Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BD9A468C3A011EF9218D893762E951A.roa
File: 9BD9A468C3A011EF9218D893762E951A.roa (raw, json)
Hash identifier: Yu5Z6Gv5LrOTeBmQ50/s39CNm41zw1khgPdAlTW5uN8=
Subject key identifier: 2F:87:20:C4:A3:D7:85:50:10:58:14:05:52:AE:5B:F9:D3:EF:C8:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ED93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BD9A468C3A011EF9218D893762E951A.roa
Signing time: Thu 26 Dec 2024 15:46:45 +0000
ROA not before: Thu 26 Dec 2024 15:46:41 +0000
ROA not after: Sun 12 Dec 2027 15:46:41 +0000
asID: 17561
IP address blocks: 45.200.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60819 (0xed93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 15:46:41 2024 GMT
Not After : Dec 12 15:46:41 2027 GMT
Subject: CN=676d7a65-5776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:ea:12:9c:1f:9c:32:e6:55:91:71:a7:12:
35:49:29:ec:d5:c1:08:7d:75:d3:be:c6:06:c8:18:
b3:93:29:cb:7f:87:85:9a:2d:67:7c:10:4a:4c:40:
d6:25:e1:51:dc:f7:8f:19:01:41:d8:5f:1a:4a:da:
aa:a5:f7:25:65:6e:eb:d4:84:b6:93:61:22:26:69:
1e:75:9d:52:1f:a3:f5:c0:91:fa:17:af:69:60:e9:
87:5a:c6:d5:d3:d1:59:29:c1:7d:12:a0:c6:cc:c0:
e8:73:35:73:b9:69:cb:83:51:46:bf:55:4f:1b:93:
12:a2:e1:06:67:2d:83:05:03:c6:f6:5d:f0:da:a0:
cb:96:d1:41:3a:c5:70:47:da:2d:17:ae:db:8e:45:
6e:a1:f1:8a:0d:83:89:50:18:69:4c:5c:d9:a4:b0:
94:ea:e1:61:e3:74:d0:3c:36:de:ab:e1:c0:93:a6:
f1:39:fd:6f:36:30:b9:4a:e7:ce:82:21:1b:66:ac:
4d:d0:10:88:6a:52:53:be:6a:0d:1d:02:99:49:e9:
3f:1b:05:9a:f7:e8:a8:2e:8d:92:f7:97:fe:a9:b9:
00:b9:72:5f:5b:7d:4e:fc:21:f5:48:c0:38:59:1c:
e6:81:5c:43:8d:72:0d:c8:da:40:a6:66:76:7b:f2:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:20:C4:A3:D7:85:50:10:58:14:05:52:AE:5B:F9:D3:EF:C8:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BD9A468C3A011EF9218D893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:07:81:08:d9:2d:cc:3f:5b:b9:a1:cf:a4:1c:8f:33:5a:f4:
89:fc:90:9d:10:e7:9f:ed:bf:08:18:2d:07:47:0f:e0:3e:fa:
d0:a2:16:b5:77:cc:90:54:ac:87:6f:80:ba:81:c3:cd:30:51:
58:58:c1:f7:c6:1b:34:f5:bc:b3:b1:8b:5e:56:2d:0a:0f:f2:
ef:09:67:fb:f1:4f:33:50:6f:f9:33:0f:b5:23:0e:fe:ee:11:
f0:42:0f:87:5d:9c:e6:6a:5b:70:0b:14:dd:1d:87:e3:92:a8:
60:9c:a8:f9:2f:28:27:0a:71:48:a7:10:c3:ef:5f:19:2c:6b:
f6:3b:85:7d:12:d3:f4:e5:d2:84:be:82:e0:a1:12:92:06:5f:
74:39:f0:7f:70:ab:42:05:a4:f4:27:05:f4:35:55:11:a2:a6:
62:fa:30:43:49:ab:29:79:b7:dd:c6:f8:36:de:c1:d5:23:e6:
41:6b:f6:65:df:8a:1d:3c:b9:98:76:de:c3:11:3b:77:66:fa:
ce:50:f5:fa:57:53:c8:d0:58:a0:92:96:af:e1:14:1d:f7:b6:
a9:8d:a2:af:d5:d7:09:99:e7:cf:22:8e:55:ae:8f:95:3e:69:
4c:78:14:b3:5a:d0:e5:37:c8:49:b6:b7:10:ae:dd:f4:3a:81:
fc:4d:e2:44
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAO2TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MTU0NjQxWhcNMjcxMjEyMTU0NjQxWjAYMRYw
FAYDVQQDEw02NzZkN2E2NS01Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvYfqEpwfnDLmVZFxpxI1SSns1cEIfXXTvsYGyBizkynLf4eFmi1nfBBK
TEDWJeFR3PePGQFB2F8aStqqpfclZW7r1IS2k2EiJmkedZ1SH6P1wJH6F69pYOmH
WsbV09FZKcF9EqDGzMDoczVzuWnLg1FGv1VPG5MSouEGZy2DBQPG9l3w2qDLltFB
OsVwR9otF67bjkVuofGKDYOJUBhpTFzZpLCU6uFh43TQPDbeq+HAk6bxOf1vNjC5
SufOgiEbZqxN0BCIalJTvmoNHQKZSek/GwWa9+ioLo2S95f+qbkAuXJfW31O/CH1
SMA4WRzmgVxDjXINyNpApmZ2e/LsSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC+H
IMSj14VQEFgUBVKuW/nT78hVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QkQ5QTQ2OEMzQTAxMUVGOTIxOEQ4OTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALch4MA0GCSqGSIb3DQEBCwUA
A4IBAQA/B4EI2S3MP1u5oc+kHI8zWvSJ/JCdEOef7b8IGC0HRw/gPvrQoha1d8yQ
VKyHb4C6gcPNMFFYWMH3xhs09byzsYteVi0KD/LvCWf78U8zUG/5Mw+1Iw7+7hHw
Qg+HXZzmaltwCxTdHYfjkqhgnKj5LygnCnFIpxDD718ZLGv2O4V9EtP05dKEvoLg
oRKSBl90OfB/cKtCBaT0JwX0NVURoqZi+jBDSaspebfdxvg23sHVI+ZBa/Zl34od
PLmYdt7DETt3ZvrOUPX6V1PI0Figkpav4RQd97apjaKv1dcJmefPIo5Vro+VPmlM
eBSzWtDlN8hJtrcQrt30OoH8TeJE
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:56:02 2025 by rpki-client