc:5f:e2:62:af:d7:57:a6:d4:63:e9:93:85:
39:fd:2a:ad:6a:8b:29:f9:83:8a:ac:26:9e:05:df:
00:04:f3:2c:ff:bf:6f:43:bb:4d:0e:29:7f:fd:16:
97:fc:3a:54:22:74:5c:88:08:5a:3a:05:fc:af:7e:
ce:11:1d:29:54:12:25:59:53:2e:01:58:d8:bc:c2:
e1:01:3b:eb:76:7f:50:da:3c:06:cf:e5:fd:d3:f9:
d8:4e:02:04:b1:9f:57:52:cd:d8:2e:f7:81:c3:14:
28:33:d5:2b:c0:5f:0b:2f:55:1c:25:6e:55:9c:ed:
16:c3:a3:65:0a:5c:65:80:ba:df:09:32:aa:3d:8b:
11:50:90:5b:bf:77:74:c8:4d:5f:74:d4:cd:c6:ce:
e1:10:21:a3:cc:0b:2b:7e:41:2c:6f:47:02:f3:ac:
ef:b2:1d:9c:b5:0d:dd:11:0d:fe:eb:69:a4:05:62:
88:29:3c:49:e4:9d:fd:4d:3d:eb:7e:00:45:d6:a9:
ac:df:92:21:bd:de:19:0a:45:1c:7a:f7:86:18:64:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:43:60:00:CB:36:FF:CA:07:08:98:18:36:FD:93:99:F0:C7:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3699BF0CBE8711EFA56A9253762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c2:82:a1:b8:53:06:0f:40:b9:fa:d0:f0:17:c5:a8:eb:c1:
f5:3d:9d:92:f3:b7:1b:a4:0d:3e:c3:38:04:6d:f4:cd:ad:c9:
c7:8e:79:e7:bf:8f:2c:f4:30:9e:1d:83:98:de:4d:e8:49:48:
e0:78:ad:71:6b:8e:a0:35:37:be:6f:c3:6d:83:10:fb:3b:ea:
bf:cb:d3:6d:28:0c:b1:52:b9:dd:84:80:ce:94:d6:ed:56:16:
32:d2:8f:a3:13:e6:0f:c1:4c:9d:e2:54:8f:08:dc:26:18:3b:
73:09:e5:f9:25:89:be:e7:a5:f3:9c:bd:b1:48:4c:32:a9:08:
8f:d2:07:7f:45:43:95:01:2f:ce:8a:4e:3b:c7:98:7f:b6:02:
33:66:59:45:7b:93:ad:77:5f:7d:26:84:4e:f2:32:95:bf:c1:
0d:22:ec:00:34:ff:4c:43:fd:0d:5f:60:80:a5:af:ed:d9:a5:
ed:e6:78:e5:79:9f:81:87:0e:24:1a:62:0e:a9:f4:39:b7:74:
17:80:27:b0:dc:e8:be:66:c9:2a:9d:ef:4b:f6:8a:16:40:83:
b7:58:a9:90:9a:0f:e0:a6:0e:4c:a0:99:2f:f1:20:ec:52:4a:
b0:72:56:de:61:7e:18:4a:b4:82:be:09:b8:2b:57:24:ec:93:
01:36:ed:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOaWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDQwMjE4WhcNMjUxMjEwMDQwMjE4WjAYMRYw
FAYDVQQDEw02NzY0ZWM0ZS1lYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtuCezI9dj/L0O8WZQb7iONLR89fe7rMRQbtvZyejvh5IBcbGnv95dDFq
JpAL8cxf4mKv11em1GPpk4U5/Sqtaosp+YOKrCaeBd8ABPMs/79vQ7tNDil//RaX
/DpUInRciAhaOgX8r37OER0pVBIlWVMuAVjYvMLhATvrdn9Q2jwGz+X90/nYTgIE
sZ9XUs3YLveBwxQoM9UrwF8LL1UcJW5VnO0Ww6NlClxlgLrfCTKqPYsRUJBbv3d0
yE1fdNTNxs7hECGjzAsrfkEsb0cC86zvsh2ctQ3dEQ3+62mkBWKIKTxJ5J39TT3r
fgBF1qms35Ihvd4ZCkUceveGGGQyWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDfT
Q2AAyzb/ygcImBg2/ZOZ8MesMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNjk5QkYwQ0JFODcxMUVGQTU2QTkyNTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc7OMA0GCSqGSIb3DQEBCwUA
A4IBAQA6woKhuFMGD0C5+tDwF8Wo68H1PZ2S87cbpA0+wzgEbfTNrcnHjnnnv48s
9DCeHYOY3k3oSUjgeK1xa46gNTe+b8NtgxD7O+q/y9NtKAyxUrndhIDOlNbtVhYy
0o+jE+YPwUyd4lSPCNwmGDtzCeX5JYm+56XznL2xSEwyqQiP0gd/RUOVAS/Oik47
x5h/tgIzZllFe5Otd199JoRO8jKVv8ENIuwANP9MQ/0NX2CApa/t2aXt5njleZ+B
hw4kGmIOqfQ5t3QXgCew3Oi+Zskqne9L9ooWQIO3WKmQmg/gpg5MoJkv8SDsUkqw
clbeYX4YSrSCvgm4K1ck7JMBNu1a
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:10 2025 by rpki-client