Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB0DCB68C3EE11EF85AADA81762E951A.roa
File: BB0DCB68C3EE11EF85AADA81762E951A.roa (raw, json)
Hash identifier: aFpW68Xkal9J7e2GgzokUHeYgPRPKoGvS6re0F1chNk=
Subject key identifier: 44:96:38:F3:73:3D:73:06:1E:10:54:45:ED:AB:39:DD:22:81:48:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EF38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB0DCB68C3EE11EF85AADA81762E951A.roa
Signing time: Fri 27 Dec 2024 01:05:58 +0000
ROA not before: Fri 27 Dec 2024 01:05:54 +0000
ROA not after: Sun 12 Dec 2027 01:05:54 +0000
asID: 17561
IP address blocks: 45.192.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61240 (0xef38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 27 01:05:54 2024 GMT
Not After : Dec 12 01:05:54 2027 GMT
Subject: CN=676dfd76-e0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:3b:21:8c:48:05:8e:80:f5:18:7d:10:4d:
0d:1a:7e:f3:df:3a:99:9b:11:1e:70:82:91:a3:0b:
1f:64:68:c9:1d:e5:92:3a:43:fb:f3:d7:b7:31:c5:
c7:cd:ee:eb:c6:81:95:e3:fa:68:6f:76:f9:2f:3b:
d0:cc:88:26:0f:d9:fa:7a:cb:d8:c1:66:9b:46:3e:
d9:63:42:7a:f2:d6:8e:3d:e7:b1:fe:a2:4f:04:cb:
a6:79:94:f5:51:bb:f6:20:2c:1a:fa:fb:b8:18:96:
ba:57:54:73:9d:3c:e7:06:5d:f5:ab:35:0e:c3:3d:
34:6b:d0:dd:9f:a1:5b:d0:29:5a:67:53:7d:1f:4c:
e6:62:d1:99:bc:0c:a2:e1:e7:09:df:d9:b9:4a:ff:
05:ed:a4:41:65:59:af:bd:7c:52:62:6a:68:73:f8:
37:67:05:ea:f8:b5:43:f5:3c:bb:7a:f4:20:16:52:
19:41:c9:5d:01:90:f2:8c:d5:7c:59:5f:75:ea:c3:
11:48:d1:a1:91:40:b9:2b:ee:ad:b3:66:88:2e:f5:
4e:f1:d7:b1:9a:75:0b:a7:00:f1:e5:cf:b9:b3:cf:
70:1a:6a:d7:71:a4:53:7d:44:f9:c5:b1:87:be:eb:
4a:4b:56:52:e7:c8:5b:f3:76:fb:e4:3b:cc:44:5c:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:38:F3:73:3D:73:06:1E:10:54:45:ED:AB:39:DD:22:81:48:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB0DCB68C3EE11EF85AADA81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
Signature Algorithm: sha256WithRSAEncryption
29:87:3f:dd:e5:fa:1b:ea:0c:26:39:4d:75:d5:c4:20:ff:75:
20:65:b3:fb:d2:c6:f9:b1:eb:51:a6:a2:1e:dd:4f:63:c9:0e:
1b:c1:24:d6:41:cb:88:d8:fd:ed:de:0a:57:f3:7c:d3:38:f3:
48:91:c6:83:29:97:ba:b1:1d:c8:f1:00:67:eb:7c:7e:58:79:
c6:24:4c:81:07:b3:da:f2:fd:e5:d8:3c:7c:67:f9:94:9f:a9:
e7:5f:66:da:d9:0a:fe:1c:25:01:37:03:91:e3:19:9f:cf:e6:
3a:e0:f1:a8:57:4b:8a:c5:0e:77:a6:40:7b:c3:dc:43:91:f8:
8a:7b:0b:b1:78:e1:26:da:4e:60:1c:2c:67:db:05:1f:6f:ac:
49:78:46:53:c0:39:a7:e4:dc:62:d4:01:9a:ba:2b:a8:12:f7:
a6:89:c3:22:94:55:d6:f6:cf:26:12:b3:aa:8f:c3:4c:02:63:
35:5f:f3:0c:34:28:7f:6b:a3:d5:5b:9a:e2:9d:c2:a6:9c:81:
aa:54:2b:34:13:e2:ee:ae:1f:e4:75:7a:58:3a:de:5d:be:90:
45:05:8d:44:c4:7f:0d:c6:11:a6:a7:06:a6:99:ae:73:84:fd:
1f:a6:7d:39:92:55:9c:b6:3b:46:aa:f9:9e:0f:33:75:4c:6e:
66:f0:88:56
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO84MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI3MDEwNTU0WhcNMjcxMjEyMDEwNTU0WjAYMRYw
FAYDVQQDEw02NzZkZmQ3Ni1lMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3nY7IYxIBY6A9Rh9EE0NGn7z3zqZmxEecIKRowsfZGjJHeWSOkP789e3
McXHze7rxoGV4/pob3b5LzvQzIgmD9n6esvYwWabRj7ZY0J68taOPeex/qJPBMum
eZT1Ubv2ICwa+vu4GJa6V1RznTznBl31qzUOwz00a9Ddn6Fb0ClaZ1N9H0zmYtGZ
vAyi4ecJ39m5Sv8F7aRBZVmvvXxSYmpoc/g3ZwXq+LVD9Ty7evQgFlIZQcldAZDy
jNV8WV916sMRSNGhkUC5K+6ts2aILvVO8dexmnULpwDx5c+5s89wGmrXcaRTfUT5
xbGHvutKS1ZS58hb83b75DvMRFzm6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFESW
OPNzPXMGHhBURe2rOd0igUgVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQjBEQ0I2OEMzRUUxMUVGODVBQURBODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDsMA0GCSqGSIb3DQEBCwUA
A4IBAQAphz/d5fob6gwmOU111cQg/3UgZbP70sb5setRpqIe3U9jyQ4bwSTWQcuI
2P3t3gpX83zTOPNIkcaDKZe6sR3I8QBn63x+WHnGJEyBB7Pa8v3l2Dx8Z/mUn6nn
X2ba2Qr+HCUBNwOR4xmfz+Y64PGoV0uKxQ53pkB7w9xDkfiKewuxeOEm2k5gHCxn
2wUfb6xJeEZTwDmn5Nxi1AGauiuoEvemicMilFXW9s8mErOqj8NMAmM1X/MMNCh/
a6PVW5rincKmnIGqVCs0E+Lurh/kdXpYOt5dvpBFBY1ExH8NxhGmpwamma5zhP0f
pn05klWctjtGqvmeDzN1TG5m8IhW
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:55 2025 by rpki-client