Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/977F3448BDB311EFABDF2A9C762E951A.roa
File: 977F3448BDB311EFABDF2A9C762E951A.roa (raw, json)
Hash identifier: GIRYtX9FgF2OvsYtEHZAx3nQVk1eSZ1Pli8YuhC4eFk=
Subject key identifier: B5:1F:39:39:70:79:93:5D:35:47:05:FB:64:E3:A2:BE:C0:0E:1A:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E4D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/977F3448BDB311EFABDF2A9C762E951A.roa
Signing time: Thu 19 Dec 2024 02:47:31 +0000
ROA not before: Thu 19 Dec 2024 02:47:27 +0000
ROA not after: Fri 10 Dec 2027 02:47:27 +0000
asID: 17561
IP address blocks: 45.202.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58577 (0xe4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 02:47:27 2024 GMT
Not After : Dec 10 02:47:27 2027 GMT
Subject: CN=67638943-ac32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:16:38:9b:07:27:f1:2f:79:a5:b4:6c:80:
34:61:ad:f7:88:f1:70:0e:23:de:a1:6b:22:51:f8:
a0:b4:27:74:c6:3a:44:29:61:2b:4c:45:23:46:ae:
83:7e:f1:a9:4e:eb:0e:05:75:88:83:5b:07:54:5f:
1c:59:98:b6:2c:ab:0c:a8:26:8d:d8:2f:eb:95:be:
71:00:44:a4:aa:4e:23:b7:46:d4:62:bb:22:c6:0b:
2b:67:22:c1:67:bf:0b:fd:15:78:b2:dd:9b:15:f3:
cd:ef:8e:1d:3d:16:c4:aa:b5:43:87:6f:1e:af:e1:
ac:37:41:76:18:aa:7f:8c:60:14:c9:86:af:71:e8:
a3:78:1c:74:b5:69:08:e9:20:69:ec:cc:d8:4a:fe:
f7:d1:c2:c3:09:0f:55:9e:19:73:3a:fa:37:51:8c:
29:9b:a5:53:dd:80:ac:46:02:9f:9a:81:48:f2:a2:
a2:6d:5a:33:7b:d6:09:bd:91:3b:73:e8:61:7b:36:
55:3f:ad:e0:5a:e1:8b:2c:5b:cc:e1:9b:fc:f5:fc:
54:60:b9:68:32:80:57:8c:99:26:07:0a:38:cf:a4:
75:7d:da:d6:c1:e7:ca:17:bb:33:52:21:e4:0c:53:
50:b9:99:c3:98:52:e1:88:8f:e6:97:ff:9d:6a:e5:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1F:39:39:70:79:93:5D:35:47:05:FB:64:E3:A2:BE:C0:0E:1A:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/977F3448BDB311EFABDF2A9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.213.0/24
Signature Algorithm: sha256WithRSAEncryption
50:be:fe:20:2f:88:04:79:e6:18:27:bc:41:74:54:2a:03:4f:
51:7d:57:7a:6d:ef:8e:0f:15:14:f9:c6:63:fb:58:14:35:59:
2c:33:af:a8:3c:f7:a8:46:2b:f3:18:47:d9:40:9e:bd:ff:89:
e0:b0:90:ec:34:1c:d4:6c:f0:50:cf:9e:54:d5:85:49:2f:eb:
a9:25:4d:e7:7e:94:d2:81:e2:59:d5:d8:44:f4:9b:24:8a:e4:
a1:30:74:41:89:78:97:90:1d:fb:3f:cb:28:34:3f:c1:da:d4:
dd:85:b7:78:cb:08:bc:d4:eb:ab:d6:24:5a:79:4b:d7:e4:c8:
ec:09:f2:30:7d:df:3c:75:d2:72:de:1b:c9:23:31:c5:25:3e:
39:4e:c6:c3:75:b7:e3:bf:89:72:ea:60:10:77:22:ad:92:68:
9f:bb:4f:44:d3:40:f4:39:7d:73:64:05:7e:3a:0e:50:3c:b7:
9d:a5:f1:57:c5:4d:08:04:fd:2c:17:a1:61:94:20:f7:09:33:
bc:1d:27:12:34:38:25:cf:39:91:44:38:7d:d2:86:29:4d:70:
9c:e1:d3:88:fd:75:47:76:df:c6:5a:cf:aa:94:04:7b:1b:b2:
72:d2:8a:80:7d:11:e3:fa:97:c6:db:c8:9b:d7:de:b8:fb:35:
07:fb:20:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOTRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDI0NzI3WhcNMjcxMjEwMDI0NzI3WjAYMRYw
FAYDVQQDEw02NzYzODk0My1hYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsMkWOJsHJ/EveaW0bIA0Ya33iPFwDiPeoWsiUfigtCd0xjpEKWErTEUj
Rq6DfvGpTusOBXWIg1sHVF8cWZi2LKsMqCaN2C/rlb5xAESkqk4jt0bUYrsixgsr
ZyLBZ78L/RV4st2bFfPN744dPRbEqrVDh28er+GsN0F2GKp/jGAUyYavceijeBx0
tWkI6SBp7MzYSv730cLDCQ9VnhlzOvo3UYwpm6VT3YCsRgKfmoFI8qKibVoze9YJ
vZE7c+hhezZVP63gWuGLLFvM4Zv89fxUYLloMoBXjJkmBwo4z6R1fdrWwefKF7sz
UiHkDFNQuZnDmFLhiI/ml/+dauVmdwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLUf
OTlweZNdNUcF+2Tjor7ADhqrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzdGMzQ0OEJEQjMxMUVGQUJERjJBOUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcrVMA0GCSqGSIb3DQEBCwUA
A4IBAQBQvv4gL4gEeeYYJ7xBdFQqA09RfVd6be+ODxUU+cZj+1gUNVksM6+oPPeo
RivzGEfZQJ69/4ngsJDsNBzUbPBQz55U1YVJL+upJU3nfpTSgeJZ1dhE9JskiuSh
MHRBiXiXkB37P8soND/B2tTdhbd4ywi81Our1iRaeUvX5MjsCfIwfd88ddJy3hvJ
IzHFJT45TsbDdbfjv4ly6mAQdyKtkmifu09E00D0OX1zZAV+Og5QPLedpfFXxU0I
BP0sF6FhlCD3CTO8HScSNDglzzmRRDh90oYpTXCc4dOI/XVHdt/GWs+qlAR7G7Jy
0oqAfRHj+pfG28ib1964+zUH+yAT
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:18 2025 by rpki-client