Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79AE109ACBD911EF859A0559762E951A.roa
File: 79AE109ACBD911EF859A0559762E951A.roa (raw, json)
Hash identifier: 1xSz9uNibHao8NMjEXJeUsFMvg05uxkGBiq8b4Njsqo=
Subject key identifier: 4E:C2:8A:09:19:D4:7C:BA:43:00:1A:C3:DA:D8:01:FA:F2:D4:3F:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F7E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79AE109ACBD911EF859A0559762E951A.roa
Signing time: Mon 06 Jan 2025 02:53:58 +0000
ROA not before: Mon 06 Jan 2025 02:53:55 +0000
ROA not after: Sat 08 Feb 2025 02:53:55 +0000
asID: 272149
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63460 (0xf7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 02:53:55 2025 GMT
Not After : Feb 8 02:53:55 2025 GMT
Subject: CN=677b45c6-08ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:41:a1:9f:09:7e:cf:67:0f:54:26:b3:47:
8d:da:59:6d:9f:4f:b4:93:92:49:7b:6a:49:91:07:
3a:7d:6d:71:89:8b:66:92:9a:6c:4e:e7:0f:5c:76:
e9:7b:79:1b:03:43:28:60:d0:17:bf:97:43:a3:72:
f4:e1:15:50:cb:8c:c9:f6:47:d7:bc:45:54:85:2c:
0d:ae:83:2e:21:af:a1:0b:b0:0d:80:90:d7:bf:de:
87:dd:97:c6:c0:39:f8:06:66:29:a2:91:26:73:7c:
f4:24:bd:8b:7b:4b:20:c2:60:c9:fe:3d:41:1a:9f:
94:35:35:f3:f2:1d:6c:23:30:44:18:12:ef:bf:3c:
d3:28:26:2c:e3:79:a2:1f:d0:fa:87:c2:73:79:9c:
f3:00:ce:35:60:a1:dd:03:cc:11:52:16:13:df:7b:
3f:81:20:61:b7:10:ec:43:3f:99:bf:60:9f:23:b4:
9a:03:a8:fa:44:4b:ef:d5:86:18:31:5d:81:95:da:
b8:eb:25:a6:05:eb:22:ea:11:46:84:4b:1b:57:af:
a0:93:d6:28:ee:d4:f7:e6:91:18:47:0e:49:e5:b0:
f6:46:a3:30:e8:e1:21:37:76:88:cc:e3:a5:0c:71:
a9:c8:ba:76:87:36:4a:2a:68:95:cc:12:be:9c:0f:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C2:8A:09:19:D4:7C:BA:43:00:1A:C3:DA:D8:01:FA:F2:D4:3F:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79AE109ACBD911EF859A0559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ca:5f:55:6d:c9:44:0b:31:05:4d:e8:5a:fe:e9:e3:ca:e3:
e8:30:7f:ef:e8:1e:e7:b6:54:a5:54:6c:b8:6e:b2:38:80:91:
1d:90:72:85:2a:67:3b:a5:ff:93:b1:b7:f8:77:cf:28:84:6f:
e9:84:c1:96:b9:82:1b:22:ff:56:eb:9b:8b:11:f2:dd:fa:3b:
5a:7e:20:4d:97:98:67:94:88:32:46:2f:83:39:23:ae:77:43:
55:62:80:75:19:75:0b:70:52:83:e5:48:c6:cc:8c:c0:bc:82:
9b:1b:5b:49:43:c6:75:26:f7:cf:1f:ba:7e:92:7d:b5:91:99:
93:c3:03:8c:15:6f:af:99:96:80:d1:e7:64:f0:59:f8:57:91:
73:77:0a:84:d8:35:cd:e4:9e:ac:57:4e:8c:53:58:3e:74:e8:
cf:b5:b3:7b:1b:5c:24:e0:43:03:24:48:ff:74:de:b4:00:2e:
d8:51:55:0a:b1:d9:4e:70:df:a8:d2:50:70:23:85:e5:0a:53:
26:97:ec:f6:bf:36:02:44:50:a4:9e:48:01:bd:74:bb:d7:7b:
57:d4:89:d8:15:bb:a3:85:f5:0b:35:4c:04:42:6c:fc:c1:fe:
2e:13:be:3f:8e:9d:62:6a:2c:58:de:51:72:66:ab:5b:5b:bc:
07:82:2a:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPfkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MDI1MzU1WhcNMjUwMjA4MDI1MzU1WjAYMRYw
FAYDVQQDEw02NzdiNDVjNi0wOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2f5BoZ8Jfs9nD1Qms0eN2lltn0+0k5JJe2pJkQc6fW1xiYtmkppsTucP
XHbpe3kbA0MoYNAXv5dDo3L04RVQy4zJ9kfXvEVUhSwNroMuIa+hC7ANgJDXv96H
3ZfGwDn4BmYpopEmc3z0JL2Le0sgwmDJ/j1BGp+UNTXz8h1sIzBEGBLvvzzTKCYs
43miH9D6h8JzeZzzAM41YKHdA8wRUhYT33s/gSBhtxDsQz+Zv2CfI7SaA6j6REvv
1YYYMV2Bldq46yWmBesi6hFGhEsbV6+gk9Yo7tT35pEYRw5J5bD2RqMw6OEhN3aI
zOOlDHGpyLp2hzZKKmiVzBK+nA/0HwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE7C
igkZ1Hy6QwAaw9rYAfry1D86MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OUFFMTA5QUNCRDkxMUVGODU5QTA1NTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD6MA0GCSqGSIb3DQEBCwUA
A4IBAQAGyl9VbclECzEFTeha/unjyuPoMH/v6B7ntlSlVGy4brI4gJEdkHKFKmc7
pf+Tsbf4d88ohG/phMGWuYIbIv9W65uLEfLd+jtafiBNl5hnlIgyRi+DOSOud0NV
YoB1GXULcFKD5UjGzIzAvIKbG1tJQ8Z1JvfPH7p+kn21kZmTwwOMFW+vmZaA0edk
8Fn4V5FzdwqE2DXN5J6sV06MU1g+dOjPtbN7G1wk4EMDJEj/dN60AC7YUVUKsdlO
cN+o0lBwI4XlClMml+z2vzYCRFCknkgBvXS713tX1InYFbujhfULNUwEQmz8wf4u
E74/jp1iaixY3lFyZqtbW7wHgiqm
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:23 2025 by rpki-client