Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C4CF982C3F011EFB690488C762E951A.roa
File: 3C4CF982C3F011EFB690488C762E951A.roa (raw, json)
Hash identifier: DYZov0kKz/rEzmT3wdcPP9w5GKNuV/JFq9dlFMwjnsw=
Subject key identifier: 35:84:52:6C:E5:9F:6F:BB:25:53:EE:1B:46:C1:7C:ED:A1:E2:9D:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C4CF982C3F011EFB690488C762E951A.roa
Signing time: Fri 27 Dec 2024 01:16:44 +0000
ROA not before: Fri 27 Dec 2024 01:16:41 +0000
ROA not after: Sun 12 Dec 2027 01:16:41 +0000
asID: 17561
IP address blocks: 45.192.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61256 (0xef48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:16:41 2024 GMT
Not After : Dec 12 01:16:41 2027 GMT
Subject: CN=676dfffc-24ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:8b:45:31:83:8a:c0:d5:1f:e4:1f:dd:0f:
cd:56:34:e6:4a:7c:e9:0f:06:c8:d7:2b:6b:e1:cf:
e9:ef:c4:50:e5:01:4a:1b:f4:38:99:2b:46:fb:33:
5e:01:89:34:f5:4a:c7:8c:b0:97:3a:f3:c7:b6:a8:
a4:c0:33:3d:f6:81:cc:cf:3c:7e:d1:e8:b6:3d:0e:
c5:3d:d1:e9:a1:44:b1:fd:88:85:57:f0:a6:f4:03:
37:35:38:89:46:e9:f7:3c:46:66:d5:22:3f:a0:79:
21:89:db:b8:2f:56:68:d1:fe:6f:43:0d:41:e7:2b:
ca:c3:8b:63:63:59:57:f2:f9:cf:eb:1a:e0:8a:6f:
fa:26:06:e1:27:e1:7f:d2:2b:cb:dd:19:6e:f2:59:
79:ef:a8:0a:1a:70:94:4b:09:33:02:7d:20:76:78:
6a:b1:f9:34:40:c3:8a:23:d3:44:3e:c5:d5:cd:42:
fc:1f:33:e5:bf:34:44:2a:e5:53:ed:42:9f:bd:38:
cb:e8:72:78:44:b8:81:a7:40:2f:2a:81:e4:56:a3:
b2:8a:aa:96:87:a0:4a:d2:37:69:0d:e0:e7:73:78:
8e:1a:eb:57:38:65:68:35:d8:4d:3b:b1:ba:ba:73:
28:a2:7b:79:c5:b5:c4:44:4b:23:92:d6:5f:ff:80:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:52:6C:E5:9F:6F:BB:25:53:EE:1B:46:C1:7C:ED:A1:E2:9D:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C4CF982C3F011EFB690488C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8d:4b:a9:22:49:d1:bd:61:3b:ff:dc:d1:3f:45:b1:72:f0:
e9:b2:a5:84:7a:78:8d:41:70:18:95:85:6c:f0:a0:04:8e:52:
ab:aa:3a:45:06:0c:40:3a:f3:73:fa:d5:94:76:2b:59:af:ca:
f8:ec:04:81:92:1f:f4:e2:ca:fc:dc:15:cb:a6:ff:4a:f4:6c:
ee:12:25:2d:3c:5f:89:60:4f:26:9d:9c:8d:25:23:90:ab:48:
4c:fb:10:78:73:82:fe:e2:c6:60:2c:d6:9a:0e:d9:a7:fa:2e:
76:ea:4f:00:9d:c4:3d:9b:01:f6:24:0b:f6:56:78:35:d8:16:
6d:87:98:a9:3a:8d:43:01:82:bf:a7:1e:db:35:c7:b4:10:d3:
d7:17:d7:8b:af:ac:de:34:d8:4c:2b:93:e5:f2:9b:15:de:ff:
8d:33:03:62:59:32:95:af:89:fb:21:e9:2d:a1:59:e3:15:f6:
de:ee:23:31:1e:d5:bf:80:a9:df:69:c7:fd:38:fd:43:70:5d:
91:4d:df:fd:6c:a9:27:d7:66:3d:31:95:fa:e8:69:a5:6f:b6:
c5:8d:73:95:69:3d:8e:ea:49:d1:aa:5b:0d:37:b8:42:ee:0e:
ad:ba:82:13:9c:18:ce:5d:21:89:32:d6:58:98:a1:92:1b:43:
da:95:4c:d4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO9IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDExNjQxWhcNMjcxMjEyMDExNjQxWjAYMRYw
FAYDVQQDEw02NzZkZmZmYy0yNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzE+LRTGDisDVH+Qf3Q/NVjTmSnzpDwbI1ytr4c/p78RQ5QFKG/Q4mStG
+zNeAYk09UrHjLCXOvPHtqikwDM99oHMzzx+0ei2PQ7FPdHpoUSx/YiFV/Cm9AM3
NTiJRun3PEZm1SI/oHkhidu4L1Zo0f5vQw1B5yvKw4tjY1lX8vnP6xrgim/6Jgbh
J+F/0ivL3Rlu8ll576gKGnCUSwkzAn0gdnhqsfk0QMOKI9NEPsXVzUL8HzPlvzRE
KuVT7UKfvTjL6HJ4RLiBp0AvKoHkVqOyiqqWh6BK0jdpDeDnc3iOGutXOGVoNdhN
O7G6unMoont5xbXEREsjktZf/4AVhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDWE
Umzln2+7JVPuG0bBfO2h4p3BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQzRDRjk4MkMzRjAxMUVGQjY5MDQ4OEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD0MA0GCSqGSIb3DQEBCwUA
A4IBAQBxjUupIknRvWE7/9zRP0WxcvDpsqWEeniNQXAYlYVs8KAEjlKrqjpFBgxA
OvNz+tWUditZr8r47ASBkh/04sr83BXLpv9K9GzuEiUtPF+JYE8mnZyNJSOQq0hM
+xB4c4L+4sZgLNaaDtmn+i526k8AncQ9mwH2JAv2Vng12BZth5ipOo1DAYK/px7b
Nce0ENPXF9eLr6zeNNhMK5Pl8psV3v+NMwNiWTKVr4n7IektoVnjFfbe7iMxHtW/
gKnfacf9OP1DcF2RTd/9bKkn12Y9MZX66Gmlb7bFjXOVaT2O6knRqlsNN7hC7g6t
uoITnBjOXSGJMtZYmKGSG0PalUzU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:22 2025 by rpki-client