Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C50BB9B4BDEE11EFABDC9590762E951A.roa
File: C50BB9B4BDEE11EFABDC9590762E951A.roa (raw, json)
Hash identifier: 6XqwWAkqumXVutfAWHg5k1woLatnc7zxFhuoNvjJTKY=
Subject key identifier: 6D:2F:90:B8:01:A7:D3:74:65:DB:B3:0A:83:B7:14:1C:E5:6A:42:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E5E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C50BB9B4BDEE11EFABDC9590762E951A.roa
Signing time: Thu 19 Dec 2024 09:51:08 +0000
ROA not before: Thu 19 Dec 2024 09:51:04 +0000
ROA not after: Wed 10 Dec 2025 09:51:04 +0000
asID: 984
IP address blocks: 45.206.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58851 (0xe5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 09:51:04 2024 GMT
Not After : Dec 10 09:51:04 2025 GMT
Subject: CN=6763ec8c-43b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:9b:80:a6:61:c9:dc:21:7d:2c:d4:76:ed:
f5:d8:42:c0:2d:77:fc:c7:d7:0b:4f:24:24:58:39:
b9:ea:29:0b:74:2c:8d:2f:91:1c:bd:a3:d9:c0:72:
42:83:7f:aa:2e:83:52:a0:2f:64:84:f6:87:d9:07:
99:88:72:8a:47:00:43:41:4c:c3:8a:7c:13:0a:97:
14:41:b7:c3:8a:ca:6f:1d:89:5e:2a:9c:44:17:a8:
59:8c:23:d6:b0:5d:63:d3:6a:98:0f:55:2d:a4:4f:
b1:d2:c1:59:c0:ae:ca:66:5d:dd:14:d5:b1:5b:33:
27:48:62:98:e3:43:42:53:7f:91:02:94:61:31:31:
c7:55:e5:3d:0c:22:cc:a0:5b:55:9d:38:23:ad:8c:
77:f6:4b:06:6d:cb:d1:a3:4f:16:dc:79:29:40:91:
8f:8b:eb:a6:ac:57:f8:cf:1e:84:36:ee:a2:1c:3a:
af:d6:c4:37:4d:20:7b:9c:48:8f:2e:4c:40:a4:eb:
c8:dd:66:36:d1:be:dd:be:25:b3:d6:ec:81:22:72:
33:be:27:aa:ff:4b:77:51:d5:1a:b5:b7:0e:7a:c1:
e8:00:ba:24:e2:3a:cc:e9:de:69:82:97:a4:e7:5f:
28:c7:44:60:77:9b:97:b0:a7:6c:5e:06:cc:bf:de:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:90:B8:01:A7:D3:74:65:DB:B3:0A:83:B7:14:1C:E5:6A:42:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C50BB9B4BDEE11EFABDC9590762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8a:da:60:0c:4c:65:df:71:ee:cb:6a:c6:c8:a2:a0:1d:2b:
f5:b4:af:3b:fc:ec:88:b0:66:0b:a0:42:20:17:37:01:53:46:
2b:dc:6c:09:58:46:47:9c:df:15:99:e6:91:e4:1c:44:60:1c:
8f:98:ad:89:6b:2f:8b:fb:ac:2f:39:40:68:e3:cf:f6:2a:7f:
01:42:0f:de:4e:a5:05:d4:7e:75:7c:ea:84:27:54:2b:4a:80:
39:29:37:7e:b0:7a:4a:ec:9a:d9:b0:73:9c:e6:59:1d:1d:e6:
c6:c0:e4:36:25:df:52:ae:cf:22:63:c0:83:38:5f:25:00:e8:
fa:e8:9a:36:9f:0a:a1:d8:ba:8a:ef:96:f5:b0:eb:2e:cb:15:
b4:15:73:b4:e3:d4:5a:68:7a:99:39:f0:b7:70:1b:90:b3:f4:
5b:df:06:36:0d:72:d9:cf:bf:45:a9:a2:7b:9c:bb:95:ad:f8:
37:b6:9e:99:da:76:56:48:08:79:e0:7d:62:d2:bc:30:94:87:
f4:42:71:26:76:fc:65:45:c9:f0:e1:51:b2:2d:ba:1c:2b:eb:
0b:e1:96:bb:08:28:21:ea:b9:fe:8c:74:85:25:1b:75:27:70:
32:93:29:d2:70:38:e3:42:c8:45:11:f7:d1:1a:c0:85:86:15:
93:dc:c3:37
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOXjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDk1MTA0WhcNMjUxMjEwMDk1MTA0WjAYMRYw
FAYDVQQDEw02NzYzZWM4Yy00M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu5SbgKZhydwhfSzUdu312ELALXf8x9cLTyQkWDm56ikLdCyNL5EcvaPZ
wHJCg3+qLoNSoC9khPaH2QeZiHKKRwBDQUzDinwTCpcUQbfDispvHYleKpxEF6hZ
jCPWsF1j02qYD1UtpE+x0sFZwK7KZl3dFNWxWzMnSGKY40NCU3+RApRhMTHHVeU9
DCLMoFtVnTgjrYx39ksGbcvRo08W3HkpQJGPi+umrFf4zx6ENu6iHDqv1sQ3TSB7
nEiPLkxApOvI3WY20b7dviWz1uyBInIzvieq/0t3UdUatbcOesHoALok4jrM6d5p
gpek518ox0Rgd5uXsKdsXgbMv97YtQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG0v
kLgBp9N0ZduzCoO3FBzlakJaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNTBCQjlCNEJERUUxMUVGQUJEQzk1OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc5yMA0GCSqGSIb3DQEBCwUA
A4IBAQBvitpgDExl33Huy2rGyKKgHSv1tK87/OyIsGYLoEIgFzcBU0Yr3GwJWEZH
nN8VmeaR5BxEYByPmK2Jay+L+6wvOUBo48/2Kn8BQg/eTqUF1H51fOqEJ1QrSoA5
KTd+sHpK7JrZsHOc5lkdHebGwOQ2Jd9Srs8iY8CDOF8lAOj66Jo2nwqh2LqK75b1
sOsuyxW0FXO049RaaHqZOfC3cBuQs/Rb3wY2DXLZz79FqaJ7nLuVrfg3tp6Z2nZW
SAh54H1i0rwwlIf0QnEmdvxlRcnw4VGyLbocK+sL4Za7CCgh6rn+jHSFJRt1J3Ay
kynScDjjQshFEffRGsCFhhWT3MM3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:41 2025 by rpki-client