Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6EEE0A4D58711EFAB6C99B1762E951A.roa
File: F6EEE0A4D58711EFAB6C99B1762E951A.roa (raw, json)
Hash identifier: KVPTYPCAj+dnk5r7I2EyfbCKGymR9mrTw/4VojhRVjw=
Subject key identifier: C4:EA:91:18:A9:ED:39:69:83:BF:AA:35:A5:84:EB:04:06:A2:65:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010B89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6EEE0A4D58711EFAB6C99B1762E951A.roa
Signing time: Sat 18 Jan 2025 10:35:41 +0000
ROA not before: Sat 18 Jan 2025 10:35:37 +0000
ROA not after: Fri 07 Mar 2025 10:35:37 +0000
asID: 272369
IP address blocks: 45.202.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68489 (0x10b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 18 10:35:37 2025 GMT
Not After : Mar 7 10:35:37 2025 GMT
Subject: CN=678b83fd-c963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:ad:fd:12:7f:d9:46:0b:a6:7e:30:9e:a3:
6b:1e:a1:aa:30:09:2b:12:4c:13:98:12:bf:66:8c:
2b:45:bd:40:e9:da:90:4e:8d:42:c7:90:73:27:84:
b4:63:68:4f:b5:aa:10:7d:e2:c8:63:f9:3d:04:b1:
c4:d2:69:14:de:c2:79:52:fe:61:4c:da:d7:27:0d:
64:39:a7:cc:c8:eb:0f:4f:11:aa:bb:4e:70:fa:0c:
e8:14:e3:3e:14:ef:3e:4f:32:e2:43:4d:ce:be:74:
f4:a7:6e:fa:94:25:07:1d:89:d3:12:01:46:df:44:
e3:64:0c:7d:38:95:fd:0c:e7:e8:dc:8d:5d:19:7c:
5b:81:78:90:62:0c:84:5d:f2:4b:0d:76:ff:45:dd:
70:d4:07:fc:3f:e0:aa:1c:7a:e2:6e:9e:4f:05:92:
b8:97:bc:de:08:aa:9f:4f:bc:91:a5:4a:27:9c:dc:
5c:e5:e4:1b:d9:71:ac:40:03:8e:6e:28:db:ab:93:
23:0b:8c:2a:eb:23:18:e1:97:64:3e:05:69:14:a5:
6b:c9:1e:f2:e1:d0:9d:ec:a6:45:9b:6f:6e:4f:1b:
47:ad:ed:51:46:4a:bc:8e:0a:86:2d:45:a9:db:37:
de:ef:52:40:f3:aa:bf:2e:64:94:0c:09:ae:52:dc:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:91:18:A9:ED:39:69:83:BF:AA:35:A5:84:EB:04:06:A2:65:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6EEE0A4D58711EFAB6C99B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.122.0/24
Signature Algorithm: sha256WithRSAEncryption
27:12:06:ae:a1:76:93:5c:9e:83:9c:05:3a:c4:6d:23:19:25:
24:b5:85:09:f8:12:10:5c:f4:76:42:a1:d7:f5:20:10:1f:33:
80:47:13:83:bc:a2:20:1b:8f:16:db:af:36:96:13:c3:94:c9:
95:28:01:a9:cc:21:a2:06:ca:8f:ac:a2:2f:51:67:68:df:43:
f6:68:ba:24:5f:e5:97:b6:01:a2:2d:49:59:69:7a:25:ef:9c:
19:90:f8:ed:2a:1c:7c:7f:32:4d:7d:2b:33:2f:a2:4b:de:2e:
85:3a:59:db:3a:ec:5d:50:3d:19:c2:c1:58:c2:50:9b:59:a3:
31:a2:04:64:5a:f4:61:49:d1:a1:0f:28:72:9c:f5:d1:1f:2d:
0e:f5:47:d3:a0:ce:04:11:d7:ce:77:00:7d:8e:f6:92:ee:40:
be:69:8c:2f:0b:c3:ce:e3:41:58:ad:2b:ce:07:af:2f:82:be:
75:08:7f:6f:42:ab:77:ba:e8:af:e4:8c:02:2b:58:37:32:da:
be:cf:c2:8f:c6:bb:e7:fa:95:74:32:ea:7d:23:1a:c8:65:8b:
22:64:e9:bb:e8:d5:40:bd:b3:f7:6b:45:4c:44:45:0b:41:05:
10:b9:0b:9e:be:f8:d9:1d:f0:45:6f:83:27:8e:67:fa:e7:59:
f2:b1:12:48
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE4MTAzNTM3WhcNMjUwMzA3MTAzNTM3WjAYMRYw
FAYDVQQDEw02NzhiODNmZC1jOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzCSt/RJ/2UYLpn4wnqNrHqGqMAkrEkwTmBK/ZowrRb1A6dqQTo1Cx5Bz
J4S0Y2hPtaoQfeLIY/k9BLHE0mkU3sJ5Uv5hTNrXJw1kOafMyOsPTxGqu05w+gzo
FOM+FO8+TzLiQ03OvnT0p276lCUHHYnTEgFG30TjZAx9OJX9DOfo3I1dGXxbgXiQ
YgyEXfJLDXb/Rd1w1Af8P+CqHHribp5PBZK4l7zeCKqfT7yRpUonnNxc5eQb2XGs
QAOObijbq5MjC4wq6yMY4ZdkPgVpFKVryR7y4dCd7KZFm29uTxtHre1RRkq8jgqG
LUWp2zfe71JA86q/LmSUDAmuUtwvGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMTq
kRip7Tlpg7+qNaWE6wQGomWwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNkVFRTBBNEQ1ODcxMUVGQUI2Qzk5QjE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcp6MA0GCSqGSIb3DQEBCwUA
A4IBAQAnEgauoXaTXJ6DnAU6xG0jGSUktYUJ+BIQXPR2QqHX9SAQHzOARxODvKIg
G48W2682lhPDlMmVKAGpzCGiBsqPrKIvUWdo30P2aLokX+WXtgGiLUlZaXol75wZ
kPjtKhx8fzJNfSszL6JL3i6FOlnbOuxdUD0ZwsFYwlCbWaMxogRkWvRhSdGhDyhy
nPXRHy0O9UfToM4EEdfOdwB9jvaS7kC+aYwvC8PO40FYrSvOB68vgr51CH9vQqt3
uuiv5IwCK1g3Mtq+z8KPxrvn+pV0Mup9IxrIZYsiZOm76NVAvbP3a0VMREULQQUQ
uQuevvjZHfBFb4Mnjmf651nysRJI
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:44 2025 by rpki-client