Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC3A6BCBE7511EFA27C595B762E951A.roa
File: FEC3A6BCBE7511EFA27C595B762E951A.roa (raw, json)
Hash identifier: 798aZQhrMqPyW66l49Mc3rDt40wN+vAJBVihKs5VNJg=
Subject key identifier: 3E:40:0F:92:9B:92:DE:23:E0:77:1C:34:50:89:B1:73:77:F5:00:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E626
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC3A6BCBE7511EFA27C595B762E951A.roa
Signing time: Fri 20 Dec 2024 01:59:07 +0000
ROA not before: Fri 20 Dec 2024 01:59:03 +0000
ROA not after: Wed 10 Dec 2025 01:59:03 +0000
asID: 984
IP address blocks: 45.206.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58918 (0xe626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 20 01:59:03 2024 GMT
Not After : Dec 10 01:59:03 2025 GMT
Subject: CN=6764cf6b-0fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:4f:4b:58:b7:a0:6e:1e:d1:dc:0d:88:21:
d4:2e:d1:c1:22:7e:d1:ae:6f:10:6d:8c:d6:fb:7c:
0c:12:a2:35:58:ae:6e:70:ac:c7:3e:46:ba:31:e6:
c3:27:10:1c:03:34:0c:c5:31:f0:95:21:a0:31:52:
a0:eb:32:5c:17:a2:dc:37:04:60:e9:ad:56:fd:38:
1c:82:40:e8:04:79:d5:86:ec:80:3d:e3:ee:94:46:
50:88:5e:8b:9e:12:02:c8:c4:3c:71:3f:2d:58:30:
c2:f3:9f:94:2f:ee:b6:fa:8c:19:73:63:81:79:78:
00:02:39:db:50:68:18:7f:de:64:33:58:a4:a4:60:
51:79:2e:bc:db:50:c1:05:21:4f:d8:4a:98:82:bf:
3d:4d:ba:81:72:70:4b:15:7f:a5:04:cf:b9:1d:1f:
41:9c:dd:0b:80:35:0c:35:4b:0f:f8:b9:6c:fc:15:
16:9b:2c:87:c8:8c:7a:0b:2d:6c:16:c0:72:ef:35:
37:ee:cc:5d:b9:3b:15:88:32:9e:9f:75:53:50:75:
06:33:c5:73:b1:91:3a:bd:ed:e9:f0:cb:70:c7:21:
40:55:4f:aa:2e:71:7c:28:a2:5e:82:75:d5:48:f3:
7e:42:9d:8b:5d:54:40:d5:67:d3:99:74:40:70:67:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:0F:92:9B:92:DE:23:E0:77:1C:34:50:89:B1:73:77:F5:00:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC3A6BCBE7511EFA27C595B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.147.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:20:4a:f6:02:e7:ab:1f:78:94:73:0b:b1:60:f5:d8:29:da:
f3:12:84:86:cd:15:15:52:e8:28:8b:67:ff:e4:08:de:49:68:
96:29:26:6b:68:ce:ec:74:78:1e:14:d0:25:a9:62:52:78:f8:
ae:61:40:6f:f9:75:5d:cb:46:de:2e:26:41:a5:64:50:8c:da:
85:35:e2:dd:7c:01:b6:c5:26:68:ab:84:29:67:dd:ae:0f:61:
df:2e:e6:f5:9f:cf:cf:d2:9d:1c:63:0a:e0:f4:2c:f0:16:31:
d3:10:2e:fa:a9:36:da:a2:88:28:38:42:af:a0:0c:2b:5e:1b:
b7:63:05:10:e3:5f:66:4e:94:0b:bb:4d:51:de:5f:6c:3b:11:
b8:a0:9c:db:02:82:80:93:9b:53:4f:c2:e6:14:d3:da:0f:e7:
e6:14:ca:92:90:61:cc:bb:69:e3:f1:88:66:ca:53:77:47:02:
f0:c0:44:ea:65:f0:d6:17:df:24:12:40:2a:0f:fa:68:80:8b:
1d:c1:cc:65:c2:98:7c:06:69:b4:05:a1:aa:98:60:44:fe:c5:
07:86:ce:aa:6b:c1:1f:56:21:d1:a0:19:be:0a:62:78:bd:53:
8f:d0:b6:74:09:8d:7f:fc:a1:83:97:29:29:7f:f7:a7:41:95:
d5:11:a1:45
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOYmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjIwMDE1OTAzWhcNMjUxMjEwMDE1OTAzWjAYMRYw
FAYDVQQDEw02NzY0Y2Y2Yi0wZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv0tPS1i3oG4e0dwNiCHULtHBIn7Rrm8QbYzW+3wMEqI1WK5ucKzHPka6
MebDJxAcAzQMxTHwlSGgMVKg6zJcF6LcNwRg6a1W/TgcgkDoBHnVhuyAPePulEZQ
iF6LnhICyMQ8cT8tWDDC85+UL+62+owZc2OBeXgAAjnbUGgYf95kM1ikpGBReS68
21DBBSFP2EqYgr89TbqBcnBLFX+lBM+5HR9BnN0LgDUMNUsP+Lls/BUWmyyHyIx6
Cy1sFsBy7zU37sxduTsViDKen3VTUHUGM8VzsZE6ve3p8MtwxyFAVU+qLnF8KKJe
gnXVSPN+Qp2LXVRA1WfTmXRAcGfgcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD5A
D5Kbkt4j4HccNFCJsXN39QBrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRUMzQTZCQ0JFNzUxMUVGQTI3QzU5NUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc6TMA0GCSqGSIb3DQEBCwUA
A4IBAQC8IEr2AuerH3iUcwuxYPXYKdrzEoSGzRUVUugoi2f/5AjeSWiWKSZraM7s
dHgeFNAlqWJSePiuYUBv+XVdy0beLiZBpWRQjNqFNeLdfAG2xSZoq4QpZ92uD2Hf
Lub1n8/P0p0cYwrg9CzwFjHTEC76qTbaoogoOEKvoAwrXhu3YwUQ419mTpQLu01R
3l9sOxG4oJzbAoKAk5tTT8LmFNPaD+fmFMqSkGHMu2nj8YhmylN3RwLwwETqZfDW
F98kEkAqD/pogIsdwcxlwph8Bmm0BaGqmGBE/sUHhs6qa8EfViHRoBm+CmJ4vVOP
0LZ0CY1//KGDlykpf/enQZXVEaFF
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:32 2025 by rpki-client