Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/754352C2BDBA11EFB9F9834D762E951A.roa
File: 754352C2BDBA11EFB9F9834D762E951A.roa (raw, json)
Hash identifier: 1n+TTGWH9VntweRzTKEVw/2ZfxcB4dAmGSjkqZ5fJBI=
Subject key identifier: DB:8A:5C:2C:7C:18:FC:05:DA:EE:B6:2F:67:04:F1:5F:0F:60:08:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E529
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/754352C2BDBA11EFB9F9834D762E951A.roa
Signing time: Thu 19 Dec 2024 03:36:40 +0000
ROA not before: Thu 19 Dec 2024 03:36:36 +0000
ROA not after: Wed 10 Dec 2025 03:36:36 +0000
asID: 984
IP address blocks: 45.204.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58665 (0xe529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:36:36 2024 GMT
Not After : Dec 10 03:36:36 2025 GMT
Subject: CN=676394c8-f4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:2f:f2:4c:44:2c:a6:d6:46:4d:f8:bc:83:
b0:2c:e6:d5:e3:be:94:8b:9c:a0:be:8c:ce:da:4a:
14:52:27:c1:6b:3d:fc:00:22:00:cb:5d:e5:eb:69:
87:00:31:39:2b:0a:7f:d3:aa:bc:ae:fb:0d:52:d6:
31:88:ec:25:44:79:ac:88:46:b0:26:cd:e4:76:56:
69:d5:b6:1e:4a:75:9a:84:72:9e:62:f0:ef:5d:b9:
2b:33:c5:b8:4c:a4:5e:62:e8:08:e5:a8:9d:2c:9e:
99:96:2d:99:cb:ed:c5:2a:83:71:11:cf:00:8f:c4:
d5:72:f2:3c:b8:8d:9f:5d:71:79:7b:cf:cb:de:19:
98:c1:89:50:1a:2b:69:ee:91:69:92:bb:92:fa:68:
95:1e:ee:61:14:b9:2e:aa:57:d7:8e:c9:17:c8:e5:
bf:af:e5:4e:2c:2b:6b:c2:26:01:51:45:70:a1:76:
66:eb:fd:72:1f:43:a2:a9:b4:77:5e:0a:5f:59:39:
4b:58:1d:1d:5c:89:2d:b5:52:5f:2c:8c:38:64:f6:
3c:b1:f3:65:ed:81:14:a1:e3:0e:63:6f:f3:16:1b:
07:04:03:35:db:e6:ca:3d:89:62:a0:eb:0d:ab:80:
a7:4a:27:ee:e8:70:6f:49:3d:24:8f:5c:af:e9:cd:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:5C:2C:7C:18:FC:05:DA:EE:B6:2F:67:04:F1:5F:0F:60:08:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/754352C2BDBA11EFB9F9834D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6a:ba:f0:f5:60:7a:b5:2b:36:d9:79:8e:82:d3:b4:6f:7a:
6a:e3:c0:b9:80:8c:64:24:2a:0a:84:21:03:04:34:1b:93:7b:
55:5b:25:53:34:07:ec:2d:c5:b0:e6:28:79:98:55:08:74:8a:
2d:39:62:c8:25:f6:07:af:4c:57:25:7b:76:2c:c7:4d:81:3a:
8a:30:89:fc:76:fd:2c:b4:17:6a:83:d4:5b:d0:ba:03:5e:33:
9a:e1:bd:34:45:5c:7b:65:c0:68:54:af:63:f1:e5:d7:6b:35:
4e:bd:e9:1c:b3:bc:d6:13:86:b2:59:f6:16:27:26:c1:77:c1:
ff:c1:52:8e:13:01:c2:98:37:7e:56:cb:2a:b1:33:2c:76:fe:
43:4a:57:ac:8a:0d:23:fd:d2:43:3a:e2:90:3f:dd:e6:94:64:
49:a8:9c:f5:66:d2:db:82:ac:60:1f:ad:04:90:2a:65:40:f1:
54:94:16:6f:dd:6e:40:0b:f0:ec:50:6e:9e:af:ae:6e:97:d6:
cd:95:15:54:77:6b:62:e0:7f:8f:0e:2f:50:2f:1e:96:f9:46:
ef:08:5c:81:5d:78:26:fd:26:65:78:cb:89:67:c1:ab:02:9c:
b2:5e:b1:dc:6c:eb:98:62:49:8b:79:72:35:ac:6a:e8:2e:cc:
5e:9d:af:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOUpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDMzNjM2WhcNMjUxMjEwMDMzNjM2WjAYMRYw
FAYDVQQDEw02NzYzOTRjOC1mNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtogv8kxELKbWRk34vIOwLObV476Ui5ygvozO2koUUifBaz38ACIAy13l
62mHADE5Kwp/06q8rvsNUtYxiOwlRHmsiEawJs3kdlZp1bYeSnWahHKeYvDvXbkr
M8W4TKReYugI5aidLJ6Zli2Zy+3FKoNxEc8Aj8TVcvI8uI2fXXF5e8/L3hmYwYlQ
Gitp7pFpkruS+miVHu5hFLkuqlfXjskXyOW/r+VOLCtrwiYBUUVwoXZm6/1yH0Oi
qbR3XgpfWTlLWB0dXIkttVJfLIw4ZPY8sfNl7YEUoeMOY2/zFhsHBAM12+bKPYli
oOsNq4CnSifu6HBvST0kj1yv6c2MhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNuK
XCx8GPwF2u62L2cE8V8PYAisMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTQzNTJDMkJEQkExMUVGQjlGOTgzNEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcz6MA0GCSqGSIb3DQEBCwUA
A4IBAQCmarrw9WB6tSs22XmOgtO0b3pq48C5gIxkJCoKhCEDBDQbk3tVWyVTNAfs
LcWw5ih5mFUIdIotOWLIJfYHr0xXJXt2LMdNgTqKMIn8dv0stBdqg9Rb0LoDXjOa
4b00RVx7ZcBoVK9j8eXXazVOvekcs7zWE4ayWfYWJybBd8H/wVKOEwHCmDd+Vssq
sTMsdv5DSlesig0j/dJDOuKQP93mlGRJqJz1ZtLbgqxgH60EkCplQPFUlBZv3W5A
C/DsUG6er65ul9bNlRVUd2ti4H+PDi9QLx6W+UbvCFyBXXgm/SZleMuJZ8GrApyy
XrHcbOuYYkmLeXI1rGroLsxena9H
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:24 2025 by rpki-client