Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C41BB826CBE811EF967A1BBE762E951A.roa
File: C41BB826CBE811EF967A1BBE762E951A.roa (raw, json)
Hash identifier: emnT52FzrA2Carz6ELjKo9yP9xLZCEB7ATCWN3JhCRE=
Subject key identifier: 18:C9:EF:B5:A1:0B:F5:8D:17:8B:CB:AA:0B:45:71:92:50:93:2C:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F81A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C41BB826CBE811EF967A1BBE762E951A.roa
Signing time: Mon 06 Jan 2025 04:43:26 +0000
ROA not before: Mon 06 Jan 2025 04:43:22 +0000
ROA not after: Sun 09 Feb 2025 04:43:22 +0000
asID: 395793
IP address blocks: 45.194.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63514 (0xf81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 04:43:22 2025 GMT
Not After : Feb 9 04:43:22 2025 GMT
Subject: CN=677b5f6d-48c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:8d:13:c0:ce:03:ce:17:c6:96:e4:f5:b5:
1d:8a:de:7b:33:c9:a6:b1:cf:6b:99:47:b0:b7:80:
97:b3:f8:d2:93:dc:f1:dc:21:21:bc:22:00:cb:22:
07:a6:39:b8:01:99:67:f5:2b:99:4b:e4:ae:3f:43:
9b:2f:17:52:4a:62:08:e9:f0:46:02:0f:fb:e4:e9:
da:bf:70:74:68:22:80:02:fb:50:8e:c5:73:7a:87:
c4:c2:e6:ca:a2:0d:df:8a:bf:54:78:63:e6:dd:5f:
07:d9:98:e3:98:e3:fd:3b:04:8d:ee:86:5d:3e:55:
77:e1:47:43:5d:2f:f7:ef:3f:3a:41:57:c3:7d:97:
62:a2:c3:21:d5:db:c8:4f:ab:44:6a:07:cd:6e:fb:
52:c3:b8:4d:9f:72:06:05:58:bd:2f:80:bf:eb:a3:
76:07:72:63:16:38:cb:4a:e4:6d:b7:7e:b0:e3:50:
6e:70:6f:aa:5c:34:48:8c:29:78:53:ac:ff:33:a4:
8c:d5:44:30:63:76:45:7e:a3:73:22:3f:21:05:f3:
18:e9:c4:17:ae:62:00:97:fb:26:34:9c:27:10:16:
4b:d8:c3:9c:28:34:0b:bc:af:16:64:bc:1a:cc:31:
43:69:86:8b:af:01:ce:09:da:64:8e:03:94:50:bd:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:EF:B5:A1:0B:F5:8D:17:8B:CB:AA:0B:45:71:92:50:93:2C:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C41BB826CBE811EF967A1BBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.118.0/24
Signature Algorithm: sha256WithRSAEncryption
30:02:53:6c:2d:0b:43:0a:78:2e:1a:5f:37:4a:96:e0:13:8b:
f3:1c:b3:a4:6f:23:59:a3:b1:0b:03:81:73:0f:b5:a2:02:b3:
30:50:86:35:a8:c4:80:aa:b4:88:25:7f:51:1c:84:32:9c:e3:
17:10:8f:06:62:a1:55:b7:a4:0f:c7:a1:52:39:49:3a:f0:15:
54:29:de:34:18:58:63:a2:18:9d:82:df:7f:fe:b0:9b:10:61:
43:85:fd:82:b9:0c:eb:30:9a:58:69:89:ec:7a:3c:b9:92:2f:
22:d8:bb:a1:f8:33:62:02:30:8d:a2:b8:fd:fc:9d:a3:ab:cb:
8a:04:b6:2f:47:65:dd:ed:92:46:20:dc:4f:2f:06:c1:f5:f4:
24:74:b4:32:f7:ba:e6:ba:b8:5a:14:b0:9f:15:68:2e:35:15:
62:83:d5:08:3b:cd:f5:ef:c5:cd:67:01:c0:71:b3:e0:a6:f6:
c1:78:cf:09:6a:45:1b:54:a6:41:6d:87:b4:33:e0:a8:b4:cf:
a2:b0:84:a0:58:e9:45:ee:5a:9c:1b:ae:65:8a:ae:6e:90:1b:
25:17:47:a7:b0:83:c0:7b:96:8a:85:59:99:77:53:f4:f5:94:
ad:77:b9:e3:c5:fd:6e:09:e9:d3:06:d5:7d:65:51:25:2f:cf:
17:67:d2:da
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPgaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MDQ0MzIyWhcNMjUwMjA5MDQ0MzIyWjAYMRYw
FAYDVQQDEw02NzdiNWY2ZC00OGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAypyNE8DOA84Xxpbk9bUdit57M8mmsc9rmUewt4CXs/jSk9zx3CEhvCIA
yyIHpjm4AZln9SuZS+SuP0ObLxdSSmII6fBGAg/75Onav3B0aCKAAvtQjsVzeofE
wubKog3fir9UeGPm3V8H2ZjjmOP9OwSN7oZdPlV34UdDXS/37z86QVfDfZdiosMh
1dvIT6tEagfNbvtSw7hNn3IGBVi9L4C/66N2B3JjFjjLSuRtt36w41BucG+qXDRI
jCl4U6z/M6SM1UQwY3ZFfqNzIj8hBfMY6cQXrmIAl/smNJwnEBZL2MOcKDQLvK8W
ZLwazDFDaYaLrwHOCdpkjgOUUL2wWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBjJ
77WhC/WNF4vLqgtFcZJQkyw5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNDFCQjgyNkNCRTgxMUVGOTY3QTFCQkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ2MA0GCSqGSIb3DQEBCwUA
A4IBAQAwAlNsLQtDCnguGl83SpbgE4vzHLOkbyNZo7ELA4FzD7WiArMwUIY1qMSA
qrSIJX9RHIQynOMXEI8GYqFVt6QPx6FSOUk68BVUKd40GFhjohidgt9//rCbEGFD
hf2CuQzrMJpYaYnsejy5ki8i2Luh+DNiAjCNorj9/J2jq8uKBLYvR2Xd7ZJGINxP
LwbB9fQkdLQy97rmurhaFLCfFWguNRVig9UIO83178XNZwHAcbPgpvbBeM8JakUb
VKZBbYe0M+CotM+isISgWOlF7lqcG65liq5ukBslF0ensIPAe5aKhVmZd1P09ZSt
d7njxf1uCenTBtV9ZVElL88XZ9La
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:08 2025 by rpki-client