Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC8394C39311EFBBAB0642762E951A.roa
File: 68DC8394C39311EFBBAB0642762E951A.roa (raw, json)
Hash identifier: vcLrzFxaxa7rFW8E4BeGws//qQG/DY/K0bC+GyrV9MQ=
Subject key identifier: FC:80:87:D0:E8:96:C5:52:F4:3C:A9:72:37:9C:9E:AD:F6:58:80:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC8394C39311EFBBAB0642762E951A.roa
Signing time: Thu 26 Dec 2024 14:12:16 +0000
ROA not before: Thu 26 Dec 2024 14:12:12 +0000
ROA not after: Sun 12 Dec 2027 14:12:12 +0000
asID: 17561
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60675 (0xed03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 14:12:12 2024 GMT
Not After : Dec 12 14:12:12 2027 GMT
Subject: CN=676d6440-b72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:66:0b:47:4b:a4:92:01:4a:25:b0:9e:f9:e8:
44:e3:69:30:a1:8d:9f:e1:6c:68:b8:6b:d7:b4:38:
54:32:36:ea:e3:76:d8:71:9c:9b:78:62:8a:60:9f:
0c:c4:37:1d:0f:d7:23:a6:c8:dc:6d:48:f6:49:7c:
99:25:f3:ca:ef:90:57:0d:03:a3:79:f6:b4:40:f6:
39:3a:7a:6a:92:ae:d6:47:c2:87:d0:f3:30:1f:b3:
31:27:04:be:09:b9:06:e6:bc:b4:d0:63:d5:a7:ac:
d3:cd:92:2c:39:af:33:98:e0:e3:61:30:05:90:ae:
57:2c:4f:36:47:e8:b6:61:ca:4e:02:60:3d:1d:79:
36:17:17:0b:18:78:db:bd:d4:0a:5a:c4:f2:2f:aa:
1c:f4:18:fc:fd:90:44:36:e6:42:f4:28:ee:18:c8:
59:0a:c4:99:33:89:d8:97:f2:77:a2:56:22:ee:b3:
f2:33:37:03:d3:fb:d2:e2:50:89:83:94:6b:ca:dd:
23:ac:a4:9c:24:24:a0:83:e3:c1:b2:cb:d3:8e:7a:
8b:3a:34:32:ec:c3:76:15:3d:17:8c:1c:c7:e9:e2:
52:7b:7c:49:bc:af:cf:eb:68:f6:ad:c4:ab:a0:8c:
53:3d:df:eb:bb:00:0f:34:cb:15:4a:a1:ae:a8:77:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:80:87:D0:E8:96:C5:52:F4:3C:A9:72:37:9C:9E:AD:F6:58:80:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DC8394C39311EFBBAB0642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
32:29:73:73:51:5e:2f:20:84:b4:8a:ed:b6:cf:56:f8:7c:45:
a8:9d:42:b1:17:91:cc:06:d2:d0:59:20:d2:60:44:01:4f:b1:
60:6d:d7:ec:b9:e1:a8:97:3f:be:98:65:30:cf:18:9b:d3:8e:
77:72:ec:dd:52:63:6d:26:5b:3a:63:16:c7:9d:70:49:b4:a8:
65:8a:9d:44:21:72:eb:58:94:5b:9e:47:b9:26:38:ff:2e:fa:
1c:31:88:98:1b:28:80:4b:fa:69:96:0d:8e:eb:88:23:91:70:
32:93:58:80:92:5a:41:de:6d:02:e1:75:1a:bb:1f:49:ef:8a:
7c:3f:20:2b:1e:28:86:b7:17:70:70:63:06:2b:f0:b5:a4:25:
ac:c6:2d:72:b1:01:90:d6:4c:d9:f7:54:0d:19:a3:c1:f5:7e:
13:52:c4:f2:f2:fa:26:cb:74:cc:1c:e4:40:c5:fd:96:0e:a9:
3e:33:78:2e:97:ac:5b:f2:73:0f:8a:39:f0:fc:d5:97:c9:01:
d4:bc:e6:73:05:ab:eb:84:d1:09:95:6a:d9:28:9e:ea:eb:18:
5c:53:ba:01:62:7f:d7:d8:2f:23:ec:2b:d8:4e:71:66:87:a2:
ea:39:2d:75:2f:2d:9e:88:81:d0:6d:bc:3a:c2:40:e1:f5:61:
e1:88:64:02
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO0DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTQxMjEyWhcNMjcxMjEyMTQxMjEyWjAYMRYw
FAYDVQQDEw02NzZkNjQ0MC1iNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8GYLR0ukkgFKJbCe+ehE42kwoY2f4WxouGvXtDhUMjbq43bYcZybeGKK
YJ8MxDcdD9cjpsjcbUj2SXyZJfPK75BXDQOjefa0QPY5Onpqkq7WR8KH0PMwH7Mx
JwS+CbkG5ry00GPVp6zTzZIsOa8zmODjYTAFkK5XLE82R+i2YcpOAmA9HXk2FxcL
GHjbvdQKWsTyL6oc9Bj8/ZBENuZC9CjuGMhZCsSZM4nYl/J3olYi7rPyMzcD0/vS
4lCJg5Rryt0jrKScJCSgg+PBssvTjnqLOjQy7MN2FT0XjBzH6eJSe3xJvK/P62j2
rcSroIxTPd/ruwAPNMsVSqGuqHcUEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPyA
h9DolsVS9Dypcjecnq32WIARMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82OERDODM5NEMzOTMxMUVGQkJBQjA2NDI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTzMA0GCSqGSIb3DQEBCwUA
A4IBAQAyKXNzUV4vIIS0iu22z1b4fEWonUKxF5HMBtLQWSDSYEQBT7FgbdfsueGo
lz++mGUwzxib0453cuzdUmNtJls6YxbHnXBJtKhlip1EIXLrWJRbnke5Jjj/Lvoc
MYiYGyiAS/pplg2O64gjkXAyk1iAklpB3m0C4XUaux9J74p8PyArHiiGtxdwcGMG
K/C1pCWsxi1ysQGQ1kzZ91QNGaPB9X4TUsTy8vomy3TMHORAxf2WDqk+M3gul6xb
8nMPijnw/NWXyQHUvOZzBavrhNEJlWrZKJ7q6xhcU7oBYn/X2C8j7CvYTnFmh6Lq
OS11Ly2eiIHQbbw6wkDh9WHhiGQC
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:00 2025 by rpki-client