Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/575E9F34C3FD11EF82CA9B6E762E951A.roa
File: 575E9F34C3FD11EF82CA9B6E762E951A.roa (raw, json)
Hash identifier: /dBVnOSywjiFOrv31ar6HbNzPTMEQN0ojmKU0QN2wcM=
Subject key identifier: 7B:50:98:44:69:66:AE:D2:C5:87:F7:67:66:AD:0C:D2:C9:25:CF:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/575E9F34C3FD11EF82CA9B6E762E951A.roa
Signing time: Fri 27 Dec 2024 02:50:34 +0000
ROA not before: Fri 27 Dec 2024 02:50:29 +0000
ROA not after: Sun 12 Dec 2027 02:50:29 +0000
asID: 17561
IP address blocks: 45.195.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61368 (0xefb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 02:50:29 2024 GMT
Not After : Dec 12 02:50:29 2027 GMT
Subject: CN=676e15f9-7f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:dd:35:38:d5:41:62:c3:56:c3:f0:97:f7:
55:ba:71:5a:a0:0a:32:9b:0d:25:85:29:b5:28:f1:
e7:50:7e:18:99:19:85:ed:30:bc:10:82:83:97:c7:
72:ea:df:6c:61:da:8a:ae:bb:12:45:98:a1:ab:67:
18:05:6f:d6:60:30:36:10:1b:75:4b:9c:93:66:f1:
a7:90:a1:f6:33:68:0c:b0:1f:85:02:2a:68:35:04:
ab:d4:37:a8:cf:7d:c0:52:ab:98:7a:1f:58:86:8f:
38:aa:10:9e:a0:07:5f:f8:7b:eb:e0:45:9d:19:47:
d4:4b:39:be:83:a8:16:1a:e2:59:c7:5d:80:c8:23:
a0:d3:f6:31:61:84:b2:42:1c:5f:a5:66:f0:d6:78:
7a:6d:37:e4:31:e2:9b:18:5f:53:61:54:6c:ad:bc:
93:81:14:30:14:ce:02:63:8b:b6:44:36:a3:51:7d:
d5:ac:93:6d:12:b5:2d:5d:5f:3c:c9:67:48:ba:5a:
de:0e:4b:82:f7:05:53:00:52:b8:ff:89:cd:de:46:
22:e4:f2:10:6a:f4:7c:bb:2f:24:eb:ab:5d:d6:d6:
43:9c:c8:ad:3f:8d:65:bc:73:53:43:10:e9:d7:95:
a2:81:45:2b:57:d4:a7:6d:9b:df:81:22:c2:dc:05:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:50:98:44:69:66:AE:D2:C5:87:F7:67:66:AD:0C:D2:C9:25:CF:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/575E9F34C3FD11EF82CA9B6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.63.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dc:93:ed:c3:0d:33:08:60:70:bc:e9:1f:b9:1e:da:14:23:
8a:d7:30:69:02:6e:02:c8:ec:aa:80:b8:b4:fc:e6:6b:9b:4d:
7b:74:80:90:53:a7:7d:b7:f7:b2:c9:7f:e4:85:b2:d7:47:bc:
94:0e:eb:fe:c2:10:fa:be:e0:e1:29:ba:e4:9c:ff:43:7d:18:
ec:69:00:4e:d9:48:f0:30:45:d6:d0:91:82:89:93:e5:5f:31:
44:81:8c:c8:b0:2a:bb:01:93:2c:ae:d1:41:6b:72:e5:6e:18:
9a:28:ac:0c:61:5d:7f:d7:71:78:8e:c7:4e:19:d7:67:b6:1d:
f0:24:bc:df:8e:bc:6f:22:8f:40:51:08:f2:d3:50:fe:b8:c6:
f5:a4:4d:05:87:de:a5:f1:f2:27:1c:d7:50:84:23:9d:43:aa:
03:ba:91:20:64:f6:7f:7b:02:a4:ce:ab:f9:ab:11:78:1c:68:
78:18:b4:2d:23:b0:b9:44:cf:01:8c:01:6a:3d:75:da:a9:13:
30:29:4b:ad:b5:58:f7:16:98:ec:79:b7:38:6b:a9:27:f7:c4:
80:0a:cf:8d:0c:07:44:33:04:89:11:f3:c8:4d:10:7b:a9:aa:
bc:a1:fe:67:7f:f3:c5:f6:6c:62:a7:93:da:af:31:4b:0e:79:
b6:6a:b2:5e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO+4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDI1MDI5WhcNMjcxMjEyMDI1MDI5WjAYMRYw
FAYDVQQDEw02NzZlMTVmOS03ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs6/dNTjVQWLDVsPwl/dVunFaoAoymw0lhSm1KPHnUH4YmRmF7TC8EIKD
l8dy6t9sYdqKrrsSRZihq2cYBW/WYDA2EBt1S5yTZvGnkKH2M2gMsB+FAipoNQSr
1Deoz33AUquYeh9Yho84qhCeoAdf+Hvr4EWdGUfUSzm+g6gWGuJZx12AyCOg0/Yx
YYSyQhxfpWbw1nh6bTfkMeKbGF9TYVRsrbyTgRQwFM4CY4u2RDajUX3VrJNtErUt
XV88yWdIulreDkuC9wVTAFK4/4nN3kYi5PIQavR8uy8k66td1tZDnMitP41lvHNT
QxDp15WigUUrV9SnbZvfgSLC3AWZTQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHtQ
mERpZq7SxYf3Z2atDNLJJc+GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzVFOUYzNEMzRkQxMUVGODJDQTlCNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcM/MA0GCSqGSIb3DQEBCwUA
A4IBAQCU3JPtww0zCGBwvOkfuR7aFCOK1zBpAm4CyOyqgLi0/OZrm017dICQU6d9
t/eyyX/khbLXR7yUDuv+whD6vuDhKbrknP9DfRjsaQBO2UjwMEXW0JGCiZPlXzFE
gYzIsCq7AZMsrtFBa3LlbhiaKKwMYV1/13F4jsdOGddnth3wJLzfjrxvIo9AUQjy
01D+uMb1pE0Fh96l8fInHNdQhCOdQ6oDupEgZPZ/ewKkzqv5qxF4HGh4GLQtI7C5
RM8BjAFqPXXaqRMwKUuttVj3Fpjsebc4a6kn98SACs+NDAdEMwSJEfPITRB7qaq8
of5nf/PF9mxip5ParzFLDnm2arJe
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:35 2025 by rpki-client