Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C9C3A08C39511EFA59A514F762E951A.roa
File: 7C9C3A08C39511EFA59A514F762E951A.roa (raw, json)
Hash identifier: MaX9WZhNkZQ+vw5OzDqfDCx8NyMDgWdHkZD+eHyRhgY=
Subject key identifier: DC:96:5E:97:1C:03:AE:83:09:08:21:77:F9:90:E6:A7:47:B6:10:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C9C3A08C39511EFA59A514F762E951A.roa
Signing time: Thu 26 Dec 2024 14:27:08 +0000
ROA not before: Thu 26 Dec 2024 14:27:04 +0000
ROA not after: Sun 12 Dec 2027 14:27:04 +0000
asID: 17561
IP address blocks: 45.196.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60699 (0xed1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 14:27:04 2024 GMT
Not After : Dec 12 14:27:04 2027 GMT
Subject: CN=676d67bc-4937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:77:43:a4:0a:66:3a:e5:80:a5:70:ea:54:
25:97:d5:4e:34:10:00:f8:cf:12:f1:a6:d2:7c:f5:
00:8d:0a:36:5f:d8:2a:8a:20:18:18:32:f7:9b:71:
12:0c:f0:7f:7d:af:5b:70:5a:e9:1d:bf:b8:52:36:
d3:13:43:e9:37:29:de:9f:22:cd:ae:03:61:9b:96:
fe:b2:cd:39:32:b7:dc:4e:a1:1f:be:e2:c1:0e:dd:
cd:69:44:7a:0e:88:4b:d7:55:32:6f:9d:41:32:30:
4b:70:b0:52:ca:93:9c:36:90:e7:4a:68:c6:5a:71:
47:1a:15:44:1c:87:2e:a1:49:4f:52:7d:a8:f4:55:
b3:94:68:95:ad:9a:e7:48:e5:aa:b1:34:96:5a:24:
92:4a:3b:2c:26:4c:b2:c9:a2:2a:89:47:3e:23:f0:
30:23:c6:7c:a4:a3:f3:92:b3:e3:c8:f2:61:09:32:
0f:c3:b6:f7:7d:f5:c5:c9:9e:4b:fb:4c:2d:07:27:
f2:ad:86:89:a2:fc:e9:59:a0:fa:8f:7d:fb:26:d3:
d9:d5:14:d9:81:c7:68:6a:b9:5f:ad:a2:4f:5f:4b:
9b:f2:b9:0a:5d:90:9c:52:c9:1b:0e:78:e8:e9:67:
f6:ea:98:40:50:fb:69:bf:9c:34:72:cc:8d:1f:b0:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:5E:97:1C:03:AE:83:09:08:21:77:F9:90:E6:A7:47:B6:10:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C9C3A08C39511EFA59A514F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.255.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1a:50:b4:e1:3e:ec:f1:f9:59:fd:d8:09:16:d5:78:09:11:
55:f2:99:47:28:d1:b3:ee:37:a4:e3:c4:2e:36:97:21:57:92:
94:53:b5:62:5e:f8:90:76:8c:4f:83:58:67:94:b6:2a:37:7e:
72:93:34:6a:50:fc:34:79:c6:b5:04:ba:15:bc:22:2e:d1:a7:
0d:dc:e0:6e:77:e8:e7:b1:f8:8b:5e:63:95:9d:e0:7c:f3:65:
fa:2e:ae:28:67:b0:3c:b8:fa:b7:07:70:2d:98:c8:6b:7b:2a:
e8:ea:40:72:00:1b:90:b5:8d:80:7a:75:bd:e1:7d:ba:c2:74:
b6:3f:d8:ea:fe:e3:5d:6f:99:3d:c0:da:d6:f1:4b:79:66:37:
40:66:8c:89:05:74:6c:ff:f5:b2:3c:8f:02:4c:f1:8a:74:ba:
2c:d7:c3:50:79:b4:9c:91:a5:a7:a0:2d:29:03:0d:91:53:db:
a8:01:b4:d5:b4:2b:31:7c:a0:74:7e:ab:33:b5:03:c7:8a:97:
a6:4b:24:62:84:58:e7:3b:c2:5f:c8:6b:d5:ae:3d:9d:66:cb:
db:60:88:d8:29:16:33:f3:ce:6d:ad:a2:94:a2:8f:a1:c2:e9:
7d:93:d4:fa:7e:43:d1:8e:c4:49:c1:f3:b0:1f:ae:6a:31:85:
38:7b:10:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO0bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTQyNzA0WhcNMjcxMjEyMTQyNzA0WjAYMRYw
FAYDVQQDEw02NzZkNjdiYy00OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwcZ3Q6QKZjrlgKVw6lQll9VONBAA+M8S8abSfPUAjQo2X9gqiiAYGDL3
m3ESDPB/fa9bcFrpHb+4UjbTE0PpNynenyLNrgNhm5b+ss05MrfcTqEfvuLBDt3N
aUR6DohL11Uyb51BMjBLcLBSypOcNpDnSmjGWnFHGhVEHIcuoUlPUn2o9FWzlGiV
rZrnSOWqsTSWWiSSSjssJkyyyaIqiUc+I/AwI8Z8pKPzkrPjyPJhCTIPw7b3ffXF
yZ5L+0wtByfyrYaJovzpWaD6j337JtPZ1RTZgcdoarlfraJPX0ub8rkKXZCcUskb
Dnjo6Wf26phAUPtpv5w0csyNH7CMnwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNyW
XpccA66DCQghd/mQ5qdHthCmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QzlDM0EwOEMzOTUxMUVGQTU5QTUxNEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcT/MA0GCSqGSIb3DQEBCwUA
A4IBAQBkGlC04T7s8flZ/dgJFtV4CRFV8plHKNGz7jek48QuNpchV5KUU7ViXviQ
doxPg1hnlLYqN35ykzRqUPw0eca1BLoVvCIu0acN3OBud+jnsfiLXmOVneB882X6
Lq4oZ7A8uPq3B3AtmMhreyro6kByABuQtY2AenW94X26wnS2P9jq/uNdb5k9wNrW
8Ut5ZjdAZoyJBXRs//WyPI8CTPGKdLos18NQebSckaWnoC0pAw2RU9uoAbTVtCsx
fKB0fqsztQPHipemSyRihFjnO8JfyGvVrj2dZsvbYIjYKRYz885traKUoo+hwul9
k9T6fkPRjsRJwfOwH65qMYU4exAQ
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:09 2025 by rpki-client