Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7790D700ACA011EFA2F1619B762E951A.roa
File: 7790D700ACA011EFA2F1619B762E951A.roa (raw, json)
Hash identifier: 42XioncaORGbmqtnhtPu09RanUzIz/0j0Is3d2LSZxc=
Subject key identifier: 6C:FB:29:4A:DF:31:E3:5F:BA:B8:6D:1F:2A:F0:02:D4:0C:38:31:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DBCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7790D700ACA011EFA2F1619B762E951A.roa
Signing time: Wed 27 Nov 2024 09:17:47 +0000
ROA not before: Wed 27 Nov 2024 09:17:43 +0000
ROA not after: Tue 11 Feb 2025 09:17:43 +0000
asID: 399989
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56268 (0xdbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Nov 27 09:17:43 2024 GMT
Not After : Feb 11 09:17:43 2025 GMT
Subject: CN=6746e3bb-6faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:cc:da:24:ee:4a:14:01:59:39:0f:2d:e4:
1f:42:25:4c:26:13:f8:25:d0:b0:0d:77:d1:22:e5:
30:41:05:e7:c2:81:72:07:1e:42:c3:1e:d0:fd:a6:
6d:a1:7b:84:16:6c:4c:68:bb:2c:fa:cc:bd:a0:fe:
85:ac:a8:73:91:a1:44:1c:04:39:2c:70:0e:e8:2a:
83:41:85:0c:f3:7b:35:e7:8a:f8:79:08:db:ac:58:
b3:bd:55:77:9e:88:f7:07:03:8b:e1:63:8e:17:4b:
22:2d:2c:db:ab:80:c3:49:4c:72:a4:7c:c0:16:29:
8f:6c:24:d7:07:e6:ae:bd:f5:17:6b:e9:be:1f:18:
a0:2f:ab:78:5b:b4:6f:85:9d:1f:bb:52:36:a8:e7:
5e:bd:78:ce:0a:cb:96:ff:8f:0b:bc:96:8c:67:27:
f1:de:32:9d:ec:4d:27:35:63:d1:04:29:18:80:50:
9e:68:81:4f:c8:a1:a2:24:a2:c5:d1:04:6c:8c:98:
27:c6:51:aa:98:5a:69:a4:89:ba:bd:30:40:db:5e:
3c:12:dd:47:6b:01:af:55:b7:3a:96:db:9b:48:34:
33:5a:50:80:26:db:8a:5c:21:62:f9:81:4d:32:ec:
6c:d6:b5:71:7b:4e:c7:3a:5b:b7:58:3c:4c:b1:93:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:29:4A:DF:31:E3:5F:BA:B8:6D:1F:2A:F0:02:D4:0C:38:31:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7790D700ACA011EFA2F1619B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ab:b2:59:96:e4:01:81:9b:6c:22:ce:56:d4:f3:23:20:be:
2b:99:da:d7:74:e8:b8:cc:81:d5:20:2b:08:2d:df:3c:2c:da:
e9:45:5d:d8:c7:cb:b2:85:07:fe:b1:1f:43:b5:c8:c6:31:7d:
85:fc:21:d9:76:18:60:f4:d1:23:d2:aa:70:3e:96:cd:b7:e9:
5b:eb:47:06:77:f8:7b:25:12:78:be:37:68:f4:90:1e:bf:85:
2d:81:51:7d:51:31:c2:28:df:3e:3a:32:59:da:d4:0a:29:eb:
df:44:96:55:69:a3:91:3c:56:26:17:00:06:ff:15:b8:23:d3:
f8:92:5b:bf:e2:f1:f5:b4:a8:a2:f8:8c:04:70:43:3c:af:91:
5b:c8:bc:7f:ad:19:ad:db:a3:ff:4a:05:c4:33:de:ad:49:dd:
3b:f1:06:94:2f:a5:4f:d9:90:c3:69:f0:b8:a0:a6:04:a4:b5:
a4:3d:9a:35:61:d0:20:e2:09:ea:27:14:03:fa:ea:93:fe:96:
c7:61:2a:5e:ce:43:cd:1b:16:79:41:1d:9e:b8:67:79:90:6e:
df:6f:f0:83:61:4b:50:fd:79:f4:bb:1e:1c:c5:71:1b:ed:1f:
5c:b0:3e:ad:8a:07:3d:63:fa:e6:6f:79:8e:ac:21:8e:ca:c8:
63:f5:ed:00
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANvMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTI3MDkxNzQzWhcNMjUwMjExMDkxNzQzWjAYMRYw
FAYDVQQDEw02NzQ2ZTNiYi02ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyXbM2iTuShQBWTkPLeQfQiVMJhP4JdCwDXfRIuUwQQXnwoFyBx5Cwx7Q
/aZtoXuEFmxMaLss+sy9oP6FrKhzkaFEHAQ5LHAO6CqDQYUM83s154r4eQjbrFiz
vVV3noj3BwOL4WOOF0siLSzbq4DDSUxypHzAFimPbCTXB+auvfUXa+m+HxigL6t4
W7RvhZ0fu1I2qOdevXjOCsuW/48LvJaMZyfx3jKd7E0nNWPRBCkYgFCeaIFPyKGi
JKLF0QRsjJgnxlGqmFpppIm6vTBA2148Et1HawGvVbc6ltubSDQzWlCAJtuKXCFi
+YFNMuxs1rVxe07HOlu3WDxMsZMxvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGz7
KUrfMeNfurhtHyrwAtQMODHvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzkwRDcwMEFDQTAxMUVGQTJGMTYxOUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQwMA0GCSqGSIb3DQEBCwUA
A4IBAQBKq7JZluQBgZtsIs5W1PMjIL4rmdrXdOi4zIHVICsILd88LNrpRV3Yx8uy
hQf+sR9DtcjGMX2F/CHZdhhg9NEj0qpwPpbNt+lb60cGd/h7JRJ4vjdo9JAev4Ut
gVF9UTHCKN8+OjJZ2tQKKevfRJZVaaORPFYmFwAG/xW4I9P4klu/4vH1tKii+IwE
cEM8r5FbyLx/rRmt26P/SgXEM96tSd078QaUL6VP2ZDDafC4oKYEpLWkPZo1YdAg
4gnqJxQD+uqT/pbHYSpezkPNGxZ5QR2euGd5kG7fb/CDYUtQ/Xn0ux4cxXEb7R9c
sD6tigc9Y/rmb3mOrCGOyshj9e0A
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:14 2025 by rpki-client