Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE855F50CDB211EF8162F7A6762E951A.roa
File: FE855F50CDB211EF8162F7A6762E951A.roa (raw, json)
Hash identifier: 98BAo1+XNjgfa+yaH8AnqLX0YepK67/1hc2OuM3WXeA=
Subject key identifier: 4E:A3:76:F6:CC:DA:F8:9A:AD:91:D4:86:51:27:1C:9F:36:08:B7:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01018F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE855F50CDB211EF8162F7A6762E951A.roa
Signing time: Wed 08 Jan 2025 11:23:33 +0000
ROA not before: Wed 08 Jan 2025 11:23:29 +0000
ROA not after: Thu 16 Dec 2027 11:23:29 +0000
asID: 17561
IP address blocks: 45.201.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65935 (0x1018f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 11:23:29 2025 GMT
Not After : Dec 16 11:23:29 2027 GMT
Subject: CN=677e6035-7a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:e6:d2:b3:aa:a5:9d:e7:88:d8:1c:18:ef:
9c:51:8e:0f:9e:d5:e1:0b:e0:cb:c5:c0:90:d9:52:
34:ac:75:73:3a:55:22:4e:92:35:c3:b6:26:da:3d:
ce:50:62:7a:1f:48:94:2a:01:74:10:ff:22:10:88:
d1:8f:d3:4a:e0:4f:4b:51:b1:55:49:24:18:50:bf:
af:4b:fc:33:77:82:4c:91:2c:a1:3c:6e:5e:2f:e9:
28:d4:ab:db:10:1a:31:3c:b5:bc:83:5c:6a:de:8b:
27:24:08:fa:30:85:e0:c6:ba:d3:ba:d4:74:ac:47:
5b:f3:74:d5:c0:6a:71:23:84:9c:17:b4:34:62:b5:
4c:6d:6a:dc:bc:51:89:21:86:80:94:68:99:1d:f3:
26:56:c4:25:5b:c1:d0:e0:f7:a9:7a:55:71:84:77:
e6:99:cd:39:ca:66:82:98:09:6d:6b:f6:00:0a:1e:
53:62:f6:2d:ae:b3:38:61:ef:57:ea:7c:99:0e:5e:
06:e9:f4:dc:70:e3:a9:66:16:f1:50:ee:a4:3a:58:
78:66:5a:6b:21:ad:03:52:6f:04:ff:30:f1:72:47:
1f:d2:70:8c:57:8e:65:a8:fa:e2:d6:e6:4a:0b:fc:
a5:6d:fb:d9:4d:19:52:3f:00:1e:52:ac:c0:08:6e:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A3:76:F6:CC:DA:F8:9A:AD:91:D4:86:51:27:1C:9F:36:08:B7:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE855F50CDB211EF8162F7A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.232.0/24
Signature Algorithm: sha256WithRSAEncryption
21:42:26:59:53:e1:45:6c:d7:37:eb:5a:f3:36:4f:e4:5a:5a:
58:e6:7d:19:53:28:97:87:48:56:0f:d1:a0:af:06:f8:4b:e9:
a7:b3:23:77:c4:30:bc:ae:4e:46:1e:97:22:a5:55:e9:bc:a6:
fa:67:54:58:f3:d5:9e:28:cc:57:b2:2a:a7:65:3f:f5:95:e7:
fe:49:f3:bc:84:7f:1e:db:5c:58:d7:26:cf:e9:8c:6c:e7:dc:
41:5e:6e:97:80:99:bd:33:6b:2b:38:e1:44:70:cd:87:4c:98:
b7:eb:39:a9:03:42:38:44:b4:dc:0a:a7:cc:41:67:56:85:9f:
cd:5e:05:78:d8:d2:5c:85:eb:5a:6e:06:74:25:27:0e:c7:87:
09:45:64:78:a4:4f:76:06:35:a8:ed:73:12:02:b1:7a:b2:3b:
65:f0:03:c6:8b:15:d4:f5:49:28:93:f6:8d:9d:a9:d0:fd:32:
4e:8a:69:8f:b0:c2:f5:47:c8:a5:e9:6b:34:68:31:ce:0b:cd:
22:fc:87:e6:d0:0c:de:7f:10:56:00:d2:72:5e:15:00:bf:f2:
4f:13:a8:6a:a9:cb:56:cf:b2:56:ce:3c:53:d9:54:27:bc:f6:
98:58:ff:d6:ea:93:27:23:58:17:d9:ba:fa:22:2f:b8:1c:9b:
c4:9c:fc:62
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQGPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MTEyMzI5WhcNMjcxMjE2MTEyMzI5WjAYMRYw
FAYDVQQDEw02NzdlNjAzNS03YTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqOHm0rOqpZ3niNgcGO+cUY4PntXhC+DLxcCQ2VI0rHVzOlUiTpI1w7Ym
2j3OUGJ6H0iUKgF0EP8iEIjRj9NK4E9LUbFVSSQYUL+vS/wzd4JMkSyhPG5eL+ko
1KvbEBoxPLW8g1xq3osnJAj6MIXgxrrTutR0rEdb83TVwGpxI4ScF7Q0YrVMbWrc
vFGJIYaAlGiZHfMmVsQlW8HQ4PepelVxhHfmmc05ymaCmAlta/YACh5TYvYtrrM4
Ye9X6nyZDl4G6fTccOOpZhbxUO6kOlh4ZlprIa0DUm8E/zDxckcf0nCMV45lqPri
1uZKC/ylbfvZTRlSPwAeUqzACG7pewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE6j
dvbM2viarZHUhlEnHJ82CLdyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRTg1NUY1MENEQjIxMUVGODE2MkY3QTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcnoMA0GCSqGSIb3DQEBCwUA
A4IBAQAhQiZZU+FFbNc361rzNk/kWlpY5n0ZUyiXh0hWD9Ggrwb4S+mnsyN3xDC8
rk5GHpcipVXpvKb6Z1RY89WeKMxXsiqnZT/1lef+SfO8hH8e21xY1ybP6Yxs59xB
Xm6XgJm9M2srOOFEcM2HTJi36zmpA0I4RLTcCqfMQWdWhZ/NXgV42NJchetabgZ0
JScOx4cJRWR4pE92BjWo7XMSArF6sjtl8APGixXU9Ukok/aNnanQ/TJOimmPsML1
R8il6Ws0aDHOC80i/Ifm0AzefxBWANJyXhUAv/JPE6hqqctWz7JWzjxT2VQnvPaY
WP/W6pMnI1gX2br6Ii+4HJvEnPxi
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:06 2025 by rpki-client