Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/573C723AB5FF11EFA40D91A9762E951A.roa
File: 573C723AB5FF11EFA40D91A9762E951A.roa (raw, json)
Hash identifier: adiHZJbcDm/SguhzOTbUOopgiNJKpXd0dBEb8HSZHy8=
Subject key identifier: 2E:5C:ED:C0:B0:4C:FC:20:B6:CF:35:71:7C:1E:3D:C9:1C:31:B5:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E176
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/573C723AB5FF11EFA40D91A9762E951A.roa
Signing time: Mon 09 Dec 2024 07:29:36 +0000
ROA not before: Mon 09 Dec 2024 07:29:32 +0000
ROA not after: Thu 06 Feb 2025 07:29:32 +0000
asID: 63787
IP address blocks: 45.192.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 07:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57718 (0xe176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 07:29:32 2024 GMT
Not After : Feb 6 07:29:32 2025 GMT
Subject: CN=67569c60-f0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:65:22:8e:5f:07:57:35:b2:c7:79:84:27:
b2:b5:51:05:ab:61:2c:6e:b3:49:6a:fc:b9:20:e2:
32:c8:5f:b6:54:f2:0e:03:2f:58:22:c9:dd:06:af:
d0:fe:ca:e6:fa:cf:32:8a:ca:21:23:58:00:62:6b:
62:9a:a4:a0:8b:c4:c7:2b:68:da:51:c5:80:9b:c2:
5b:5b:56:20:7b:0b:f0:61:c6:e6:a5:49:75:2a:3a:
65:c6:c3:f7:fd:6d:d3:57:d0:26:06:40:4d:fd:cc:
2a:9b:34:b9:82:13:10:ad:9c:4f:47:3c:74:d4:54:
69:45:3e:55:e3:2e:80:af:44:a7:3e:3d:f4:a6:f6:
23:41:13:6b:cc:2a:37:dd:19:cc:f0:08:52:5a:a1:
e9:c4:aa:91:78:02:5d:9e:fd:10:cb:c0:50:1b:cb:
58:ac:b8:60:d1:1b:e3:62:48:14:f4:ab:33:d7:20:
a1:d6:71:7d:31:ee:86:58:ff:2f:52:bf:c9:62:82:
9b:24:7d:25:ea:29:61:35:fc:d8:87:67:d5:18:2e:
5e:43:5b:b5:d9:a8:95:22:68:89:04:dc:f0:e1:8e:
ee:54:4d:e2:75:c0:2e:4b:d4:12:a8:31:90:39:0d:
e4:5a:56:7f:64:d8:83:d2:0c:3f:ff:5e:c0:0d:43:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:ED:C0:B0:4C:FC:20:B6:CF:35:71:7C:1E:3D:C9:1C:31:B5:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/573C723AB5FF11EFA40D91A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.180.0/24
Signature Algorithm: sha256WithRSAEncryption
93:be:ac:6e:d4:56:2c:92:39:12:c3:b7:e4:c5:dc:94:bf:0a:
43:26:29:2a:98:e1:46:d3:86:55:d8:e0:31:1a:fd:8d:13:62:
73:eb:c0:9c:e3:28:40:44:8a:a9:f5:bf:2d:54:93:d5:48:0f:
87:14:af:b9:fa:e0:0c:8d:94:b9:e5:94:34:45:36:8e:b3:aa:
54:97:c9:81:f6:b0:52:0d:e7:56:ee:b0:a5:6a:36:62:cf:5d:
0c:79:69:85:0d:4d:39:8a:65:c8:d3:02:15:35:70:3b:0b:3e:
06:06:a6:82:7e:b6:2f:e6:e6:e6:d6:a0:0c:21:54:5c:4e:63:
f9:01:8b:5f:9a:a7:86:f7:e1:f3:2e:f0:9d:b6:37:30:c0:21:
95:1b:26:b0:fe:8f:ea:0b:99:f3:5f:50:9c:25:64:92:a6:ae:
70:34:99:62:25:3d:45:dd:7d:06:f7:dd:70:b2:15:2e:f4:75:
9d:96:05:34:b4:f5:35:db:23:c5:db:25:a8:c2:a7:ff:e7:07:
37:b1:f8:03:1f:57:0e:3f:2f:dd:52:b4:8f:d4:b1:7b:4e:55:
25:8d:f2:3a:d5:bf:10:72:16:88:54:86:e3:8c:c6:02:ae:89:
95:26:58:d0:7d:40:78:c5:93:cf:15:ce:b6:a6:7f:91:bd:4b:
65:27:3b:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOF2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA5MDcyOTMyWhcNMjUwMjA2MDcyOTMyWjAYMRYw
FAYDVQQDEw02NzU2OWM2MC1mMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyiJlIo5fB1c1ssd5hCeytVEFq2EsbrNJavy5IOIyyF+2VPIOAy9YIsnd
Bq/Q/srm+s8yisohI1gAYmtimqSgi8THK2jaUcWAm8JbW1YgewvwYcbmpUl1Kjpl
xsP3/W3TV9AmBkBN/cwqmzS5ghMQrZxPRzx01FRpRT5V4y6Ar0SnPj30pvYjQRNr
zCo33RnM8AhSWqHpxKqReAJdnv0Qy8BQG8tYrLhg0RvjYkgU9Ksz1yCh1nF9Me6G
WP8vUr/JYoKbJH0l6ilhNfzYh2fVGC5eQ1u12aiVImiJBNzw4Y7uVE3idcAuS9QS
qDGQOQ3kWlZ/ZNiD0gw//17ADUNIvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC5c
7cCwTPwgts81cXwePckcMbVtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzNDNzIzQUI1RkYxMUVGQTQwRDkxQTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcC0MA0GCSqGSIb3DQEBCwUA
A4IBAQCTvqxu1FYskjkSw7fkxdyUvwpDJikqmOFG04ZV2OAxGv2NE2Jz68Cc4yhA
RIqp9b8tVJPVSA+HFK+5+uAMjZS55ZQ0RTaOs6pUl8mB9rBSDedW7rClajZiz10M
eWmFDU05imXI0wIVNXA7Cz4GBqaCfrYv5ubm1qAMIVRcTmP5AYtfmqeG9+HzLvCd
tjcwwCGVGyaw/o/qC5nzX1CcJWSSpq5wNJliJT1F3X0G991wshUu9HWdlgU0tPU1
2yPF2yWowqf/5wc3sfgDH1cOPy/dUrSP1LF7TlUljfI61b8QchaIVIbjjMYCromV
JljQfUB4xZPPFc62pn+RvUtlJztL
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:36 2025 by rpki-client