Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACDCBF8F8BC11EE813A5A2D017001B1.roa
File: 9ACDCBF8F8BC11EE813A5A2D017001B1.roa (raw, json)
Hash identifier: 3fF93sScCJMgevtWLUZl8vQ3Ui71Mji0nj49fk/0DX8=
Subject key identifier: 44:FF:FC:B3:90:D5:7A:B0:CB:6C:44:27:C0:D5:B4:2A:41:04:EC:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8255
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACDCBF8F8BC11EE813A5A2D017001B1.roa
Signing time: Fri 12 Apr 2024 11:05:43 +0000
ROA not before: Fri 12 Apr 2024 11:05:40 +0000
ROA not after: Tue 14 May 2024 11:05:40 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33365 (0x8255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 11:05:40 2024 GMT
Not After : May 14 11:05:40 2024 GMT
Subject: CN=66191587-36bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:b9:07:c9:4e:05:7b:32:8a:f6:56:50:5f:
0a:bb:db:16:cb:c1:31:26:19:36:10:c6:bc:fc:7d:
ab:f2:8f:42:73:17:03:a4:97:a9:d3:18:8d:4d:37:
9f:90:d2:0b:72:9f:75:5c:76:77:5d:c1:c4:3a:7e:
44:62:55:8f:d1:c9:73:ad:8d:0f:b1:bc:be:ec:40:
e9:d6:7c:f2:1d:00:e7:14:b1:e8:c5:86:45:3b:42:
6f:ef:67:04:aa:2e:1e:27:f6:c5:91:37:1e:37:ec:
65:54:e3:63:90:31:c9:5b:b9:97:ad:3b:b3:97:35:
cd:c8:0c:81:ef:bb:dd:2a:61:18:5d:34:2a:48:f6:
36:a3:a4:23:ff:28:97:7d:8d:7a:5e:aa:28:b6:68:
3e:d0:61:d0:1f:45:99:1d:17:76:0c:7c:15:34:5c:
08:c6:20:1f:bd:dd:a5:75:48:4e:28:c6:65:67:b5:
61:f2:72:e8:4f:f4:98:c4:ab:d5:39:1e:6b:7f:42:
79:e0:fd:5c:65:43:55:0e:f9:fc:a6:a6:8a:45:31:
e4:0a:78:e4:e8:89:0a:42:ae:0d:69:d3:b4:2a:6c:
14:04:42:a4:ca:21:72:07:ac:22:cc:50:d0:22:7f:
19:11:91:fe:d7:1c:72:46:9b:94:73:e7:ad:3c:ba:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FF:FC:B3:90:D5:7A:B0:CB:6C:44:27:C0:D5:B4:2A:41:04:EC:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACDCBF8F8BC11EE813A5A2D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b3:fe:2c:88:db:11:39:47:e9:b4:df:64:86:82:2b:c2:c2:
af:61:52:05:b3:b3:fe:91:a4:a1:f7:a1:e9:dc:5b:b6:64:3e:
22:ea:c8:47:51:80:a8:d8:74:ad:cd:1d:d6:c5:69:1c:f6:b2:
17:e7:d4:6b:23:3c:da:40:d4:b9:ff:77:bf:69:f4:33:88:80:
0f:94:d0:14:52:86:b3:34:6e:f3:6f:28:2e:bf:dd:1b:ab:d9:
6a:59:c5:8f:f6:dd:d4:73:a6:51:a9:9c:aa:df:f0:3e:e3:7d:
11:96:8a:94:1b:71:b4:d3:8d:86:98:1b:29:12:6b:61:36:7d:
a4:fb:4e:eb:a6:38:97:2e:5d:b7:cd:5a:d3:97:08:d4:0f:bd:
e2:eb:22:ce:18:00:7d:6e:e3:22:f1:fa:d6:f6:42:05:9b:51:
48:cf:95:fa:4d:24:46:7a:6d:03:8e:4a:5b:17:ec:56:fb:13:
bf:7f:62:9b:91:38:01:0e:40:e5:08:b3:11:00:a2:ab:3d:64:
cd:a2:e8:a1:b7:ba:6e:70:23:83:47:20:92:47:50:ec:ad:65:
b0:44:ce:25:9c:d3:37:16:95:30:53:e3:51:85:76:8f:90:b2:
25:50:b0:d2:56:c4:e0:06:8e:05:fa:a7:b9:e8:81:a1:44:c1:
dd:d4:e1:d3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIJVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEyMTEwNTQwWhcNMjQwNTE0MTEwNTQwWjAYMRYw
FAYDVQQDEw02NjE5MTU4Ny0zNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp3S5B8lOBXsyivZWUF8Ku9sWy8ExJhk2EMa8/H2r8o9CcxcDpJep0xiN
TTefkNILcp91XHZ3XcHEOn5EYlWP0clzrY0Psby+7EDp1nzyHQDnFLHoxYZFO0Jv
72cEqi4eJ/bFkTceN+xlVONjkDHJW7mXrTuzlzXNyAyB77vdKmEYXTQqSPY2o6Qj
/yiXfY16Xqootmg+0GHQH0WZHRd2DHwVNFwIxiAfvd2ldUhOKMZlZ7Vh8nLoT/SY
xKvVOR5rf0J54P1cZUNVDvn8pqaKRTHkCnjk6IkKQq4NadO0KmwUBEKkyiFyB6wi
zFDQIn8ZEZH+1xxyRpuUc+etPLowbwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFET/
/LOQ1Xqwy2xEJ8DVtCpBBOz3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QUNEQ0JGOEY4QkMxMUVFODEzQTVBMkQwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcI2MA0GCSqGSIb3DQEBCwUA
A4IBAQAts/4siNsROUfptN9khoIrwsKvYVIFs7P+kaSh96Hp3Fu2ZD4i6shHUYCo
2HStzR3WxWkc9rIX59RrIzzaQNS5/3e/afQziIAPlNAUUoazNG7zbyguv90bq9lq
WcWP9t3Uc6ZRqZyq3/A+430RloqUG3G0042GmBspEmthNn2k+07rpjiXLl23zVrT
lwjUD73i6yLOGAB9buMi8frW9kIFm1FIz5X6TSRGem0DjkpbF+xW+xO/f2KbkTgB
DkDlCLMRAKKrPWTNouiht7pucCODRyCSR1DsrWWwRM4lnNM3FpUwU+NRhXaPkLIl
ULDSVsTgBo4F+qe56IGhRMHd1OHT
-----END CERTIFICATE-----
Generated at Thu May 2 03:12:43 2024 by rpki-client on console-ams.rpki-client.org