Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3664362C39B11EF860FC677762E951A.roa
File: F3664362C39B11EF860FC677762E951A.roa (raw, json)
Hash identifier: z4Fnvo+/Ht1MTfKFuKJUW4ONxUrhMhas0guZg/irdZg=
Subject key identifier: DF:55:E7:CC:32:FF:48:F3:BF:22:C2:48:86:A3:4D:CA:E2:13:B3:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3664362C39B11EF860FC677762E951A.roa
Signing time: Thu 26 Dec 2024 15:13:24 +0000
ROA not before: Thu 26 Dec 2024 15:13:21 +0000
ROA not after: Sun 12 Dec 2027 15:13:21 +0000
asID: 17561
IP address blocks: 45.199.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60769 (0xed61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 15:13:21 2024 GMT
Not After : Dec 12 15:13:21 2027 GMT
Subject: CN=676d7294-2b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:e1:bb:0e:04:95:81:b0:77:e3:4f:d8:a9:
1b:9d:ec:14:54:85:b1:6e:80:fd:50:6d:d4:70:ce:
69:5a:49:0c:ca:0b:da:66:51:6d:e5:9d:8e:58:77:
47:09:62:06:14:e4:0d:62:9d:55:44:49:f9:61:ec:
2c:3f:27:0f:9c:4d:89:c9:9f:a7:cb:2d:66:c8:1a:
af:bb:1a:91:8d:0b:2f:55:b6:a0:74:c8:b2:62:97:
77:1c:13:b5:5c:c9:17:92:98:1f:bb:3a:0f:c3:a7:
eb:ca:35:5d:c6:6b:d2:45:12:91:ff:3a:5b:41:ac:
31:c8:27:2a:7e:4e:8e:27:5a:d4:70:94:6f:75:13:
3c:fc:88:b3:e2:88:07:f4:c7:fe:26:2c:2a:2f:37:
c0:76:a7:4d:72:5e:8f:83:ec:7b:99:7d:b2:17:4e:
1f:8b:e1:3b:69:e2:36:85:c8:98:86:cb:c4:43:4b:
2f:9f:1b:90:b1:3b:88:98:22:24:ab:1d:72:4d:7b:
c2:72:fc:28:4d:c5:85:2d:58:a0:38:d1:f4:e0:3e:
1b:e0:ca:f0:34:34:0f:20:56:c7:33:f9:1e:08:4f:
f3:0d:e6:62:f2:ce:8b:c0:72:cc:9b:8f:aa:f3:63:
fb:da:30:8f:bf:22:23:e8:39:61:d4:a9:07:76:d1:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:E7:CC:32:FF:48:F3:BF:22:C2:48:86:A3:4D:CA:E2:13:B3:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3664362C39B11EF860FC677762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:05:a4:cd:f9:2b:63:e1:8d:4c:90:a6:ff:0f:6a:8b:58:52:
48:fc:b6:48:48:83:0c:5e:0a:23:66:65:6b:6f:f1:ed:a6:51:
59:6e:40:b6:e2:36:d2:18:0c:96:1d:f3:43:c8:2e:5c:61:e8:
51:5f:b2:b3:76:b1:b5:03:f7:af:06:7e:18:9d:f7:ef:ac:fa:
a7:6c:75:43:60:52:6a:df:dd:97:19:93:5b:64:ef:8a:c6:71:
b7:ca:4f:49:4f:9b:97:c0:23:8a:49:ee:76:0f:42:c2:90:c4:
22:85:e9:32:b5:ae:f8:be:1d:7f:d3:c5:63:5c:4b:a0:94:94:
98:79:4b:85:23:29:d6:04:73:59:67:1f:f0:bb:9e:9c:0f:2b:
e9:ee:82:17:2d:5d:c9:94:82:62:eb:0a:ea:22:84:a3:fd:56:
eb:62:2e:08:8c:ec:be:15:17:7c:b2:05:12:21:63:37:0b:e3:
11:d7:8d:04:f8:9d:3e:9b:5f:99:79:08:68:4e:df:24:4a:cc:
e5:30:5b:d0:69:95:23:4b:0a:67:65:bc:f2:c0:3b:1d:d6:c5:
7e:ac:e5:09:2f:8e:7b:42:01:46:b4:ec:a1:9c:d7:b7:ec:85:
6d:82:33:dc:f7:5d:6f:f2:41:78:8d:f3:b7:6d:de:64:41:1a:
2c:14:f4:61
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO1hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTUxMzIxWhcNMjcxMjEyMTUxMzIxWjAYMRYw
FAYDVQQDEw02NzZkNzI5NC0yYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6bfhuw4ElYGwd+NP2KkbnewUVIWxboD9UG3UcM5pWkkMygvaZlFt5Z2O
WHdHCWIGFOQNYp1VREn5YewsPycPnE2JyZ+nyy1myBqvuxqRjQsvVbagdMiyYpd3
HBO1XMkXkpgfuzoPw6fryjVdxmvSRRKR/zpbQawxyCcqfk6OJ1rUcJRvdRM8/Iiz
4ogH9Mf+JiwqLzfAdqdNcl6Pg+x7mX2yF04fi+E7aeI2hciYhsvEQ0svnxuQsTuI
mCIkqx1yTXvCcvwoTcWFLVigONH04D4b4MrwNDQPIFbHM/keCE/zDeZi8s6LwHLM
m4+q82P72jCPvyIj6Dlh1KkHdtGXSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN9V
58wy/0jzvyLCSIajTcriE7PhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzY2NDM2MkMzOUIxMUVGODYwRkM2Nzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceBMA0GCSqGSIb3DQEBCwUA
A4IBAQBXBaTN+Stj4Y1MkKb/D2qLWFJI/LZISIMMXgojZmVrb/HtplFZbkC24jbS
GAyWHfNDyC5cYehRX7KzdrG1A/evBn4YnffvrPqnbHVDYFJq392XGZNbZO+KxnG3
yk9JT5uXwCOKSe52D0LCkMQihekyta74vh1/08VjXEuglJSYeUuFIynWBHNZZx/w
u56cDyvp7oIXLV3JlIJi6wrqIoSj/VbrYi4IjOy+FRd8sgUSIWM3C+MR140E+J0+
m1+ZeQhoTt8kSszlMFvQaZUjSwpnZbzywDsd1sV+rOUJL457QgFGtOyhnNe37IVt
gjPc911v8kF4jfO3bd5kQRosFPRh
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:04 2025 by rpki-client