Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4998BEE6BDB511EF8B1A8EA8762E951A.roa
File: 4998BEE6BDB511EF8B1A8EA8762E951A.roa (raw, json)
Hash identifier: AvKQVPtJh47Mwn8CV4PSU8/lIi7xNEgD0qLhlQL8mWc=
Subject key identifier: D6:2E:8E:57:A7:1C:02:21:CF:6B:B4:08:FA:F6:1F:D3:8B:57:00:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4998BEE6BDB511EF8B1A8EA8762E951A.roa
Signing time: Thu 19 Dec 2024 02:59:39 +0000
ROA not before: Thu 19 Dec 2024 02:59:36 +0000
ROA not after: Wed 10 Dec 2025 02:59:36 +0000
asID: 984
IP address blocks: 45.204.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58599 (0xe4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:59:36 2024 GMT
Not After : Dec 10 02:59:36 2025 GMT
Subject: CN=67638c1b-9cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:f0:b7:ba:92:19:f4:91:09:82:29:36:e9:
0d:e7:a4:19:fb:29:36:c6:09:85:58:be:4f:46:7f:
a7:6e:f2:4e:99:d0:3a:25:0d:f6:0b:80:56:da:8f:
06:3a:dd:c7:b9:1f:52:a6:e2:c3:23:6c:25:10:1c:
43:00:9e:da:8f:36:85:dd:2b:37:de:ad:45:a7:9c:
b2:c1:7e:b0:5c:9f:08:d9:a9:9e:ea:2a:7c:39:04:
fc:01:9b:61:62:6a:37:bf:f9:56:ed:ad:8f:ad:89:
48:93:44:43:06:ec:2b:5c:3a:7e:15:61:d8:10:bd:
d3:db:d3:9d:64:ac:3a:06:ca:1a:ed:82:76:7d:df:
86:dc:56:7a:a5:3e:1a:24:98:0a:a3:a2:b0:52:3d:
7d:fb:9d:f9:57:f1:4f:2a:8f:3d:43:c9:c0:e3:59:
9c:9e:bc:e3:45:c7:c9:2c:cc:06:91:2b:50:bc:d3:
3b:6f:42:7e:43:a1:03:92:24:91:aa:b3:fc:84:e8:
33:13:d0:0d:91:74:6e:26:7f:c2:3f:71:32:57:fe:
e5:49:8c:db:8e:44:2d:e6:58:56:0e:6f:f7:3f:eb:
ed:b5:74:12:da:ea:02:40:eb:14:c6:96:05:bf:27:
01:9f:fd:e2:98:7e:c7:d2:f6:22:33:52:01:bd:c1:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2E:8E:57:A7:1C:02:21:CF:6B:B4:08:FA:F6:1F:D3:8B:57:00:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4998BEE6BDB511EF8B1A8EA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.156.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1c:4c:05:17:c2:f4:e7:e2:6d:6b:18:b4:bb:1a:c0:ec:16:
a5:09:9e:99:95:35:f5:3a:9b:88:6d:9a:9f:b4:6b:ea:45:48:
96:db:55:49:53:58:89:dc:1b:3b:52:91:42:2b:7e:4f:1c:bf:
4d:3f:66:8e:91:da:57:fa:f1:97:23:71:bd:3f:8a:cf:f6:f9:
41:09:59:d3:4d:c7:90:3e:ea:ae:6a:23:d4:be:5a:2d:7f:54:
b9:7e:03:97:4b:1f:a2:88:74:39:d6:32:36:23:93:c0:76:dc:
43:ff:9d:87:7d:1e:eb:76:fd:21:2a:62:a8:66:bd:28:4e:f0:
3b:af:16:43:64:6a:ee:b7:34:43:4c:2e:32:d5:34:2c:40:84:
e6:c9:a0:b4:78:70:67:d6:f4:5e:40:46:41:32:a9:d0:95:ea:
e6:30:e0:0f:63:18:9f:b3:76:44:03:8b:8b:d1:f1:b9:47:80:
9b:95:d8:13:34:76:9c:b6:7b:da:39:37:34:d3:3e:81:34:36:
8d:c6:af:98:cd:44:ce:34:8f:04:d1:2a:84:63:5d:11:9a:8a:
c5:01:e5:e1:6d:6e:fe:e1:35:91:7b:d8:0e:dc:dc:69:56:d0:
d8:4e:96:89:48:3c:5f:11:91:6f:cc:d1:af:c9:e7:09:47:16:
bd:35:61:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOTnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDI1OTM2WhcNMjUxMjEwMDI1OTM2WjAYMRYw
FAYDVQQDEw02NzYzOGMxYi05Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuNXwt7qSGfSRCYIpNukN56QZ+yk2xgmFWL5PRn+nbvJOmdA6JQ32C4BW
2o8GOt3HuR9SpuLDI2wlEBxDAJ7ajzaF3Ss33q1Fp5yywX6wXJ8I2ame6ip8OQT8
AZthYmo3v/lW7a2PrYlIk0RDBuwrXDp+FWHYEL3T29OdZKw6Bsoa7YJ2fd+G3FZ6
pT4aJJgKo6KwUj19+535V/FPKo89Q8nA41mcnrzjRcfJLMwGkStQvNM7b0J+Q6ED
kiSRqrP8hOgzE9ANkXRuJn/CP3EyV/7lSYzbjkQt5lhWDm/3P+vttXQS2uoCQOsU
xpYFvycBn/3imH7H0vYiM1IBvcHxyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNYu
jlenHAIhz2u0CPr2H9OLVwAwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTk4QkVFNkJEQjUxMUVGOEIxQThFQTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcycMA0GCSqGSIb3DQEBCwUA
A4IBAQCKHEwFF8L05+Jtaxi0uxrA7BalCZ6ZlTX1OpuIbZqftGvqRUiW21VJU1iJ
3Bs7UpFCK35PHL9NP2aOkdpX+vGXI3G9P4rP9vlBCVnTTceQPuquaiPUvlotf1S5
fgOXSx+iiHQ51jI2I5PAdtxD/52HfR7rdv0hKmKoZr0oTvA7rxZDZGrutzRDTC4y
1TQsQITmyaC0eHBn1vReQEZBMqnQlermMOAPYxifs3ZEA4uL0fG5R4CbldgTNHac
tnvaOTc00z6BNDaNxq+YzUTONI8E0SqEY10RmorFAeXhbW7+4TWRe9gO3NxpVtDY
TpaJSDxfEZFvzNGvyecJRxa9NWGm
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:10 2025 by rpki-client