Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A1DB38C3B311EFB112A08A762E951A.roa
File: 82A1DB38C3B311EFB112A08A762E951A.roa (raw, json)
Hash identifier: Ab6ti6TmQq+jAVOWCoHbgeANtXKvdqzCqVe3PBzRna0=
Subject key identifier: C8:54:C4:C8:55:CD:51:75:6F:2F:EE:DF:09:7A:75:90:E8:D2:52:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A1DB38C3B311EFB112A08A762E951A.roa
Signing time: Thu 26 Dec 2024 18:02:03 +0000
ROA not before: Thu 26 Dec 2024 18:01:59 +0000
ROA not after: Sun 12 Dec 2027 18:01:59 +0000
asID: 17561
IP address blocks: 45.204.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61019 (0xee5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 18:01:59 2024 GMT
Not After : Dec 12 18:01:59 2027 GMT
Subject: CN=676d9a1b-56e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:40:6e:97:0a:fe:38:d2:38:77:93:5c:37:
3a:28:37:dd:fc:65:b3:1b:d6:39:32:34:81:dc:e2:
2d:b2:b2:01:17:68:f6:5d:4b:4f:0e:09:75:cd:e6:
89:09:e4:65:f9:20:59:2f:f8:60:69:cf:5e:1f:b0:
8f:fd:32:31:30:38:13:78:cc:75:dd:6c:bd:51:7c:
29:a5:09:67:99:a5:ad:62:8c:7b:3e:09:3b:f0:16:
2a:64:40:af:91:d6:fa:71:9b:5d:5d:20:81:21:e1:
3e:d2:09:13:89:69:a2:c2:a6:92:bf:e7:0a:83:d0:
0f:66:6d:c3:38:98:51:68:94:d9:6a:6b:2c:36:61:
2b:73:a4:44:fa:a4:ad:cd:8d:1c:67:3a:bb:20:e6:
7d:3e:31:08:2e:9b:57:2b:5b:47:d2:b9:77:10:3f:
46:44:83:20:3a:c9:ee:d3:8e:19:af:78:db:a7:75:
08:c9:c9:b0:a8:ac:5e:ec:d7:4c:ff:75:84:32:a2:
e4:22:72:63:0c:c0:1b:3f:7c:98:f4:8a:3d:83:28:
d2:a3:d5:58:6d:4d:6a:5d:e2:b6:a9:ea:ac:62:2d:
99:9c:3a:8d:33:43:df:19:cc:6c:cf:fe:5c:9c:fe:
4c:6f:a2:7a:1a:19:7e:68:35:44:84:15:ec:66:e6:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:C4:C8:55:CD:51:75:6F:2F:EE:DF:09:7A:75:90:E8:D2:52:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82A1DB38C3B311EFB112A08A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:3e:4a:90:e7:43:53:d4:93:17:6a:93:24:d6:46:5d:a7:91:
76:03:17:26:21:e4:49:9b:45:39:45:1b:66:b9:74:a6:dc:41:
f2:a1:72:5d:ec:ef:be:a9:09:68:7b:fe:32:f9:15:70:95:92:
71:28:1d:19:68:af:66:b6:3f:e6:4e:63:55:88:89:67:49:41:
ff:54:93:3e:ed:40:c7:2e:a5:08:8d:94:88:fd:53:b4:ca:3e:
a3:ad:c2:67:c1:4a:b0:89:7e:25:25:0b:a7:36:f6:fb:18:18:
37:71:1a:27:21:25:2b:0e:8e:1f:8b:e5:41:ac:e0:f1:85:83:
c2:d4:52:04:c5:e0:31:3c:e7:94:73:36:a1:71:99:37:7d:d2:
ff:a1:7d:99:43:a1:88:04:08:08:e6:09:4e:a3:29:05:be:3f:
8c:f3:7d:f1:3f:e4:1c:52:7d:23:56:d3:41:b7:34:f3:27:7e:
a7:13:ae:8c:3d:b9:57:01:29:ed:7c:53:77:f4:b6:77:2d:ad:
5a:76:bf:2f:35:2c:3d:36:99:3d:51:b7:37:a3:93:65:fc:1c:
26:67:2c:1c:c2:f5:12:c0:90:74:68:2f:0d:1a:90:34:50:55:
02:83:32:11:0d:70:03:37:2e:63:f9:41:b7:8f:31:36:d8:62:
5f:07:d3:a7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO5bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTgwMTU5WhcNMjcxMjEyMTgwMTU5WjAYMRYw
FAYDVQQDEw02NzZkOWExYi01NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvJdAbpcK/jjSOHeTXDc6KDfd/GWzG9Y5MjSB3OItsrIBF2j2XUtPDgl1
zeaJCeRl+SBZL/hgac9eH7CP/TIxMDgTeMx13Wy9UXwppQlnmaWtYox7Pgk78BYq
ZECvkdb6cZtdXSCBIeE+0gkTiWmiwqaSv+cKg9APZm3DOJhRaJTZamssNmErc6RE
+qStzY0cZzq7IOZ9PjEILptXK1tH0rl3ED9GRIMgOsnu044Zr3jbp3UIycmwqKxe
7NdM/3WEMqLkInJjDMAbP3yY9Io9gyjSo9VYbU1qXeK2qeqsYi2ZnDqNM0PfGcxs
z/5cnP5Mb6J6Ghl+aDVEhBXsZubXeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMhU
xMhVzVF1by/u3wl6dZDo0lI5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkExREIzOEMzQjMxMUVGQjExMkEwOEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxHMA0GCSqGSIb3DQEBCwUA
A4IBAQC3PkqQ50NT1JMXapMk1kZdp5F2AxcmIeRJm0U5RRtmuXSm3EHyoXJd7O++
qQloe/4y+RVwlZJxKB0ZaK9mtj/mTmNViIlnSUH/VJM+7UDHLqUIjZSI/VO0yj6j
rcJnwUqwiX4lJQunNvb7GBg3cRonISUrDo4fi+VBrODxhYPC1FIExeAxPOeUczah
cZk3fdL/oX2ZQ6GIBAgI5glOoykFvj+M833xP+QcUn0jVtNBtzTzJ36nE66MPblX
ASntfFN39LZ3La1adr8vNSw9Npk9Ubc3o5Nl/BwmZywcwvUSwJB0aC8NGpA0UFUC
gzIRDXADNy5j+UG3jzE22GJfB9On
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:00 2025 by rpki-client