Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2892534BDC111EFBB38057A762E951A.roa
File: A2892534BDC111EFBB38057A762E951A.roa (raw, json)
Hash identifier: tJzxIiWDUMEzW4kJdqIPQLmel9y6il8S8DQT/+LeoIY=
Subject key identifier: 3F:8B:66:DE:FF:4B:33:BC:8C:ED:4D:2E:71:79:6A:89:2E:08:F3:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E575
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2892534BDC111EFBB38057A762E951A.roa
Signing time: Thu 19 Dec 2024 04:28:03 +0000
ROA not before: Thu 19 Dec 2024 04:27:59 +0000
ROA not after: Wed 10 Dec 2025 04:27:59 +0000
asID: 984
IP address blocks: 45.206.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58741 (0xe575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:27:59 2024 GMT
Not After : Dec 10 04:27:59 2025 GMT
Subject: CN=6763a0d2-944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:70:bc:f7:62:d2:f8:1c:fb:46:ee:45:9d:
a0:7b:b7:99:36:50:ad:0b:eb:54:aa:c4:3f:af:d4:
eb:72:e5:ff:4c:b2:8f:d1:fc:45:ac:bf:d5:85:68:
e5:1a:3e:a0:31:d5:4d:dc:ad:32:b8:b2:71:1b:80:
16:c2:af:d9:9f:e3:e4:e2:d2:ff:6c:cc:41:47:e4:
f1:03:dd:db:1e:51:95:99:ff:94:ca:14:a5:78:a7:
e8:95:7d:cc:e1:56:5f:29:f4:e4:93:04:cc:ca:6f:
71:e2:24:65:7e:a3:e4:ed:d3:33:3d:64:17:85:78:
7b:83:2b:2b:66:f7:a4:95:86:58:45:5d:84:b1:e5:
64:99:7f:6b:41:e1:c2:a8:8e:ec:eb:e6:f1:27:9f:
57:70:e6:0e:9e:4b:a0:c8:10:65:9f:ef:8d:d4:43:
f9:e1:90:8f:60:7e:0a:17:93:c1:fd:8c:60:03:c5:
be:1c:df:06:04:85:0c:40:7b:7d:97:2f:f6:54:08:
e6:12:92:a8:82:27:5f:28:c8:05:d0:53:a4:d6:69:
f8:45:ad:f7:93:0f:66:b6:6c:21:96:93:d5:c9:38:
7b:4d:bb:0e:67:7f:76:9f:45:8e:da:20:4a:f2:96:
cf:8b:ab:80:22:f7:1d:94:29:87:73:b2:07:45:e2:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:66:DE:FF:4B:33:BC:8C:ED:4D:2E:71:79:6A:89:2E:08:F3:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2892534BDC111EFBB38057A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.93.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d3:82:ff:98:9f:42:05:cc:f7:99:2e:9b:0f:12:18:09:b3:
3d:99:cd:05:46:26:e2:a0:e4:a0:49:62:1f:4b:45:7a:f7:97:
e1:5b:d1:e8:6d:58:e2:ea:4c:dc:9d:d9:a2:51:b2:30:5e:53:
58:7c:7f:88:bb:e1:5e:13:fd:e4:37:cf:dc:79:6b:a8:e3:e1:
ac:0f:2e:5a:af:a8:3c:0c:70:39:a1:54:82:5d:5b:14:26:34:
e6:b0:2a:d8:75:36:41:c0:f7:6c:c0:32:4f:9b:26:86:55:50:
1a:9d:5c:bf:b5:01:c4:ef:71:ca:bd:4e:d7:2a:f8:a2:0f:df:
d6:c1:e1:25:3d:a7:fe:35:68:6e:cf:bc:d5:f7:fb:0d:3b:bf:
6f:5b:ec:a1:a5:d0:f5:f0:84:9d:df:62:85:2d:f7:cb:04:49:
1a:14:cc:12:25:14:75:02:ab:ee:8d:b5:e7:0a:1a:87:06:69:
6a:a5:d8:d9:bb:f8:5a:1c:bc:0f:c6:eb:95:fd:59:af:c5:05:
8c:29:94:8c:b5:47:0a:70:b1:34:77:f5:fa:40:62:46:7d:3d:
ed:96:91:d1:27:80:c7:85:f2:d6:80:ce:12:a6:9f:3e:ae:11:
85:59:cd:13:24:8e:21:9f:92:47:ba:67:49:1f:b7:17:a8:db:
b9:03:ae:6a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOV1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDQyNzU5WhcNMjUxMjEwMDQyNzU5WjAYMRYw
FAYDVQQDEw02NzYzYTBkMi05NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxMRwvPdi0vgc+0buRZ2ge7eZNlCtC+tUqsQ/r9TrcuX/TLKP0fxFrL/V
hWjlGj6gMdVN3K0yuLJxG4AWwq/Zn+Pk4tL/bMxBR+TxA93bHlGVmf+UyhSleKfo
lX3M4VZfKfTkkwTMym9x4iRlfqPk7dMzPWQXhXh7gysrZveklYZYRV2EseVkmX9r
QeHCqI7s6+bxJ59XcOYOnkugyBBln++N1EP54ZCPYH4KF5PB/YxgA8W+HN8GBIUM
QHt9ly/2VAjmEpKogidfKMgF0FOk1mn4Ra33kw9mtmwhlpPVyTh7TbsOZ392n0WO
2iBK8pbPi6uAIvcdlCmHc7IHReJMoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD+L
Zt7/SzO8jO1NLnF5aokuCPPXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjg5MjUzNEJEQzExMUVGQkIzODA1N0E3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc5dMA0GCSqGSIb3DQEBCwUA
A4IBAQCD04L/mJ9CBcz3mS6bDxIYCbM9mc0FRibioOSgSWIfS0V695fhW9HobVji
6kzcndmiUbIwXlNYfH+Iu+FeE/3kN8/ceWuo4+GsDy5ar6g8DHA5oVSCXVsUJjTm
sCrYdTZBwPdswDJPmyaGVVAanVy/tQHE73HKvU7XKviiD9/WweElPaf+NWhuz7zV
9/sNO79vW+yhpdD18ISd32KFLffLBEkaFMwSJRR1AqvujbXnChqHBmlqpdjZu/ha
HLwPxuuV/VmvxQWMKZSMtUcKcLE0d/X6QGJGfT3tlpHRJ4DHhfLWgM4Spp8+rhGF
Wc0TJI4hn5JHumdJH7cXqNu5A65q
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:45 2025 by rpki-client