Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C673DECCC38D11EFABB2289D762E951A.roa
File: C673DECCC38D11EFABB2289D762E951A.roa (raw, json)
Hash identifier: uWhpnGdYvNAY5c5MxTrkVMo99b/YcurZgv12q9iTKjE=
Subject key identifier: DE:BA:3A:78:40:E2:AB:0E:9F:30:29:C1:6B:04:16:38:0C:0E:BE:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ECC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C673DECCC38D11EFABB2289D762E951A.roa
Signing time: Thu 26 Dec 2024 13:31:56 +0000
ROA not before: Thu 26 Dec 2024 13:31:52 +0000
ROA not after: Sun 12 Dec 2027 13:31:52 +0000
asID: 17561
IP address blocks: 45.196.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60615 (0xecc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 13:31:52 2024 GMT
Not After : Dec 12 13:31:52 2027 GMT
Subject: CN=676d5acc-f547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:33:71:1f:a1:40:eb:a3:f9:8b:47:25:37:
e4:e2:16:1a:bb:27:c9:8b:ac:88:49:ec:4d:36:fd:
82:a3:75:56:f6:0a:e9:6b:b9:b5:5f:19:ce:2a:a4:
ae:83:80:fe:86:83:9b:1a:14:40:f1:97:c4:8e:ed:
b4:ba:8c:4c:bf:bd:ab:5c:f3:d4:e6:5c:51:de:dc:
56:5e:4e:e9:8e:14:a3:ca:d5:b2:bb:36:d8:86:87:
5d:1f:eb:c5:99:b7:e2:52:bc:97:23:9f:66:6d:bc:
c9:f3:43:63:a1:97:92:56:66:42:6a:6e:a8:87:1f:
24:98:a8:04:6e:b1:8b:84:94:4b:16:72:2f:04:a8:
68:b1:f3:54:0e:34:ef:eb:22:b2:f9:e5:ca:07:28:
dd:11:39:62:e1:a9:1c:a5:a3:0e:bf:ad:ce:54:3e:
b1:33:83:84:a0:d6:91:95:ac:a2:50:9c:7d:ad:65:
14:e5:68:db:df:e8:2b:73:32:a9:97:8c:f3:8b:e9:
3d:84:42:7d:8d:01:da:f1:64:fb:a9:f6:76:a6:e5:
ce:eb:23:e7:6a:8a:18:75:0a:d5:7f:3f:ec:84:ed:
1b:45:d7:95:08:cd:e3:fc:b1:58:c0:f8:4c:03:71:
a1:e6:f7:d2:ec:7d:02:48:af:05:46:f6:bb:a3:13:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:3A:78:40:E2:AB:0E:9F:30:29:C1:6B:04:16:38:0C:0E:BE:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C673DECCC38D11EFABB2289D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.213.0/24
Signature Algorithm: sha256WithRSAEncryption
30:71:c1:ad:49:00:6d:f8:8c:ab:96:b6:64:57:5c:00:72:79:
53:15:54:ce:91:df:0a:63:08:62:52:ba:0b:40:2e:99:eb:51:
ed:99:ea:c9:56:63:12:0b:91:8c:23:b0:d1:c0:3d:0e:78:4c:
d9:73:33:46:f1:aa:85:47:cc:f8:b1:43:9a:31:22:6e:b2:7d:
bc:10:ad:2e:8b:c0:08:3d:3a:67:39:5e:d7:79:06:63:f0:bf:
76:6d:38:44:a3:3c:8a:dd:15:4b:8c:ae:d4:28:bd:93:13:ff:
f7:4e:4e:51:fd:61:31:7a:a1:71:89:2d:9f:bb:98:3a:0c:8f:
af:0a:b4:7c:f8:3a:48:08:a0:7a:3f:6d:d4:73:07:7c:57:eb:
3d:6a:6d:cf:8a:de:1c:4e:47:55:8f:59:a8:5d:7b:83:9f:c1:
7b:57:30:e3:7b:da:af:b6:c7:16:0a:5f:aa:17:17:47:3b:e6:
39:53:33:c4:f9:56:27:e3:7c:15:a5:7f:f4:f8:85:d8:56:51:
b3:99:24:9c:73:2a:63:9a:30:47:49:ae:2c:90:8b:16:80:24:
60:63:1d:1b:72:37:1d:86:4a:b5:08:2a:5e:f3:03:2f:fb:63:
4e:e4:8d:06:bb:c5:9d:f4:85:04:23:5c:8d:77:05:69:59:1e:
9a:c5:12:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOzHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTMzMTUyWhcNMjcxMjEyMTMzMTUyWjAYMRYw
FAYDVQQDEw02NzZkNWFjYy1mNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2LQzcR+hQOuj+YtHJTfk4hYauyfJi6yISexNNv2Co3VW9grpa7m1XxnO
KqSug4D+hoObGhRA8ZfEju20uoxMv72rXPPU5lxR3txWXk7pjhSjytWyuzbYhodd
H+vFmbfiUryXI59mbbzJ80NjoZeSVmZCam6ohx8kmKgEbrGLhJRLFnIvBKhosfNU
DjTv6yKy+eXKByjdETli4akcpaMOv63OVD6xM4OEoNaRlayiUJx9rWUU5Wjb3+gr
czKpl4zzi+k9hEJ9jQHa8WT7qfZ2puXO6yPnaooYdQrVfz/shO0bRdeVCM3j/LFY
wPhMA3Gh5vfS7H0CSK8FRva7oxO29wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN66
OnhA4qsOnzApwWsEFjgMDr5yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjczREVDQ0MzOEQxMUVGQUJCMjI4OUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTVMA0GCSqGSIb3DQEBCwUA
A4IBAQAwccGtSQBt+IyrlrZkV1wAcnlTFVTOkd8KYwhiUroLQC6Z61HtmerJVmMS
C5GMI7DRwD0OeEzZczNG8aqFR8z4sUOaMSJusn28EK0ui8AIPTpnOV7XeQZj8L92
bThEozyK3RVLjK7UKL2TE//3Tk5R/WExeqFxiS2fu5g6DI+vCrR8+DpICKB6P23U
cwd8V+s9am3Pit4cTkdVj1moXXuDn8F7VzDje9qvtscWCl+qFxdHO+Y5UzPE+VYn
43wVpX/0+IXYVlGzmSSccypjmjBHSa4skIsWgCRgYx0bcjcdhkq1CCpe8wMv+2NO
5I0Gu8Wd9IUEI1yNdwVpWR6axRIK
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:50 2025 by rpki-client