Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F8CA78C3BE11EFAE851D52762E951A.roa
File: C3F8CA78C3BE11EFAE851D52762E951A.roa (raw, json)
Hash identifier: 7Nm43xLE948qFd8yJBU1rx0gkcixwrpuAnb1PgGat/I=
Subject key identifier: AC:E4:79:D7:02:A6:4B:2A:93:98:81:9C:F7:9A:E9:18:A3:D6:5E:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EECF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F8CA78C3BE11EFAE851D52762E951A.roa
Signing time: Thu 26 Dec 2024 19:22:37 +0000
ROA not before: Thu 26 Dec 2024 19:22:33 +0000
ROA not after: Sun 12 Dec 2027 19:22:33 +0000
asID: 17561
IP address blocks: 45.207.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61135 (0xeecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 19:22:33 2024 GMT
Not After : Dec 12 19:22:33 2027 GMT
Subject: CN=676dacfd-761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:90:da:1d:f6:de:54:25:bd:d9:96:2e:e4:
3b:58:a9:be:b6:20:bd:91:a0:c7:f4:4a:a1:15:e9:
5f:ef:66:ad:18:90:19:10:aa:57:a7:c5:4a:b2:63:
87:4c:64:6a:d3:9c:ab:da:47:af:ce:6d:ae:40:1f:
45:5f:67:41:d5:e2:57:21:72:0e:19:62:0e:10:89:
5a:31:2e:8f:41:ed:81:5e:af:bc:13:e8:37:1c:7b:
21:51:25:36:3a:58:e0:5c:46:cb:6f:e6:eb:cd:11:
70:1c:86:52:57:08:89:53:67:8f:82:6d:08:e7:80:
03:1a:16:6a:07:88:f2:66:38:a2:c6:95:d1:0f:f6:
3f:6a:c9:16:40:6b:97:f9:69:58:e3:fc:2b:14:a1:
72:4f:14:36:03:a5:6e:07:21:38:65:92:3c:86:43:
8f:4b:63:58:ee:7c:90:b9:60:8d:f3:78:17:61:c8:
00:df:fd:c8:a5:82:df:0a:4d:22:5c:ae:e6:b0:82:
8c:79:e8:f7:dc:d9:58:3e:6e:67:73:da:89:d0:a7:
be:7e:4f:5c:e5:47:bf:36:15:46:df:6c:bc:93:65:
51:e7:da:19:bb:52:e6:7a:99:0d:00:a4:e7:f1:28:
fd:e1:03:3d:0f:88:18:93:ea:7d:c3:8f:fe:63:6c:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:79:D7:02:A6:4B:2A:93:98:81:9C:F7:9A:E9:18:A3:D6:5E:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3F8CA78C3BE11EFAE851D52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.171.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:32:3f:51:83:e6:4c:4c:55:7d:85:1c:40:21:ae:6e:e0:b1:
a5:e6:c3:b2:47:59:df:6a:4c:5a:7a:94:0b:64:f6:56:dc:d4:
14:50:52:71:db:9b:fb:84:1c:c8:5a:00:64:34:16:35:ea:4d:
8e:3f:10:4c:18:2e:1a:a0:59:dc:59:8b:f8:df:18:c2:75:62:
98:21:68:eb:cd:58:04:29:e3:b9:b8:0b:1d:3c:d9:d8:50:57:
7e:31:9b:04:9f:b2:37:bb:eb:75:df:d0:06:47:ef:ca:f2:03:
d6:f3:88:77:a8:80:42:94:23:71:c1:1b:a6:c5:9a:a7:88:c4:
55:20:93:2a:9e:f4:16:42:ca:f8:09:42:b1:a8:d1:04:ee:0e:
08:bd:61:56:7c:35:0a:d8:84:3a:73:38:1b:27:e3:a0:a7:ac:
68:c8:ea:ce:1b:14:6f:0c:cc:34:b4:35:35:8c:28:b2:ae:33:
7d:f1:ac:2a:33:53:eb:b1:66:d5:ae:0b:5b:aa:21:18:a0:f2:
93:59:82:35:18:74:e0:9c:fd:b9:e4:4b:db:01:a7:f9:fe:39:
d8:b9:86:9b:2f:a9:df:7a:2f:c3:fe:e0:2a:b8:2a:3d:09:9f:
a3:5a:57:df:37:2c:00:d2:0e:c4:c8:81:40:5a:ff:85:aa:2a:
cb:f4:4c:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO7PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTkyMjMzWhcNMjcxMjEyMTkyMjMzWjAYMRYw
FAYDVQQDEw02NzZkYWNmZC03NjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy1CQ2h323lQlvdmWLuQ7WKm+tiC9kaDH9EqhFelf72atGJAZEKpXp8VK
smOHTGRq05yr2kevzm2uQB9FX2dB1eJXIXIOGWIOEIlaMS6PQe2BXq+8E+g3HHsh
USU2OljgXEbLb+brzRFwHIZSVwiJU2ePgm0I54ADGhZqB4jyZjiixpXRD/Y/askW
QGuX+WlY4/wrFKFyTxQ2A6VuByE4ZZI8hkOPS2NY7nyQuWCN83gXYcgA3/3IpYLf
Ck0iXK7msIKMeej33NlYPm5nc9qJ0Ke+fk9c5Ue/NhVG32y8k2VR59oZu1LmepkN
AKTn8Sj94QM9D4gYk+p9w4/+Y2zrJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKzk
edcCpksqk5iBnPea6Rij1l7zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DM0Y4Q0E3OEMzQkUxMUVGQUU4NTFENTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc+rMA0GCSqGSIb3DQEBCwUA
A4IBAQCgMj9Rg+ZMTFV9hRxAIa5u4LGl5sOyR1nfakxaepQLZPZW3NQUUFJx25v7
hBzIWgBkNBY16k2OPxBMGC4aoFncWYv43xjCdWKYIWjrzVgEKeO5uAsdPNnYUFd+
MZsEn7I3u+t139AGR+/K8gPW84h3qIBClCNxwRumxZqniMRVIJMqnvQWQsr4CUKx
qNEE7g4IvWFWfDUK2IQ6czgbJ+Ogp6xoyOrOGxRvDMw0tDU1jCiyrjN98awqM1Pr
sWbVrgtbqiEYoPKTWYI1GHTgnP255EvbAaf5/jnYuYabL6nfei/D/uAquCo9CZ+j
WlffNywA0g7EyIFAWv+FqirL9Eyj
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:19 2025 by rpki-client