Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39428AA0BDB411EF8A3E17A1762E951A.roa
File: 39428AA0BDB411EF8A3E17A1762E951A.roa (raw, json)
Hash identifier: eWgYLWVswiFtEyIcNH6xPADO9hAqWY5VO2nGw2+i86E=
Subject key identifier: 45:A1:CB:B5:32:95:36:C5:57:4A:DC:22:48:18:31:DB:32:DE:F2:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39428AA0BDB411EF8A3E17A1762E951A.roa
Signing time: Thu 19 Dec 2024 02:52:02 +0000
ROA not before: Thu 19 Dec 2024 02:51:59 +0000
ROA not after: Wed 10 Dec 2025 02:51:59 +0000
asID: 984
IP address blocks: 45.204.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58585 (0xe4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:51:59 2024 GMT
Not After : Dec 10 02:51:59 2025 GMT
Subject: CN=67638a52-e045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:6a:cf:f9:7e:d6:cd:86:fa:00:a9:56:ee:
2d:43:c5:cd:16:ce:f2:6b:58:b8:c8:e1:2b:98:88:
ec:1f:9d:d4:b1:fe:b5:3c:18:65:c5:6b:1d:82:d4:
15:11:06:a3:0a:b3:01:b8:a3:a6:a2:f5:df:f7:42:
05:81:07:0e:41:1b:78:a0:b7:6e:12:f0:ed:26:d9:
09:9e:97:16:8d:0d:03:c5:93:ce:69:52:55:bd:ea:
a6:64:fc:ef:25:fc:a4:30:6d:74:77:82:26:fc:57:
a8:03:d2:1c:d0:f0:ae:82:e9:de:c0:f9:37:5c:5a:
19:cd:d6:15:ba:7d:ed:6c:1a:a0:15:56:7f:26:b1:
a7:1b:21:9b:86:b3:c0:c8:63:5d:9c:bd:65:11:8a:
08:b0:dc:fe:5a:e5:e3:b6:2f:7d:87:f3:db:ee:ba:
d7:4c:72:24:ae:84:52:a2:21:4c:15:e0:c0:55:68:
9c:be:22:16:e0:50:be:fe:7f:57:a0:9c:03:5b:0d:
59:4d:a0:33:48:0f:f3:6b:2d:cd:3f:55:58:72:5e:
bc:ed:e3:8d:ff:b9:56:7d:c2:ff:d8:53:00:d5:04:
86:81:4e:eb:c5:b1:2a:25:f0:18:33:9c:78:05:cf:
5d:45:ac:1f:8c:4a:33:4c:4d:64:4e:96:28:48:22:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:CB:B5:32:95:36:C5:57:4A:DC:22:48:18:31:DB:32:DE:F2:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39428AA0BDB411EF8A3E17A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.132.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ff:ee:6e:15:bd:0b:2b:f5:f7:f5:64:29:83:2c:42:62:20:
3e:d7:28:72:a8:80:55:23:ac:8b:62:97:14:e9:f2:df:fa:67:
fe:34:24:9c:ed:de:af:a1:22:57:5e:bd:9f:eb:1d:cb:fe:b5:
cf:1e:04:c5:4c:84:65:78:e5:f2:7c:8a:32:c6:4d:ee:66:c6:
f6:cf:aa:76:e6:07:90:d2:31:42:e8:8c:10:04:10:f7:1f:a0:
9e:90:04:45:b9:98:45:ef:a4:d3:ac:70:75:cb:a8:59:0e:cf:
4b:b8:90:05:5b:97:35:37:fa:87:30:51:b0:b8:00:1d:65:8a:
ca:da:2f:b9:89:23:52:53:d5:f1:47:46:d9:9f:2b:b2:7a:2b:
4b:1b:71:14:0a:81:24:c3:79:da:8f:03:c7:0f:4c:d5:b5:ff:
8e:d8:9c:cd:63:7e:45:80:0f:91:43:d6:6f:00:29:59:63:e5:
32:b3:15:6d:4d:40:df:7c:fd:69:03:9c:07:18:55:17:93:81:
5a:d8:ed:b3:83:66:24:91:39:45:b8:c6:18:1f:64:91:1b:c0:
18:27:55:58:17:f7:83:f0:72:10:24:58:b1:6a:ef:7b:8a:69:
32:21:d8:25:bf:79:22:06:27:12:97:d7:d7:73:e2:a5:d3:f2:
2b:ca:ed:96
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOTZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDI1MTU5WhcNMjUxMjEwMDI1MTU5WjAYMRYw
FAYDVQQDEw02NzYzOGE1Mi1lMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq81qz/l+1s2G+gCpVu4tQ8XNFs7ya1i4yOErmIjsH53Usf61PBhlxWsd
gtQVEQajCrMBuKOmovXf90IFgQcOQRt4oLduEvDtJtkJnpcWjQ0DxZPOaVJVveqm
ZPzvJfykMG10d4Im/FeoA9Ic0PCugunewPk3XFoZzdYVun3tbBqgFVZ/JrGnGyGb
hrPAyGNdnL1lEYoIsNz+WuXjti99h/Pb7rrXTHIkroRSoiFMFeDAVWicviIW4FC+
/n9XoJwDWw1ZTaAzSA/zay3NP1VYcl687eON/7lWfcL/2FMA1QSGgU7rxbEqJfAY
M5x4Bc9dRawfjEozTE1kTpYoSCIgQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEWh
y7UylTbFV0rcIkgYMdsy3vL6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOTQyOEFBMEJEQjQxMUVGOEEzRTE3QTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcyEMA0GCSqGSIb3DQEBCwUA
A4IBAQB2/+5uFb0LK/X39WQpgyxCYiA+1yhyqIBVI6yLYpcU6fLf+mf+NCSc7d6v
oSJXXr2f6x3L/rXPHgTFTIRleOXyfIoyxk3uZsb2z6p25geQ0jFC6IwQBBD3H6Ce
kARFuZhF76TTrHB1y6hZDs9LuJAFW5c1N/qHMFGwuAAdZYrK2i+5iSNSU9XxR0bZ
nyuyeitLG3EUCoEkw3najwPHD0zVtf+O2JzNY35FgA+RQ9ZvAClZY+UysxVtTUDf
fP1pA5wHGFUXk4Fa2O2zg2YkkTlFuMYYH2SRG8AYJ1VYF/eD8HIQJFixau97imky
Idglv3kiBicSl9fXc+Kl0/Iryu2W
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:32 2025 by rpki-client