Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/370686C2CFF911EFB545FEA3762E951A.roa
File: 370686C2CFF911EFB545FEA3762E951A.roa (raw, json)
Hash identifier: fDOy4agNZSRX75YTfDzrqFk8+1YYp3Smq3NQlPS6rOk=
Subject key identifier: 76:02:B4:29:43:B7:FF:57:7F:0F:84:B9:35:12:EF:53:89:49:DE:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01057C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/370686C2CFF911EFB545FEA3762E951A.roa
Signing time: Sat 11 Jan 2025 08:51:15 +0000
ROA not before: Sat 11 Jan 2025 08:51:11 +0000
ROA not after: Sat 15 Feb 2025 08:51:11 +0000
asID: 10103
IP address blocks: 45.196.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66940 (0x1057c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 11 08:51:11 2025 GMT
Not After : Feb 15 08:51:11 2025 GMT
Subject: CN=67823103-c4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:4f:4a:99:39:80:af:fb:37:b3:f6:1b:0c:
94:6e:8a:ed:51:89:1b:a5:ff:2a:63:f8:ef:ec:86:
a4:a9:94:ec:8d:a8:88:e9:82:65:fa:ed:b3:fb:bb:
6a:32:89:33:75:30:19:0b:8d:ab:23:c4:80:ce:e0:
97:be:d8:50:81:86:39:96:1e:84:49:ec:a9:d9:34:
a6:67:0a:d6:03:3e:ee:c4:d8:71:a6:c7:78:e5:3f:
68:cb:eb:d8:4b:74:37:dc:d6:e8:e5:38:a9:f3:79:
51:a6:f2:25:ea:1c:bd:d9:45:f4:1b:c1:a2:c2:5a:
5f:0c:49:e1:2f:37:7d:66:56:50:f8:f6:d3:b2:cb:
6e:e8:31:ae:c3:61:92:c3:73:51:3f:fa:e9:43:4e:
d1:33:10:c3:21:81:ae:ae:e6:df:98:ca:b9:5c:94:
72:7c:63:a5:c0:c3:d6:54:e6:ab:34:95:78:e5:5a:
c0:b2:d9:07:42:7e:dc:be:f8:70:d3:4e:e9:02:58:
e2:fe:67:b2:b9:da:23:99:3c:94:15:a4:b6:1d:d0:
82:53:43:10:b9:7e:65:7c:b0:09:b4:da:04:50:e1:
a3:17:cc:5a:75:41:5e:ef:a5:6a:ad:a3:44:73:6d:
87:c3:d0:63:1f:e7:48:6c:ff:cb:c5:74:b1:7c:07:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:B4:29:43:B7:FF:57:7F:0F:84:B9:35:12:EF:53:89:49:DE:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/370686C2CFF911EFB545FEA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:4b:7d:9a:cf:00:e8:d0:60:12:42:2b:37:f9:33:6b:04:67:
35:15:44:e5:b9:f7:e8:21:38:4f:53:78:5b:bd:5c:ba:cd:8a:
36:10:38:4b:94:89:5f:91:61:a9:fe:a3:66:3b:fc:a9:13:8a:
73:ec:45:c7:8e:4c:52:e7:e2:65:36:ec:b6:3a:60:c2:73:15:
4a:31:93:ab:ef:25:f7:e3:2f:d6:6f:74:f3:ba:63:4c:26:77:
0b:73:71:e1:55:8e:d7:88:7b:15:96:ed:76:87:57:ee:01:f4:
eb:e2:96:ce:5f:d5:59:24:a0:b6:85:97:3e:30:59:74:d1:6c:
b2:e0:6e:52:c5:77:3b:da:25:54:48:b3:b9:c7:7f:5d:69:9b:
e9:59:05:4d:b3:35:80:bb:88:f9:bd:66:88:7b:41:39:9a:04:
03:e5:d6:71:87:74:30:c6:e3:3e:f5:0b:8d:29:eb:2d:f3:bf:
7f:84:eb:35:31:3e:90:94:65:72:26:2e:ba:c9:0d:04:85:47:
88:d7:32:0a:2d:da:b3:98:fb:c3:f3:6e:c8:bf:a9:11:cb:c4:
b7:49:72:91:78:bf:d0:af:8b:ff:26:61:45:71:20:b4:96:54:
44:06:ec:4e:1b:64:bd:29:45:71:b9:b0:9d:20:30:a8:4c:f8:
d5:bb:09:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQV8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTExMDg1MTExWhcNMjUwMjE1MDg1MTExWjAYMRYw
FAYDVQQDEw02NzgyMzEwMy1jNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy8VPSpk5gK/7N7P2GwyUbortUYkbpf8qY/jv7IakqZTsjaiI6YJl+u2z
+7tqMokzdTAZC42rI8SAzuCXvthQgYY5lh6ESeyp2TSmZwrWAz7uxNhxpsd45T9o
y+vYS3Q33Nbo5Tip83lRpvIl6hy92UX0G8GiwlpfDEnhLzd9ZlZQ+PbTsstu6DGu
w2GSw3NRP/rpQ07RMxDDIYGurubfmMq5XJRyfGOlwMPWVOarNJV45VrAstkHQn7c
vvhw007pAlji/meyudojmTyUFaS2HdCCU0MQuX5lfLAJtNoEUOGjF8xadUFe76Vq
raNEc22Hw9BjH+dIbP/LxXSxfAfPdwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHYC
tClDt/9Xfw+EuTUS71OJSd5pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNzA2ODZDMkNGRjkxMUVGQjU0NUZFQTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTiMA0GCSqGSIb3DQEBCwUA
A4IBAQCiS32azwDo0GASQis3+TNrBGc1FUTluffoIThPU3hbvVy6zYo2EDhLlIlf
kWGp/qNmO/ypE4pz7EXHjkxS5+JlNuy2OmDCcxVKMZOr7yX34y/Wb3TzumNMJncL
c3HhVY7XiHsVlu12h1fuAfTr4pbOX9VZJKC2hZc+MFl00Wyy4G5SxXc72iVUSLO5
x39daZvpWQVNszWAu4j5vWaIe0E5mgQD5dZxh3QwxuM+9QuNKest879/hOs1MT6Q
lGVyJi66yQ0EhUeI1zIKLdqzmPvD827Iv6kRy8S3SXKReL/Qr4v/JmFFcSC0llRE
BuxOG2S9KUVxubCdIDCoTPjVuwlA
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:27 2025 by rpki-client