Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC2E078CC3AE11EF8D28AF6C762E951A.roa
File: BC2E078CC3AE11EF8D28AF6C762E951A.roa (raw, json)
Hash identifier: 9C9DO+7GSPCQBHQLqeuUuNk7/ORTDAZWzEkVkJFcIac=
Subject key identifier: A5:CA:F5:FE:9D:08:A6:4A:9B:56:F7:A5:6D:D1:A8:51:E4:B3:3C:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EE29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC2E078CC3AE11EF8D28AF6C762E951A.roa
Signing time: Thu 26 Dec 2024 17:27:52 +0000
ROA not before: Thu 26 Dec 2024 17:27:48 +0000
ROA not after: Fri 12 Dec 2025 17:27:48 +0000
asID: 984
IP address blocks: 45.200.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60969 (0xee29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 17:27:48 2024 GMT
Not After : Dec 12 17:27:48 2025 GMT
Subject: CN=676d9218-59c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:6b:e4:88:65:5d:2f:b2:18:98:98:52:22:
36:69:56:aa:a2:e1:32:9f:48:9e:15:6b:48:ff:03:
3a:61:b8:a7:e9:a2:78:ff:32:df:d5:6d:a5:18:b3:
6f:9c:e4:89:87:b0:77:a6:55:36:96:d0:9a:ed:79:
08:5b:49:88:0d:13:6c:de:e3:96:ec:bd:e2:4e:8b:
f6:ad:47:4f:90:39:0d:29:8b:07:cb:03:b7:8e:0c:
66:ad:d4:ec:de:75:e8:0b:c8:3d:e5:db:b7:92:5e:
54:ba:57:42:bb:c8:2f:b9:64:54:dc:9f:f1:df:7a:
f0:67:94:19:b7:cf:a4:6c:5c:d6:dd:01:2c:92:a4:
15:15:ef:a3:91:b8:30:a1:31:26:69:4c:09:11:a5:
0f:9b:f9:3b:84:a8:4b:17:93:73:93:98:3c:15:b6:
0d:68:08:2f:64:36:60:43:60:72:21:8c:37:bc:32:
b5:43:3a:38:6d:12:8c:47:0a:cd:88:fe:bd:e6:43:
11:9c:f0:a9:56:f8:ec:ff:88:a0:0d:73:d3:1c:db:
7f:ce:e2:c5:49:4d:d6:00:2e:6a:0e:40:d2:64:a5:
42:eb:ed:8a:4b:12:ae:61:d8:f6:2c:84:ab:5d:16:
2f:bc:36:40:6b:7c:c5:87:e6:47:97:ac:c5:41:dd:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:F5:FE:9D:08:A6:4A:9B:56:F7:A5:6D:D1:A8:51:E4:B3:3C:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC2E078CC3AE11EF8D28AF6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.255.0/24
Signature Algorithm: sha256WithRSAEncryption
50:18:59:af:98:d6:a6:12:21:53:38:55:bb:ed:3d:1f:15:6a:
49:b4:e0:fd:00:31:88:ff:35:b8:f3:6a:98:28:91:b4:6c:91:
73:29:19:38:40:fa:b1:c3:0d:92:4f:4c:94:58:31:37:cf:5b:
dd:9f:e4:ef:67:a9:a5:a4:ee:d0:4c:f7:fc:37:33:84:ed:a9:
10:81:4d:5c:f6:3d:03:f9:96:17:92:66:5d:81:d0:7d:f7:e5:
38:9c:d0:a1:cf:76:dd:38:bc:cd:a4:80:40:82:0e:66:bc:0f:
c2:b9:18:54:f0:2a:f7:a0:ec:42:30:0d:c8:43:c4:f7:d9:9e:
cc:be:0e:2f:a1:68:57:53:18:28:ce:b7:25:0b:0c:74:ba:78:
52:29:53:95:b4:d4:72:a1:41:0b:f0:fb:09:eb:65:ce:13:59:
db:81:1b:44:1c:a6:07:19:fa:9d:e1:c6:a3:96:1f:08:1b:2e:
fe:f8:62:a7:6d:b6:0d:13:33:af:7e:7b:b5:3a:58:97:55:d9:
9a:a7:1d:ff:b6:15:8f:99:b9:4e:24:32:49:bd:18:5b:f1:cf:
1e:3f:68:06:83:23:b2:0b:8c:d2:4d:ac:f7:c5:98:cc:03:ea:
8d:b0:03:f1:d5:7a:2b:e9:3e:cb:3b:a5:4d:8c:c8:6b:f4:0c:
ed:e5:a0:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO4pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTcyNzQ4WhcNMjUxMjEyMTcyNzQ4WjAYMRYw
FAYDVQQDEw02NzZkOTIxOC01OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbdr5IhlXS+yGJiYUiI2aVaqouEyn0ieFWtI/wM6Ybin6aJ4/zLf1W2l
GLNvnOSJh7B3plU2ltCa7XkIW0mIDRNs3uOW7L3iTov2rUdPkDkNKYsHywO3jgxm
rdTs3nXoC8g95du3kl5UuldCu8gvuWRU3J/x33rwZ5QZt8+kbFzW3QEskqQVFe+j
kbgwoTEmaUwJEaUPm/k7hKhLF5Nzk5g8FbYNaAgvZDZgQ2ByIYw3vDK1Qzo4bRKM
RwrNiP695kMRnPCpVvjs/4igDXPTHNt/zuLFSU3WAC5qDkDSZKVC6+2KSxKuYdj2
LISrXRYvvDZAa3zFh+ZHl6zFQd1acwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKXK
9f6dCKZKm1b3pW3RqFHkszzYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzJFMDc4Q0MzQUUxMUVGOEQyOEFGNkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcj/MA0GCSqGSIb3DQEBCwUA
A4IBAQBQGFmvmNamEiFTOFW77T0fFWpJtOD9ADGI/zW482qYKJG0bJFzKRk4QPqx
ww2ST0yUWDE3z1vdn+TvZ6mlpO7QTPf8NzOE7akQgU1c9j0D+ZYXkmZdgdB99+U4
nNChz3bdOLzNpIBAgg5mvA/CuRhU8Cr3oOxCMA3IQ8T32Z7Mvg4voWhXUxgozrcl
Cwx0unhSKVOVtNRyoUEL8PsJ62XOE1nbgRtEHKYHGfqd4cajlh8IGy7++GKnbbYN
EzOvfnu1OliXVdmapx3/thWPmblOJDJJvRhb8c8eP2gGgyOyC4zSTaz3xZjMA+qN
sAPx1Xor6T7LO6VNjMhr9Azt5aBo
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:11 2025 by rpki-client