Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D5E7684C39111EF9B6B76B5762E951A.roa
File: 8D5E7684C39111EF9B6B76B5762E951A.roa (raw, json)
Hash identifier: 3m7GIanHuQgjjEr14tryKwZNqnNF6TuEnT8srCzdnIM=
Subject key identifier: 26:45:A9:4B:B8:DB:B8:1A:7A:18:3A:EA:8D:E1:2C:F1:67:45:82:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D5E7684C39111EF9B6B76B5762E951A.roa
Signing time: Thu 26 Dec 2024 13:58:58 +0000
ROA not before: Thu 26 Dec 2024 13:58:54 +0000
ROA not after: Sun 12 Dec 2027 13:58:54 +0000
asID: 17561
IP address blocks: 45.196.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60655 (0xecef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:58:54 2024 GMT
Not After : Dec 12 13:58:54 2027 GMT
Subject: CN=676d6122-442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:b8:0b:af:63:12:07:05:91:86:6c:d8:41:
b2:ed:a8:28:79:89:08:0c:5a:ac:f3:05:6c:c3:fb:
46:73:05:70:57:0e:81:26:4d:91:eb:cd:1c:85:4d:
2c:cc:c6:7d:6f:00:54:fb:cc:94:18:ff:9d:3e:72:
02:28:dc:7e:b0:6c:ac:fa:bb:06:05:53:38:06:3d:
4c:ac:25:8b:2e:a6:40:6c:06:65:4e:39:8a:f4:e8:
f7:00:5b:0d:cb:b2:29:26:14:fc:1c:98:72:86:c9:
5b:0b:27:38:35:4c:59:40:77:be:95:58:fb:66:7d:
6d:36:f4:9c:d3:fa:ce:f9:11:98:7a:71:27:6b:23:
9f:62:0a:57:f6:ff:1b:39:9c:f4:ca:2f:9f:8e:9f:
d6:ee:aa:4e:78:dd:12:83:d3:1c:29:5b:99:e8:c2:
73:89:f4:f9:80:43:be:c2:d9:1f:6c:30:f2:4f:d4:
f4:f0:a6:4e:83:74:c9:27:02:b4:35:bc:2d:53:ea:
c6:28:b2:31:73:f2:c1:98:85:a5:22:13:7c:08:bf:
22:34:7d:f7:41:05:d8:fb:cc:ef:21:80:af:a8:e3:
27:5b:6e:d1:a3:ae:ca:75:a4:d4:5f:9f:0f:1b:e9:
05:da:f9:60:c5:42:f5:61:d9:55:79:38:4a:cd:84:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:A9:4B:B8:DB:B8:1A:7A:18:3A:EA:8D:E1:2C:F1:67:45:82:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D5E7684C39111EF9B6B76B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ad:09:00:c1:13:e2:27:48:f6:6a:88:78:84:60:03:01:0d:
28:05:fa:71:bb:94:b7:f4:e9:18:3b:47:8a:24:7a:4e:b5:10:
fe:ac:f7:43:c5:05:ab:63:63:92:4e:9d:bd:f0:27:a1:dc:e1:
9b:bf:0c:4f:68:be:55:5b:24:c0:cf:89:e9:17:01:b3:7f:8d:
a5:10:8e:47:48:ef:a6:1d:ec:a8:00:b5:a6:19:bf:ef:0d:de:
cf:86:aa:4c:c6:d8:3d:6f:55:32:43:ba:3b:55:48:05:68:68:
33:13:61:46:bb:6e:f0:47:69:51:51:57:f0:dc:f1:70:73:06:
ac:88:ab:bc:39:ac:03:3a:cc:cb:4b:89:96:f3:62:50:85:a3:
11:75:d9:b5:c9:30:0d:86:8a:21:f4:66:e0:3d:b3:3c:af:99:
17:b7:e9:a9:c7:cc:8f:fa:0c:8b:9b:57:a7:34:d3:88:41:9a:
59:e1:af:43:fb:5e:e7:66:87:6a:51:2a:01:9f:60:e0:67:51:
49:f9:dd:ac:61:e4:7c:39:1b:d9:5c:d2:2d:ad:b0:fa:e9:29:
5a:7a:7c:0e:d1:db:27:9d:a1:0c:c1:d2:d1:5c:51:c3:65:f5:
f7:e2:87:55:8e:6d:e9:5c:ec:9a:94:95:4a:3e:77:16:e7:30:
27:1b:42:8c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOzvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTM1ODU0WhcNMjcxMjEyMTM1ODU0WjAYMRYw
FAYDVQQDEw02NzZkNjEyMi00NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmMO4C69jEgcFkYZs2EGy7agoeYkIDFqs8wVsw/tGcwVwVw6BJk2R680c
hU0szMZ9bwBU+8yUGP+dPnICKNx+sGys+rsGBVM4Bj1MrCWLLqZAbAZlTjmK9Oj3
AFsNy7IpJhT8HJhyhslbCyc4NUxZQHe+lVj7Zn1tNvSc0/rO+RGYenEnayOfYgpX
9v8bOZz0yi+fjp/W7qpOeN0Sg9McKVuZ6MJzifT5gEO+wtkfbDDyT9T08KZOg3TJ
JwK0NbwtU+rGKLIxc/LBmIWlIhN8CL8iNH33QQXY+8zvIYCvqOMnW27Ro67KdaTU
X58PG+kF2vlgxUL1YdlVeThKzYSigQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCZF
qUu427gaehg66o3hLPFnRYKVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RDVFNzY4NEMzOTExMUVGOUI2Qjc2QjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTpMA0GCSqGSIb3DQEBCwUA
A4IBAQB/rQkAwRPiJ0j2aoh4hGADAQ0oBfpxu5S39OkYO0eKJHpOtRD+rPdDxQWr
Y2OSTp298Ceh3OGbvwxPaL5VWyTAz4npFwGzf42lEI5HSO+mHeyoALWmGb/vDd7P
hqpMxtg9b1UyQ7o7VUgFaGgzE2FGu27wR2lRUVfw3PFwcwasiKu8OawDOszLS4mW
82JQhaMRddm1yTANhooh9GbgPbM8r5kXt+mpx8yP+gyLm1enNNOIQZpZ4a9D+17n
ZodqUSoBn2DgZ1FJ+d2sYeR8ORvZXNItrbD66SlaenwO0dsnnaEMwdLRXFHDZfX3
4odVjm3pXOyalJVKPncW5zAnG0KM
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:24 2025 by rpki-client