Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAAD41A4C38F11EF8483B8AA762E951A.roa
File: AAAD41A4C38F11EF8483B8AA762E951A.roa (raw, json)
Hash identifier: rCtn7mOdmBPa93xp0OM2A2pXQkw0tOT526H4BVcPDAI=
Subject key identifier: 80:73:84:5E:71:BE:B8:FF:4E:77:59:85:80:C6:96:3E:D2:17:49:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECDB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAAD41A4C38F11EF8483B8AA762E951A.roa
Signing time: Thu 26 Dec 2024 13:45:28 +0000
ROA not before: Thu 26 Dec 2024 13:45:25 +0000
ROA not after: Sun 12 Dec 2027 13:45:25 +0000
asID: 17561
IP address blocks: 45.196.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60635 (0xecdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:45:25 2024 GMT
Not After : Dec 12 13:45:25 2027 GMT
Subject: CN=676d5df8-bc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:b2:46:91:de:07:0d:aa:b2:9b:81:39:f2:
ae:5c:c3:57:10:bb:d9:d3:d9:21:a5:98:41:d2:c7:
53:79:63:cd:5a:eb:05:23:71:8c:40:8b:0d:34:25:
e1:b1:51:88:3c:a9:21:ff:cc:d7:79:9d:90:38:87:
d3:2d:54:41:f5:14:29:5b:cf:94:7d:ea:c3:28:7b:
1d:b6:81:00:17:32:6a:8b:53:f1:a3:5d:61:65:a3:
b1:db:03:1a:e4:3b:89:29:77:69:fc:c7:fd:a9:53:
4c:51:d5:34:da:62:a8:cd:93:bd:1c:86:7b:26:c5:
33:17:6b:32:cd:09:1d:f1:68:6c:ec:6b:4f:3a:3d:
c3:2d:19:94:57:2c:cb:9c:77:8f:df:fd:3f:80:bb:
f3:e1:d1:b0:83:79:53:a2:1e:51:4b:6b:8d:46:6c:
f1:9e:c0:6c:ed:e5:f8:10:08:17:d3:07:c7:ec:6e:
ef:50:ed:f5:08:7f:a6:8e:44:a2:f3:92:b7:18:e9:
b5:a9:57:95:50:25:57:a8:34:bd:55:e8:0d:0b:69:
3d:96:da:00:0c:60:69:d5:5d:8d:74:f7:d3:10:ac:
14:77:da:1f:ea:23:a9:23:07:49:2a:cb:87:6b:e3:
02:14:fa:d2:53:24:ed:77:ad:44:b4:84:98:cb:09:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:73:84:5E:71:BE:B8:FF:4E:77:59:85:80:C6:96:3E:D2:17:49:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAAD41A4C38F11EF8483B8AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:3d:1a:69:65:66:59:4e:67:cf:f0:a0:e8:f4:9e:d0:56:
f5:cf:5a:e6:b1:a5:fc:7d:6f:ac:aa:3a:74:18:94:2f:5c:51:
f1:d3:87:43:4e:dd:8b:99:51:18:50:27:85:46:e9:3f:59:77:
6a:55:8d:0d:4c:b5:7e:e8:93:dc:5c:ac:12:0e:a3:ac:f7:f8:
50:d4:0a:44:2d:cf:f9:fe:10:89:d1:17:79:dd:d2:24:8d:e5:
e1:8b:e8:c1:97:fe:31:03:b2:ad:83:f9:ef:1e:82:62:99:a4:
55:fa:4c:1f:57:c2:48:95:4c:1d:02:a1:82:79:81:4c:ba:67:
cd:e8:66:3e:ba:ea:a9:d0:f4:d1:72:e2:4d:1b:4f:70:6e:4c:
09:f2:09:70:71:62:31:15:c8:28:f1:3a:8a:28:e7:90:37:a6:
12:2a:22:88:d4:20:85:c4:6b:d2:5e:7a:ef:cc:6c:38:e9:ab:
5d:0e:12:46:bc:4c:4f:aa:5b:b5:74:cb:e7:23:3f:f4:6d:8e:
93:0e:a5:87:50:95:37:7f:9f:59:98:cd:0c:74:c0:de:9b:68:
ab:0b:eb:ae:a8:5a:6a:8c:6e:95:2a:ac:d1:7b:a2:c1:8b:a2:
37:33:60:02:9b:56:d2:e8:a1:73:be:61:c4:d0:2e:f3:1c:2e:
21:90:0e:b4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOzbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTM0NTI1WhcNMjcxMjEyMTM0NTI1WjAYMRYw
FAYDVQQDEw02NzZkNWRmOC1iYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6GmyRpHeBw2qspuBOfKuXMNXELvZ09khpZhB0sdTeWPNWusFI3GMQIsN
NCXhsVGIPKkh/8zXeZ2QOIfTLVRB9RQpW8+UferDKHsdtoEAFzJqi1Pxo11hZaOx
2wMa5DuJKXdp/Mf9qVNMUdU02mKozZO9HIZ7JsUzF2syzQkd8Whs7GtPOj3DLRmU
VyzLnHeP3/0/gLvz4dGwg3lToh5RS2uNRmzxnsBs7eX4EAgX0wfH7G7vUO31CH+m
jkSi85K3GOm1qVeVUCVXqDS9VegNC2k9ltoADGBp1V2NdPfTEKwUd9of6iOpIwdJ
KsuHa+MCFPrSUyTtd61EtISYywk4QQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIBz
hF5xvrj/TndZhYDGlj7SF0kOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQUFENDFBNEMzOEYxMUVGODQ4M0I4QUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTfMA0GCSqGSIb3DQEBCwUA
A4IBAQBhBz0aaWVmWU5nz/Cg6PSe0Fb1z1rmsaX8fW+sqjp0GJQvXFHx04dDTt2L
mVEYUCeFRuk/WXdqVY0NTLV+6JPcXKwSDqOs9/hQ1ApELc/5/hCJ0Rd53dIkjeXh
i+jBl/4xA7Ktg/nvHoJimaRV+kwfV8JIlUwdAqGCeYFMumfN6GY+uuqp0PTRcuJN
G09wbkwJ8glwcWIxFcgo8TqKKOeQN6YSKiKI1CCFxGvSXnrvzGw46atdDhJGvExP
qlu1dMvnIz/0bY6TDqWHUJU3f59ZmM0MdMDem2irC+uuqFpqjG6VKqzRe6LBi6I3
M2ACm1bS6KFzvmHE0C7zHC4hkA60
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:48 2025 by rpki-client