Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF6AA0BEC3FE11EF82923F78762E951A.roa
File: AF6AA0BEC3FE11EF82923F78762E951A.roa (raw, json)
Hash identifier: JvRGD3tCKDAd3kDQaMDYxl5IUddSqT26y2KUoG0AKgQ=
Subject key identifier: A3:D5:C6:04:63:A1:66:23:7D:9D:8D:2B:9E:B2:66:DC:C2:B6:42:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EFBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF6AA0BEC3FE11EF82923F78762E951A.roa
Signing time: Fri 27 Dec 2024 03:00:10 +0000
ROA not before: Fri 27 Dec 2024 03:00:07 +0000
ROA not after: Sun 12 Dec 2027 03:00:07 +0000
asID: 17561
IP address blocks: 45.195.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61374 (0xefbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 03:00:07 2024 GMT
Not After : Dec 12 03:00:07 2027 GMT
Subject: CN=676e183a-e6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:4d:20:e3:43:04:50:bf:35:bc:1e:a1:e8:
9c:2f:fa:52:37:9e:4b:d8:35:c0:bd:b6:9a:5d:ac:
9a:3e:52:66:b3:3d:15:6a:4a:74:e3:5d:fd:0f:68:
ad:18:2b:94:47:fe:f6:78:b2:4e:7b:ed:3e:67:c9:
71:87:69:69:c0:24:65:b9:55:27:c6:5b:bc:2c:fa:
3c:b7:da:de:99:fe:87:e6:eb:08:19:a7:bc:98:d0:
ac:28:34:44:d9:ca:d3:ef:7c:43:9b:30:0f:03:ea:
27:09:09:d9:d8:eb:81:2f:9c:7f:14:99:80:68:d8:
5d:a0:54:3e:4c:f7:49:fa:f8:38:14:1c:27:6b:70:
21:28:90:74:5c:ad:ed:41:f3:70:59:ea:f1:67:36:
f4:41:a8:71:58:b1:33:82:fa:1b:d5:7a:46:ee:ce:
71:f0:fc:19:d6:64:9d:61:37:44:a3:8c:d3:1d:ea:
c2:60:dc:c5:b4:8b:e7:d2:4a:f7:e7:eb:4e:37:fa:
c7:b3:3d:58:79:20:d3:a4:4a:50:9e:f4:98:60:9d:
f1:67:33:e0:f0:b7:a6:7b:82:7c:2c:f7:84:20:65:
4c:76:7a:d0:a5:fd:f5:f9:e8:1d:32:14:0f:2b:44:
51:5c:63:76:90:54:39:52:bf:f4:d4:58:49:73:e1:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:C6:04:63:A1:66:23:7D:9D:8D:2B:9E:B2:66:DC:C2:B6:42:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF6AA0BEC3FE11EF82923F78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.66.0/24
Signature Algorithm: sha256WithRSAEncryption
02:8b:d8:30:48:ff:b4:9a:bd:ca:f8:9b:49:0e:e8:d7:11:bd:
fb:4e:68:70:65:9f:96:3f:e5:69:11:0d:a6:72:43:80:1a:69:
06:b8:53:bd:9e:35:53:84:be:fb:2c:bd:f9:1c:ae:f1:ab:b2:
05:a4:25:6c:3a:f8:39:fc:6c:40:29:ae:0a:70:1d:3c:aa:ff:
ab:be:22:11:5e:27:63:4c:4d:24:10:e4:fa:a0:5f:5f:4d:c5:
a3:c5:ef:54:92:d7:77:c1:5a:39:7a:19:93:e2:a0:a5:59:82:
64:fc:05:cb:0b:b4:48:b5:6e:4b:d5:54:b8:e6:4a:41:24:a4:
37:6d:de:53:61:c8:a2:2f:b5:2d:d5:bd:cc:3a:b1:d6:ee:f6:
05:fb:0a:d5:8d:f3:a5:53:04:aa:a9:f6:df:e4:58:61:1f:0e:
af:f6:75:65:08:be:61:d2:75:44:ca:9f:7c:b2:8f:84:a9:cf:
ca:d2:db:33:b7:7d:70:62:3a:e8:eb:30:7d:07:f9:b9:6c:21:
4c:42:1f:13:c8:65:f2:76:9a:2c:ad:26:40:9e:e5:19:07:fa:
4d:76:35:be:8e:45:c9:01:42:e4:e3:60:62:ee:65:3c:6f:66:
40:c3:99:1f:41:eb:99:a4:f1:34:33:93:97:5e:df:b7:1b:83:
48:6f:dd:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO++MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDMwMDA3WhcNMjcxMjEyMDMwMDA3WjAYMRYw
FAYDVQQDEw02NzZlMTgzYS1lNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4XNNIONDBFC/NbweoeicL/pSN55L2DXAvbaaXayaPlJmsz0Vakp04139
D2itGCuUR/72eLJOe+0+Z8lxh2lpwCRluVUnxlu8LPo8t9remf6H5usIGae8mNCs
KDRE2crT73xDmzAPA+onCQnZ2OuBL5x/FJmAaNhdoFQ+TPdJ+vg4FBwna3AhKJB0
XK3tQfNwWerxZzb0QahxWLEzgvob1XpG7s5x8PwZ1mSdYTdEo4zTHerCYNzFtIvn
0kr35+tON/rHsz1YeSDTpEpQnvSYYJ3xZzPg8Leme4J8LPeEIGVMdnrQpf31+egd
MhQPK0RRXGN2kFQ5Ur/01FhJc+GJlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKPV
xgRjoWYjfZ2NK56yZtzCtkIiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRjZBQTBCRUMzRkUxMUVGODI5MjNGNzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNCMA0GCSqGSIb3DQEBCwUA
A4IBAQACi9gwSP+0mr3K+JtJDujXEb37TmhwZZ+WP+VpEQ2mckOAGmkGuFO9njVT
hL77LL35HK7xq7IFpCVsOvg5/GxAKa4KcB08qv+rviIRXidjTE0kEOT6oF9fTcWj
xe9Uktd3wVo5ehmT4qClWYJk/AXLC7RItW5L1VS45kpBJKQ3bd5TYciiL7Ut1b3M
OrHW7vYF+wrVjfOlUwSqqfbf5FhhHw6v9nVlCL5h0nVEyp98so+Eqc/K0tszt31w
Yjro6zB9B/m5bCFMQh8TyGXydposrSZAnuUZB/pNdjW+jkXJAULk42Bi7mU8b2ZA
w5kfQeuZpPE0M5OXXt+3G4NIb91s
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:36 2025 by rpki-client