Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29886BECBE411EF8E1D3EA4762E951A.roa
File: B29886BECBE411EF8E1D3EA4762E951A.roa (raw, json)
Hash identifier: DqoeWoBmIZY8+1a7Wd9Cij4xgujKbA+ZCyd0QOrBPQo=
Subject key identifier: 09:58:7E:B9:F1:F7:81:97:8B:24:9E:3A:64:5B:9E:7A:E4:CD:B9:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F80A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29886BECBE411EF8E1D3EA4762E951A.roa
Signing time: Mon 06 Jan 2025 04:14:18 +0000
ROA not before: Mon 06 Jan 2025 04:14:14 +0000
ROA not after: Sat 08 Feb 2025 04:14:14 +0000
asID: 395793
IP address blocks: 45.201.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63498 (0xf80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 04:14:14 2025 GMT
Not After : Feb 8 04:14:14 2025 GMT
Subject: CN=677b589a-b497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:9c:4c:bf:2f:72:c2:0f:96:7d:96:21:4c:
ce:4c:61:f5:8a:f8:8b:49:26:4f:a6:ea:2a:fe:e0:
b4:24:85:97:e7:b6:f5:9e:16:11:fe:75:39:63:7c:
d4:1e:ba:d5:d6:f6:3e:15:63:21:2b:46:2d:8d:cd:
09:2b:07:c8:0a:69:ac:8a:e5:af:93:d6:12:08:9b:
ce:c5:8c:c1:e8:47:d2:a7:4f:d1:ef:b2:9e:3d:5c:
35:34:3a:4e:50:1a:73:53:3b:7d:1a:6d:75:6f:23:
b8:0c:df:39:d7:d7:ae:08:1e:a6:ad:1e:0e:5b:fd:
78:8a:e8:cf:1b:e4:98:64:4a:bc:b1:dc:ef:c4:cd:
2e:4b:5b:64:fe:34:41:9d:a9:57:d9:54:43:48:e5:
34:fb:db:02:ba:67:41:c7:0e:a1:6e:8b:03:a4:3e:
79:d3:99:6d:75:c4:ff:07:4e:9e:56:9e:cd:04:00:
dc:99:b6:b8:9e:4e:7f:30:71:1a:29:9e:40:5d:76:
ec:f8:35:0a:cd:28:6d:99:68:40:e6:a1:a6:67:51:
2f:06:21:79:5d:87:be:e3:f1:a2:3d:f3:36:fa:36:
9b:ae:9f:7c:4f:1e:7e:07:25:41:87:93:77:2a:1f:
5b:24:f6:00:53:c1:b2:3d:14:ca:a3:6f:8b:6d:f1:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:7E:B9:F1:F7:81:97:8B:24:9E:3A:64:5B:9E:7A:E4:CD:B9:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B29886BECBE411EF8E1D3EA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.30.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5f:a5:a8:b2:6b:6f:31:31:71:09:bd:7a:79:57:8a:c4:4f:
8e:9b:53:2e:91:5f:c7:59:2d:da:ac:c6:bb:b4:68:28:98:75:
d6:db:16:8f:bc:12:e1:47:5d:a2:31:01:aa:11:7e:c9:53:10:
bf:12:38:79:7c:6d:72:5a:4d:80:2a:86:24:94:18:e3:2f:6a:
7d:0f:d3:a8:55:da:cf:8e:6a:6f:06:f5:66:d4:5c:d5:ef:7a:
c3:59:62:11:92:87:d1:ed:57:0d:08:41:63:53:c9:2c:08:f0:
6a:cb:af:23:d0:36:40:52:9e:2b:a2:aa:7d:57:95:ca:a3:a7:
eb:c4:aa:6b:d9:69:52:12:20:78:9b:85:4c:03:42:da:c6:e1:
76:4c:7a:1b:c4:ea:21:62:0b:c9:54:b7:2e:84:b1:49:a7:77:
9d:9f:ad:5c:bf:cb:d4:c4:44:b1:44:7b:fc:95:70:cd:20:cd:
d8:88:bf:db:38:41:da:04:9b:c8:60:84:11:a4:da:a0:c6:a8:
b7:e4:03:8b:0b:cc:f2:ae:a0:95:82:d5:26:41:d8:e7:ed:d8:
3d:ec:e7:b2:52:7e:78:e0:4d:50:69:c9:b9:a8:b1:0b:a7:9a:
b8:22:76:38:5e:54:b2:67:1c:11:b2:0b:da:40:1f:b0:24:e9:
7d:9b:41:8b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPgKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MDQxNDE0WhcNMjUwMjA4MDQxNDE0WjAYMRYw
FAYDVQQDEw02NzdiNTg5YS1iNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4jmcTL8vcsIPln2WIUzOTGH1iviLSSZPpuoq/uC0JIWX57b1nhYR/nU5
Y3zUHrrV1vY+FWMhK0Ytjc0JKwfICmmsiuWvk9YSCJvOxYzB6EfSp0/R77KePVw1
NDpOUBpzUzt9Gm11byO4DN8519euCB6mrR4OW/14iujPG+SYZEq8sdzvxM0uS1tk
/jRBnalX2VRDSOU0+9sCumdBxw6hbosDpD5505ltdcT/B06eVp7NBADcmba4nk5/
MHEaKZ5AXXbs+DUKzShtmWhA5qGmZ1EvBiF5XYe+4/GiPfM2+jabrp98Tx5+ByVB
h5N3Kh9bJPYAU8GyPRTKo2+LbfF/0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAlY
frnx94GXiySeOmRbnnrkzbllMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjk4ODZCRUNCRTQxMUVGOEUxRDNFQTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckeMA0GCSqGSIb3DQEBCwUA
A4IBAQBzX6WosmtvMTFxCb16eVeKxE+Om1MukV/HWS3arMa7tGgomHXW2xaPvBLh
R12iMQGqEX7JUxC/Ejh5fG1yWk2AKoYklBjjL2p9D9OoVdrPjmpvBvVm1FzV73rD
WWIRkofR7VcNCEFjU8ksCPBqy68j0DZAUp4roqp9V5XKo6frxKpr2WlSEiB4m4VM
A0LaxuF2THobxOohYgvJVLcuhLFJp3edn61cv8vUxESxRHv8lXDNIM3YiL/bOEHa
BJvIYIQRpNqgxqi35AOLC8zyrqCVgtUmQdjn7dg97OeyUn544E1Qacm5qLELp5q4
InY4XlSyZxwRsgvaQB+wJOl9m0GL
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:17 2025 by rpki-client