Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/719A16D6BE7511EF84327A58762E951A.roa
File: 719A16D6BE7511EF84327A58762E951A.roa (raw, json)
Hash identifier: g4dYW+K0MMVG+AplAVUWMGDC59oe+3w5nuDxk/vXMl4=
Subject key identifier: 84:C7:FC:5F:0C:4B:1D:85:77:FB:6B:C0:73:7A:47:5A:71:BC:0B:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E620
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/719A16D6BE7511EF84327A58762E951A.roa
Signing time: Fri 20 Dec 2024 01:55:10 +0000
ROA not before: Fri 20 Dec 2024 01:55:06 +0000
ROA not after: Wed 10 Dec 2025 01:55:06 +0000
asID: 984
IP address blocks: 45.206.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58912 (0xe620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:55:06 2024 GMT
Not After : Dec 10 01:55:06 2025 GMT
Subject: CN=6764ce7e-18fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:7c:f1:ae:0b:d1:70:e4:90:7a:30:52:85:
8c:d0:f7:08:15:7f:0b:4d:f4:98:2b:8c:52:ab:ad:
d9:6f:7c:a4:b0:bf:89:5f:16:c5:41:82:38:3e:b4:
30:01:f3:d7:e5:71:c6:5d:f7:09:9c:3a:bb:c1:6e:
82:c8:f4:67:39:90:94:69:da:b3:6c:ce:fc:ba:24:
5c:65:3c:85:f3:04:8f:bf:53:0e:0b:ef:96:be:6a:
17:72:e1:4a:db:0e:3f:bb:12:24:c9:bc:fd:3e:97:
75:bb:01:8c:ed:ad:31:44:cd:33:24:41:9e:5d:4c:
da:f9:74:ac:f4:53:af:bb:f8:27:e4:5b:58:b9:d7:
e7:02:3d:d7:f5:2d:27:49:fd:73:36:7a:41:01:f5:
58:d9:e3:14:99:92:9e:24:9d:21:ef:c8:58:2d:53:
62:84:23:a9:85:d2:fb:34:74:67:96:b5:85:7f:b0:
3a:23:2b:c3:c2:0e:be:87:93:49:9d:77:39:88:3d:
a4:fa:5c:07:f7:79:62:bb:d0:62:d0:39:3c:8b:48:
b8:0d:72:36:8f:00:86:f1:94:03:99:7d:be:37:ef:
ca:6b:70:4c:c1:5b:45:10:7a:31:d7:38:eb:7b:7d:
2c:36:48:d0:75:74:58:d7:d0:bf:3f:fb:9d:c6:92:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C7:FC:5F:0C:4B:1D:85:77:FB:6B:C0:73:7A:47:5A:71:BC:0B:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/719A16D6BE7511EF84327A58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.143.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:53:84:60:0f:2e:87:64:95:67:5d:15:23:b6:21:0d:66:d4:
0a:af:26:e9:95:4d:a6:84:93:6a:82:ef:2d:4c:63:04:88:1d:
26:d1:ca:90:b1:fd:c4:33:68:52:5a:d4:a6:13:2a:ea:e4:66:
71:98:ec:fa:d3:db:76:a2:bd:66:f8:98:22:08:fd:78:d3:bc:
02:87:d2:4f:61:af:89:ec:7b:67:57:4c:9d:a1:74:e5:a5:a9:
bd:73:61:54:4a:f6:21:8e:44:d9:96:0f:62:90:44:bd:a0:b8:
98:cf:5f:c1:25:cd:f6:88:68:37:e9:0a:82:2d:46:c6:d3:17:
5f:47:07:f7:21:be:be:df:de:5a:9f:b1:b2:8a:06:52:f9:23:
00:91:dc:63:d3:06:54:e2:45:ca:ba:8d:24:d6:00:e6:52:22:
24:99:01:a5:61:3a:a7:e4:5e:84:ab:4d:57:74:1e:33:b3:bb:
db:7e:91:ff:b6:96:e3:d0:57:f2:90:39:2d:98:bf:f5:48:83:
65:bc:79:43:dc:30:39:2f:c3:3e:e4:cb:4e:16:37:36:25:4a:
95:5c:db:13:24:29:ac:0c:8a:0d:2d:3d:42:fb:6c:5b:4f:29:
c0:a1:b3:2e:e7:ec:dc:94:3a:bb:00:e4:f7:3d:cf:aa:ae:84:
cf:f6:37:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOYgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDE1NTA2WhcNMjUxMjEwMDE1NTA2WjAYMRYw
FAYDVQQDEw02NzY0Y2U3ZS0xOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzTd88a4L0XDkkHowUoWM0PcIFX8LTfSYK4xSq63Zb3yksL+JXxbFQYI4
PrQwAfPX5XHGXfcJnDq7wW6CyPRnOZCUadqzbM78uiRcZTyF8wSPv1MOC++WvmoX
cuFK2w4/uxIkybz9Ppd1uwGM7a0xRM0zJEGeXUza+XSs9FOvu/gn5FtYudfnAj3X
9S0nSf1zNnpBAfVY2eMUmZKeJJ0h78hYLVNihCOphdL7NHRnlrWFf7A6IyvDwg6+
h5NJnXc5iD2k+lwH93liu9Bi0Dk8i0i4DXI2jwCG8ZQDmX2+N+/Ka3BMwVtFEHox
1zjre30sNkjQdXRY19C/P/udxpIsUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFITH
/F8MSx2Fd/trwHN6R1pxvAsFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTlBMTZENkJFNzUxMUVGODQzMjdBNTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc6PMA0GCSqGSIb3DQEBCwUA
A4IBAQB9U4RgDy6HZJVnXRUjtiENZtQKrybplU2mhJNqgu8tTGMEiB0m0cqQsf3E
M2hSWtSmEyrq5GZxmOz609t2or1m+JgiCP1407wCh9JPYa+J7HtnV0ydoXTlpam9
c2FUSvYhjkTZlg9ikES9oLiYz1/BJc32iGg36QqCLUbG0xdfRwf3Ib6+395an7Gy
igZS+SMAkdxj0wZU4kXKuo0k1gDmUiIkmQGlYTqn5F6Eq01XdB4zs7vbfpH/tpbj
0FfykDktmL/1SINlvHlD3DA5L8M+5MtOFjc2JUqVXNsTJCmsDIoNLT1C+2xbTynA
obMu5+zclDq7AOT3Pc+qroTP9jfa
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:49 2025 by rpki-client