Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F87CD936BDB711EF841FFEB9762E951A.roa
File: F87CD936BDB711EF841FFEB9762E951A.roa (raw, json)
Hash identifier: PzX3MzRPXj9QMVobMF8WvDdVeDT2SQqC8bTPiFFL9Mw=
Subject key identifier: DD:74:A1:18:F8:C1:03:01:94:A0:7B:F5:4D:B7:E2:0C:68:45:45:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E509
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F87CD936BDB711EF841FFEB9762E951A.roa
Signing time: Thu 19 Dec 2024 03:18:52 +0000
ROA not before: Thu 19 Dec 2024 03:18:48 +0000
ROA not after: Wed 10 Dec 2025 03:18:48 +0000
asID: 984
IP address blocks: 45.204.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58633 (0xe509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 19 03:18:48 2024 GMT
Not After : Dec 10 03:18:48 2025 GMT
Subject: CN=6763909c-b4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:01:29:76:c8:28:d0:9b:4d:49:70:d5:90:
e7:f7:db:42:29:be:d9:b2:77:f2:f4:cc:15:09:aa:
78:1f:1a:ce:92:90:bb:ec:1a:9c:8a:f3:be:26:9e:
1d:42:3b:85:e8:4e:35:02:88:89:ea:cf:ff:58:25:
5f:b5:25:f8:62:c7:3c:a4:ff:88:88:1c:fd:ca:6b:
c7:8a:2a:89:42:d5:8d:3f:6e:2b:e8:4b:64:29:88:
92:70:78:9a:f8:7b:ca:ac:9b:b3:da:6c:d2:2f:7c:
42:91:ff:aa:72:fa:3a:39:bf:c1:f0:c8:aa:66:de:
a8:0e:da:5f:97:f7:60:70:21:f0:04:aa:22:c0:20:
22:de:90:33:e4:77:70:2e:bc:2e:98:18:9b:48:91:
fe:e9:db:5a:85:ad:4e:10:1b:58:9c:6a:d6:be:cb:
bc:03:d0:17:56:58:80:1e:62:c6:b4:23:fa:31:f0:
e3:ab:1f:25:ba:07:ff:ae:84:cf:9c:46:4b:e8:c2:
15:5e:66:78:1e:c9:b0:a3:b9:61:0c:f2:09:d3:2b:
06:e9:d2:98:be:12:75:3c:15:8a:78:bd:51:47:5d:
a6:9a:f1:d2:b7:c7:29:57:eb:65:a3:21:12:56:e9:
f7:92:95:93:4a:46:19:91:6e:a5:eb:f1:ab:a6:1b:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:A1:18:F8:C1:03:01:94:A0:7B:F5:4D:B7:E2:0C:68:45:45:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F87CD936BDB711EF841FFEB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.179.0/24
Signature Algorithm: sha256WithRSAEncryption
af:07:36:9d:71:fb:4e:78:95:33:d6:cd:78:c4:e3:d4:eb:3f:
00:8e:2a:f5:88:4b:a2:09:a4:9a:ce:29:cc:59:8c:0b:6d:a4:
d8:4f:b7:66:dd:6e:67:2f:ec:6b:de:f3:08:d3:13:6f:51:1b:
c5:e0:9b:7d:b6:f0:dc:3b:91:70:ec:03:41:ac:74:b6:22:69:
8d:07:88:68:6c:d4:ac:d8:c8:9b:35:65:de:ae:08:45:ee:6b:
0c:0d:53:0c:be:1b:59:f9:9a:c4:c6:c5:4e:eb:73:48:ed:4e:
01:4e:72:af:3a:4c:02:6c:13:b6:5b:dd:37:6c:23:b9:fa:67:
f6:f6:e2:db:fb:8c:93:59:7e:37:33:04:c7:27:e6:25:2f:41:
52:e3:38:0b:e6:35:e4:05:6c:29:7f:d6:77:c0:35:17:81:f1:
b8:79:ff:a6:ba:22:16:d4:fe:c0:5d:a8:b6:94:4d:c2:0b:80:
00:5e:52:33:ab:73:2e:2a:57:5e:30:4d:fa:c5:19:8e:c5:ad:
0f:8e:28:88:1b:55:87:bb:4e:7a:46:23:36:93:6d:94:86:a2:
37:e7:2a:49:8b:28:e8:7b:49:40:e8:67:54:e3:27:fb:87:d7:
98:3e:fb:3f:40:b8:7b:55:67:8f:1b:99:71:a5:e0:c6:f7:56:
81:5a:07:e0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOUJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE5MDMxODQ4WhcNMjUxMjEwMDMxODQ4WjAYMRYw
FAYDVQQDEw02NzYzOTA5Yy1iNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu4gBKXbIKNCbTUlw1ZDn99tCKb7Zsnfy9MwVCap4HxrOkpC77BqcivO+
Jp4dQjuF6E41AoiJ6s//WCVftSX4Ysc8pP+IiBz9ymvHiiqJQtWNP24r6EtkKYiS
cHia+HvKrJuz2mzSL3xCkf+qcvo6Ob/B8MiqZt6oDtpfl/dgcCHwBKoiwCAi3pAz
5HdwLrwumBibSJH+6dtaha1OEBtYnGrWvsu8A9AXVliAHmLGtCP6MfDjqx8lugf/
roTPnEZL6MIVXmZ4Hsmwo7lhDPIJ0ysG6dKYvhJ1PBWKeL1RR12mmvHSt8cpV+tl
oyESVun3kpWTSkYZkW6l6/GrphsNwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN10
oRj4wQMBlKB79U234gxoRUX4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GODdDRDkzNkJEQjcxMUVGODQxRkZFQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcyzMA0GCSqGSIb3DQEBCwUA
A4IBAQCvBzadcftOeJUz1s14xOPU6z8Ajir1iEuiCaSazinMWYwLbaTYT7dm3W5n
L+xr3vMI0xNvURvF4Jt9tvDcO5Fw7ANBrHS2ImmNB4hobNSs2MibNWXerghF7msM
DVMMvhtZ+ZrExsVO63NI7U4BTnKvOkwCbBO2W903bCO5+mf29uLb+4yTWX43MwTH
J+YlL0FS4zgL5jXkBWwpf9Z3wDUXgfG4ef+muiIW1P7AXai2lE3CC4AAXlIzq3Mu
KldeME36xRmOxa0PjiiIG1WHu056RiM2k22UhqI35ypJiyjoe0lA6GdU4yf7h9eY
Pvs/QLh7VWePG5lxpeDG91aBWgfg
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:51 2025 by rpki-client