Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EC3A18BE7411EFB5675651762E951A.roa
File: A1EC3A18BE7411EFB5675651762E951A.roa (raw, json)
Hash identifier: GeqnepWy8qSAJM9BnrGcvF0Db4AMDbfsiNlZvcogQT8=
Subject key identifier: D3:9F:02:BD:97:25:8B:AF:B7:2B:DC:EE:42:04:18:A9:BF:6B:EF:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E616
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EC3A18BE7411EFB5675651762E951A.roa
Signing time: Fri 20 Dec 2024 01:49:21 +0000
ROA not before: Fri 20 Dec 2024 01:49:18 +0000
ROA not after: Wed 10 Dec 2025 01:49:18 +0000
asID: 984
IP address blocks: 45.206.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58902 (0xe616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:49:18 2024 GMT
Not After : Dec 10 01:49:18 2025 GMT
Subject: CN=6764cd21-68a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:5d:65:a5:e2:78:2e:1d:69:09:a9:c8:f1:
f9:42:38:00:fb:b8:56:41:7b:ce:df:e4:8d:ce:24:
4e:d0:cd:b7:e2:e1:62:c2:b4:6b:f6:5c:d2:bb:de:
86:70:41:2d:88:40:cf:2c:a5:4d:f7:b3:9d:f7:de:
47:45:36:2e:41:28:c2:d7:55:2b:0d:31:bf:a9:a7:
3c:52:03:27:39:40:5b:ec:52:01:6b:c7:22:75:c8:
24:23:88:ca:eb:14:39:8d:9a:cd:ba:78:d2:e6:9d:
ce:2c:26:6b:ae:e1:f8:5a:09:38:75:c8:3e:f8:4e:
df:e5:be:9d:6b:e9:b7:00:c1:30:cb:10:f0:50:49:
1a:fd:b0:ca:cb:32:19:6b:41:d8:9d:12:18:63:bd:
b0:30:38:d4:82:18:d0:4f:88:7f:39:72:12:ce:3f:
ce:16:e7:69:cf:26:0c:85:b1:e5:94:36:af:52:9a:
61:14:be:48:67:2c:c7:fa:e8:d8:76:b3:b4:c2:fd:
26:71:b4:37:c7:e8:4c:92:5e:4e:ec:ef:ae:e3:c7:
ad:4b:bf:9f:c7:d4:60:3c:fd:b2:49:59:54:62:85:
e9:df:d7:bc:78:de:2e:92:f2:bb:c6:59:55:39:77:
50:01:dd:53:ec:2d:d5:55:c2:6e:91:35:a3:ae:6e:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:02:BD:97:25:8B:AF:B7:2B:DC:EE:42:04:18:A9:BF:6B:EF:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EC3A18BE7411EFB5675651762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.138.0/24
Signature Algorithm: sha256WithRSAEncryption
15:82:ee:85:01:3c:6b:06:54:4e:d7:7c:65:11:2b:ab:a2:b6:
71:ef:9f:79:ef:5a:52:25:b4:d3:c4:a8:3c:0f:f2:69:ef:89:
4a:c7:b9:0d:19:58:f6:db:f3:62:07:8e:6f:64:b2:92:9b:a7:
b8:30:80:b4:33:27:f7:6c:49:63:d3:bb:b2:e2:4d:af:dc:bf:
10:04:6b:7d:49:ac:0a:c1:3e:d8:57:9b:40:25:ad:7a:4f:79:
20:0a:63:42:87:c9:a1:8f:5f:a8:fc:d9:48:cf:61:ce:df:26:
61:aa:06:73:67:87:39:80:f8:46:1b:0f:dc:41:f4:de:c9:ce:
6c:f6:d5:8c:35:c9:f9:b2:06:95:66:dd:eb:c4:3b:26:30:0b:
6a:d5:7d:7c:99:ee:f8:ea:f2:c8:bb:6c:9f:a9:6d:bf:55:90:
86:b7:5c:9b:19:34:ca:3f:14:06:66:1f:8d:de:60:7f:36:16:
fa:5b:df:4f:c5:57:1a:62:74:67:1b:95:33:18:85:47:8e:c6:
28:5c:4c:bb:32:0d:60:df:6c:e4:23:ac:ba:4d:8f:5e:ba:04:
51:c6:e8:29:a3:cc:c5:13:38:b1:ec:d9:80:20:5a:d0:c8:14:
1b:bf:21:21:17:c3:bd:32:d7:3e:f4:69:68:7a:9e:af:b4:dc:
0d:6b:41:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOYWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDE0OTE4WhcNMjUxMjEwMDE0OTE4WjAYMRYw
FAYDVQQDEw02NzY0Y2QyMS02OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1jpdZaXieC4daQmpyPH5QjgA+7hWQXvO3+SNziRO0M234uFiwrRr9lzS
u96GcEEtiEDPLKVN97Od995HRTYuQSjC11UrDTG/qac8UgMnOUBb7FIBa8cidcgk
I4jK6xQ5jZrNunjS5p3OLCZrruH4Wgk4dcg++E7f5b6da+m3AMEwyxDwUEka/bDK
yzIZa0HYnRIYY72wMDjUghjQT4h/OXISzj/OFudpzyYMhbHllDavUpphFL5IZyzH
+ujYdrO0wv0mcbQ3x+hMkl5O7O+u48etS7+fx9RgPP2ySVlUYoXp39e8eN4ukvK7
xllVOXdQAd1T7C3VVcJukTWjrm4dCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNOf
Ar2XJYuvtyvc7kIEGKm/a+/tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMUVDM0ExOEJFNzQxMUVGQjU2NzU2NTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc6KMA0GCSqGSIb3DQEBCwUA
A4IBAQAVgu6FATxrBlRO13xlESurorZx759571pSJbTTxKg8D/Jp74lKx7kNGVj2
2/NiB45vZLKSm6e4MIC0Myf3bElj07uy4k2v3L8QBGt9SawKwT7YV5tAJa16T3kg
CmNCh8mhj1+o/NlIz2HO3yZhqgZzZ4c5gPhGGw/cQfTeyc5s9tWMNcn5sgaVZt3r
xDsmMAtq1X18me746vLIu2yfqW2/VZCGt1ybGTTKPxQGZh+N3mB/Nhb6W99PxVca
YnRnG5UzGIVHjsYoXEy7Mg1g32zkI6y6TY9eugRRxugpo8zFEzix7NmAIFrQyBQb
vyEhF8O9Mtc+9Gloep6vtNwNa0HE
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:22 2025 by rpki-client