Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF3A78D6CEEF11EFB5D6E77E762E951A.roa
File: DF3A78D6CEEF11EFB5D6E77E762E951A.roa (raw, json)
Hash identifier: NP5bWScOkOxlx+6ax8BgtYiGdv4V6IBBcwyro/+GIj8=
Subject key identifier: C9:52:3E:2E:10:A5:C6:EC:76:C7:65:E8:16:17:FF:E4:10:6C:55:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01046B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF3A78D6CEEF11EFB5D6E77E762E951A.roa
Signing time: Fri 10 Jan 2025 01:11:51 +0000
ROA not before: Fri 10 Jan 2025 01:11:47 +0000
ROA not after: Thu 13 Feb 2025 01:11:47 +0000
asID: 54801
IP address blocks: 45.204.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66667 (0x1046b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 01:11:47 2025 GMT
Not After : Feb 13 01:11:47 2025 GMT
Subject: CN=678073d7-5beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:04:97:7c:31:b2:df:05:da:a1:ed:0b:cb:
ba:72:ef:52:46:63:ee:1e:2c:cc:17:c5:74:d4:39:
d4:02:2f:78:22:d3:87:47:6b:c8:00:f4:63:8e:b1:
1e:6c:59:0c:22:ff:80:59:3e:7d:33:b4:b0:db:03:
2a:05:02:5c:b2:0f:bb:a6:32:f1:33:bc:78:ab:20:
a4:39:f3:ce:b2:3e:5a:a4:7b:fa:d3:23:6f:b9:9f:
17:11:c6:50:71:eb:0c:43:24:89:66:44:7b:f8:3c:
8c:0d:de:1f:fc:fd:09:08:ac:84:76:55:7f:db:6c:
d4:44:25:38:2b:fb:c8:11:ca:4e:e6:b0:69:30:3d:
1b:8a:25:c4:cb:f8:4f:e1:17:f1:09:1a:3f:c0:59:
90:24:6a:71:b5:05:24:d8:69:ac:3c:ba:32:1d:c4:
2b:b1:32:ce:e2:5a:96:d6:22:78:3e:38:c0:17:4d:
18:82:ee:db:e7:97:ca:e0:47:b2:b3:e3:16:c5:30:
56:07:80:09:e1:b0:cb:a0:57:2a:e8:56:6f:12:f5:
f9:35:32:53:5c:97:0c:29:af:14:09:77:1c:8e:81:
5e:9a:46:ec:97:7f:9e:67:a4:d2:47:12:23:c5:fa:
df:08:79:c9:60:91:76:05:75:b6:43:df:9f:1e:19:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:3E:2E:10:A5:C6:EC:76:C7:65:E8:16:17:FF:E4:10:6C:55:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF3A78D6CEEF11EFB5D6E77E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.71.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f0:94:5d:c9:52:d4:51:92:c1:ec:cb:b4:99:c7:d3:bb:42:
b7:cc:ae:40:12:23:6a:89:52:45:33:d7:dd:d9:ca:74:c7:c7:
30:80:5b:9b:67:49:65:55:12:7c:dd:be:87:13:6f:4e:47:53:
34:71:71:0e:30:9a:be:7d:64:67:d3:d7:1a:7d:85:12:92:19:
ab:53:dc:e8:8d:ec:5e:09:24:7e:5e:fd:7d:2d:d6:5c:e0:ca:
88:94:0d:db:fb:05:1c:77:62:c5:c0:92:ec:cb:79:3a:0f:9c:
b7:a2:24:da:40:26:b9:d4:09:0f:f8:aa:3c:fa:fa:cc:98:38:
9b:8f:ad:d3:02:28:2b:cb:15:03:42:bf:ed:da:85:7b:e1:a3:
eb:44:8f:37:b5:b1:14:7d:58:8e:43:e3:26:df:f6:8f:b5:13:
25:78:6e:3c:79:f9:e6:8b:5b:f5:99:c2:2f:82:8a:70:3d:7d:
35:7c:d7:00:21:f5:ad:c0:70:43:2b:ff:54:2a:3c:7e:01:70:
ff:ed:48:fa:9f:9e:88:6e:59:b7:3e:f0:94:60:30:a5:8e:3b:
c3:39:65:a1:fd:1e:a1:9d:06:66:18:16:c5:9c:18:47:a2:bb:
44:91:e9:19:9e:be:cf:9d:21:64:18:20:39:3b:f9:33:05:06:
63:09:b3:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQRrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDExMTQ3WhcNMjUwMjEzMDExMTQ3WjAYMRYw
FAYDVQQDEw02NzgwNzNkNy01YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyoEEl3wxst8F2qHtC8u6cu9SRmPuHizMF8V01DnUAi94ItOHR2vIAPRj
jrEebFkMIv+AWT59M7Sw2wMqBQJcsg+7pjLxM7x4qyCkOfPOsj5apHv60yNvuZ8X
EcZQcesMQySJZkR7+DyMDd4f/P0JCKyEdlV/22zURCU4K/vIEcpO5rBpMD0biiXE
y/hP4RfxCRo/wFmQJGpxtQUk2GmsPLoyHcQrsTLO4lqW1iJ4PjjAF00Ygu7b55fK
4Eeys+MWxTBWB4AJ4bDLoFcq6FZvEvX5NTJTXJcMKa8UCXccjoFemkbsl3+eZ6TS
RxIjxfrfCHnJYJF2BXW2Q9+fHhk+lwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMlS
Pi4Qpcbsdsdl6BYX/+QQbFV+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERjNBNzhENkNFRUYxMUVGQjVENkU3N0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxHMA0GCSqGSIb3DQEBCwUA
A4IBAQBw8JRdyVLUUZLB7Mu0mcfTu0K3zK5AEiNqiVJFM9fd2cp0x8cwgFubZ0ll
VRJ83b6HE29OR1M0cXEOMJq+fWRn09cafYUSkhmrU9zojexeCSR+Xv19LdZc4MqI
lA3b+wUcd2LFwJLsy3k6D5y3oiTaQCa51AkP+Ko8+vrMmDibj63TAigryxUDQr/t
2oV74aPrRI83tbEUfViOQ+Mm3/aPtRMleG48efnmi1v1mcIvgopwPX01fNcAIfWt
wHBDK/9UKjx+AXD/7Uj6n56Iblm3PvCUYDCljjvDOWWh/R6hnQZmGBbFnBhHortE
kekZnr7PnSFkGCA5O/kzBQZjCbMm
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:45 2025 by rpki-client