Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73BAD354BDAF11EF934FC37C762E951A.roa
File: 73BAD354BDAF11EF934FC37C762E951A.roa (raw, json)
Hash identifier: DqUVgF7+A+ltkM9Q82lSDAXBOiuYBXXQ3wt1B2Wue10=
Subject key identifier: E1:07:76:30:59:E7:26:A6:8B:E3:12:4C:2C:9D:0F:F6:68:AB:22:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E49B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73BAD354BDAF11EF934FC37C762E951A.roa
Signing time: Thu 19 Dec 2024 02:17:53 +0000
ROA not before: Thu 19 Dec 2024 02:17:49 +0000
ROA not after: Wed 10 Dec 2025 02:17:49 +0000
asID: 984
IP address blocks: 45.198.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58523 (0xe49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:17:49 2024 GMT
Not After : Dec 10 02:17:49 2025 GMT
Subject: CN=67638251-7470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:5f:b3:3c:ae:99:8d:b9:7d:5d:ee:0f:20:
73:e2:c5:95:e8:b8:74:64:1d:0c:78:73:b7:42:a2:
2c:13:75:8d:59:e5:fd:a9:77:fc:24:23:c1:b6:e6:
78:6d:e5:c2:05:6c:34:5e:6b:c7:40:59:39:03:9c:
b3:79:db:b8:e2:00:be:7e:5c:8b:33:bc:de:9e:7e:
67:fb:10:0b:58:77:e8:07:dd:d8:8c:60:e0:31:59:
3b:c1:37:5a:61:ec:80:f8:49:4f:3b:ef:ff:67:16:
49:41:73:10:9d:b6:2f:b4:c8:5b:d3:c8:2e:d6:d0:
81:9b:42:2b:32:ff:25:2e:62:3d:9f:24:d9:34:f3:
c3:00:86:c2:46:96:06:2e:86:8a:be:7c:59:83:58:
ce:46:50:56:55:13:58:58:9d:50:ef:7a:0c:82:ae:
11:dc:72:24:0c:79:76:37:5a:9b:b2:39:fe:5e:3e:
60:90:d4:28:af:80:7c:d6:6c:fa:dc:f1:70:84:f2:
83:19:17:55:9a:69:07:db:89:5a:03:6b:54:76:43:
a0:19:ba:8b:65:39:4f:25:f2:ff:39:e1:3c:e6:8f:
a6:3e:60:e4:f9:12:b1:48:b3:08:06:a5:a0:da:76:
66:e1:25:3e:b1:e7:8f:7b:62:9d:94:6e:f0:85:6b:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:76:30:59:E7:26:A6:8B:E3:12:4C:2C:9D:0F:F6:68:AB:22:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73BAD354BDAF11EF934FC37C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.229.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2c:04:c8:ab:0c:de:51:00:18:a7:b3:33:c7:13:44:29:25:
b3:3f:6f:ee:37:0b:0b:af:74:35:c5:2a:1b:3d:8c:1e:fd:1f:
e7:da:aa:19:9f:09:b3:99:ec:33:1a:2b:03:a3:32:50:5e:4b:
1b:32:20:dd:a4:76:a6:cb:b6:de:01:32:14:19:6b:3a:9c:12:
4c:1f:18:73:8b:62:b8:b1:9f:a5:75:20:6d:17:46:47:4c:34:
75:a3:9a:16:74:f9:65:f3:51:09:85:bd:4d:ca:32:da:94:1e:
c3:fd:0b:5c:d7:f8:9b:28:e7:9e:f9:c4:f1:f9:fd:44:81:cc:
0f:71:c3:5e:30:82:ff:c1:9a:2f:b4:3c:60:ec:6a:2e:de:c9:
db:98:6e:90:e8:11:a2:77:e6:93:6a:fd:30:c6:ae:01:23:aa:
d3:9f:ea:70:33:39:f7:58:9e:fc:ea:01:00:83:32:59:cc:b3:
8a:50:bd:be:53:6f:60:a3:3f:97:c8:f5:56:b4:fd:19:56:d8:
f3:90:a7:f9:83:3e:52:50:8f:0b:c1:92:fa:97:cc:9d:25:52:
c6:bb:94:36:a3:25:e2:26:ad:c9:ac:bb:12:d8:21:73:f9:db:
71:f8:42:b3:6f:22:17:ca:6f:05:aa:f8:d1:db:bd:b1:66:f3:
db:aa:ca:54
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOSbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDIxNzQ5WhcNMjUxMjEwMDIxNzQ5WjAYMRYw
FAYDVQQDEw02NzYzODI1MS03NDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAumRfszyumY25fV3uDyBz4sWV6Lh0ZB0MeHO3QqIsE3WNWeX9qXf8JCPB
tuZ4beXCBWw0XmvHQFk5A5yzedu44gC+flyLM7zenn5n+xALWHfoB93YjGDgMVk7
wTdaYeyA+ElPO+//ZxZJQXMQnbYvtMhb08gu1tCBm0IrMv8lLmI9nyTZNPPDAIbC
RpYGLoaKvnxZg1jORlBWVRNYWJ1Q73oMgq4R3HIkDHl2N1qbsjn+Xj5gkNQor4B8
1mz63PFwhPKDGRdVmmkH24laA2tUdkOgGbqLZTlPJfL/OeE85o+mPmDk+RKxSLMI
BqWg2nZm4SU+seePe2KdlG7whWt4FwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOEH
djBZ5yami+MSTCydD/ZoqyK5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83M0JBRDM1NEJEQUYxMUVGOTM0RkMzN0M3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcblMA0GCSqGSIb3DQEBCwUA
A4IBAQAiLATIqwzeUQAYp7MzxxNEKSWzP2/uNwsLr3Q1xSobPYwe/R/n2qoZnwmz
mewzGisDozJQXksbMiDdpHamy7beATIUGWs6nBJMHxhzi2K4sZ+ldSBtF0ZHTDR1
o5oWdPll81EJhb1NyjLalB7D/Qtc1/ibKOee+cTx+f1EgcwPccNeMIL/wZovtDxg
7Gou3snbmG6Q6BGid+aTav0wxq4BI6rTn+pwMzn3WJ786gEAgzJZzLOKUL2+U29g
oz+XyPVWtP0ZVtjzkKf5gz5SUI8LwZL6l8ydJVLGu5Q2oyXiJq3JrLsS2CFz+dtx
+EKzbyIXym8FqvjR272xZvPbqspU
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:12 2025 by rpki-client