Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA77E2BABDC311EF99F91486762E951A.roa
File: AA77E2BABDC311EF99F91486762E951A.roa (raw, json)
Hash identifier: ZQHp3BuAw1p6mAFGBvVz+LYINRod9mOMVQ9IouHIu0o=
Subject key identifier: 8E:69:A3:E8:CE:F1:97:13:2C:C3:3C:27:50:FF:0B:0B:82:95:A8:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E58D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA77E2BABDC311EF99F91486762E951A.roa
Signing time: Thu 19 Dec 2024 04:42:35 +0000
ROA not before: Thu 19 Dec 2024 04:42:31 +0000
ROA not after: Wed 10 Dec 2025 04:42:31 +0000
asID: 984
IP address blocks: 45.206.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58765 (0xe58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 04:42:31 2024 GMT
Not After : Dec 10 04:42:31 2025 GMT
Subject: CN=6763a43b-e68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:b7:c3:43:83:51:4b:27:3d:c3:c9:f3:68:
88:31:f3:c7:b1:4c:b9:a4:87:19:23:25:d0:04:3a:
7d:1b:d0:c8:93:c3:62:e1:e7:87:77:ae:6e:90:ca:
b0:c3:3e:e6:0b:6f:cb:58:fb:a2:9b:51:a4:68:49:
44:40:cc:ac:a1:fa:35:3a:6c:ef:a2:69:ed:fb:36:
d4:da:a3:d2:ee:49:24:17:fe:7d:da:db:d6:74:57:
04:b5:da:84:b9:e4:b6:30:16:c5:d9:9e:b6:2a:37:
14:31:88:7d:0a:d8:06:11:75:6b:b4:3b:f0:78:2f:
4a:c8:6f:0c:fb:d9:c4:c9:28:20:2d:83:0a:84:50:
b9:47:a1:5c:67:cc:87:70:59:c3:f9:7b:5c:f0:6e:
a5:01:52:e7:63:06:42:99:47:89:92:97:51:45:c8:
11:c5:1a:07:7a:4f:a9:f3:35:ae:8b:c9:a9:9f:0d:
9b:ec:ed:99:4d:04:69:fd:e0:7f:89:a1:91:0a:a1:
7f:8d:b3:01:58:d6:86:2e:68:b6:b3:56:3a:cf:62:
03:fb:86:c8:1d:c0:ff:08:00:5b:88:e1:97:3b:35:
0a:52:52:c5:69:68:c8:b1:76:af:ec:53:d9:26:61:
a8:ea:df:50:18:d4:f6:0e:c6:fe:75:b9:93:57:4b:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:A3:E8:CE:F1:97:13:2C:C3:3C:27:50:FF:0B:0B:82:95:A8:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA77E2BABDC311EF99F91486762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.105.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f1:52:40:ff:ed:5a:3e:70:0c:0b:33:a6:3f:60:4f:99:7d:
96:0e:d2:e1:36:5d:c3:f9:c3:7c:61:2e:78:74:0d:65:18:46:
05:7e:71:95:95:ab:0e:47:c3:e4:59:66:f5:34:82:87:f6:19:
6b:e1:b9:05:e7:02:a7:2f:bd:ee:29:2b:b2:ad:30:84:9c:5e:
5b:16:69:1d:7e:d3:a2:ff:47:85:db:cf:d9:66:b9:4f:0e:1a:
f6:bf:e8:cc:73:b4:76:69:fb:11:56:f6:ee:89:f9:ce:73:33:
e2:90:57:46:7f:78:1f:fa:c3:6a:84:13:6e:5b:bb:1a:cf:34:
82:d3:cf:1b:a3:a2:b9:65:19:6a:f1:71:ba:ea:c6:6c:e3:26:
e6:3b:67:f2:8e:cb:66:9b:a1:e3:c5:18:60:dc:d7:de:40:e0:
db:2c:23:f4:61:d3:09:a8:56:cd:95:e4:1c:48:02:52:13:55:
0d:c9:76:ca:d9:09:2f:47:0e:7e:3f:55:c8:ad:9c:66:b4:69:
a8:cc:19:5b:4d:c9:b9:ac:15:50:cb:28:a3:fb:da:db:a1:49:
56:0f:74:b6:24:47:ad:50:fe:db:f0:13:59:39:00:50:ea:8f:
f7:fb:f1:e8:e8:b9:b2:d8:e4:8b:1c:18:6e:87:3e:fb:9a:d7:
9f:5e:70:07
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOWNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDQ0MjMxWhcNMjUxMjEwMDQ0MjMxWjAYMRYw
FAYDVQQDEw02NzYzYTQzYi1lNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHm3w0ODUUsnPcPJ82iIMfPHsUy5pIcZIyXQBDp9G9DIk8Ni4eeHd65u
kMqwwz7mC2/LWPuim1GkaElEQMysofo1Omzvomnt+zbU2qPS7kkkF/592tvWdFcE
tdqEueS2MBbF2Z62KjcUMYh9CtgGEXVrtDvweC9KyG8M+9nEySggLYMKhFC5R6Fc
Z8yHcFnD+Xtc8G6lAVLnYwZCmUeJkpdRRcgRxRoHek+p8zWui8mpnw2b7O2ZTQRp
/eB/iaGRCqF/jbMBWNaGLmi2s1Y6z2ID+4bIHcD/CABbiOGXOzUKUlLFaWjIsXav
7FPZJmGo6t9QGNT2Dsb+dbmTV0u4EwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI5p
o+jO8ZcTLMM8J1D/CwuClajzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTc3RTJCQUJEQzMxMUVGOTlGOTE0ODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc5pMA0GCSqGSIb3DQEBCwUA
A4IBAQCW8VJA/+1aPnAMCzOmP2BPmX2WDtLhNl3D+cN8YS54dA1lGEYFfnGVlasO
R8PkWWb1NIKH9hlr4bkF5wKnL73uKSuyrTCEnF5bFmkdftOi/0eF28/ZZrlPDhr2
v+jMc7R2afsRVvbuifnOczPikFdGf3gf+sNqhBNuW7sazzSC088bo6K5ZRlq8XG6
6sZs4ybmO2fyjstmm6HjxRhg3NfeQODbLCP0YdMJqFbNleQcSAJSE1UNyXbK2Qkv
Rw5+P1XIrZxmtGmozBlbTcm5rBVQyyij+9rboUlWD3S2JEetUP7b8BNZOQBQ6o/3
+/Ho6Lmy2OSLHBhuhz77mtefXnAH
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:59 2025 by rpki-client