Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0676E8D8390B11EFB1D9F755762E951A.roa
File: 0676E8D8390B11EFB1D9F755762E951A.roa (raw, json)
Hash identifier: V68bpBts1gQO8ETf1ZQVOJCHT/Eth1wSG4q47ImPZsQ=
Subject key identifier: D1:87:0B:4C:53:A4:F2:23:A5:EA:A2:3E:11:14:BA:5F:1A:4B:25:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 97BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0676E8D8390B11EFB1D9F755762E951A.roa
Signing time: Wed 03 Jul 2024 07:08:19 +0000
ROA not before: Wed 03 Jul 2024 07:08:15 +0000
ROA not after: Fri 04 Oct 2024 07:08:15 +0000
asID: 136970
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38842 (0x97ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 07:08:15 2024 GMT
Not After : Oct 4 07:08:15 2024 GMT
Subject: CN=6684f8e3-82d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:68:26:1b:6b:40:5a:93:ae:47:93:12:74:6d:
d7:87:81:73:d0:c4:59:d3:23:c8:36:8a:76:b7:f7:
37:0b:71:e0:3b:68:85:8f:57:83:20:94:db:d4:1d:
d7:99:2d:ef:a6:69:10:d9:7c:72:a6:20:ac:dc:4e:
09:b7:cf:90:1f:de:fd:9f:6a:84:d6:1d:10:45:81:
49:f3:e7:94:da:22:9a:67:7f:98:b5:3f:30:07:dd:
a7:45:1b:11:fa:9c:ef:15:d6:b8:a5:0b:7b:43:c4:
b7:cd:8d:e9:36:99:2e:17:6c:ab:ea:44:ad:df:23:
0e:2e:fc:1c:00:9e:fd:37:e4:fa:02:eb:8d:19:10:
42:cb:b6:89:b3:46:1c:af:bf:f8:71:c5:38:d4:dd:
06:d3:60:b3:f9:dd:de:65:b4:54:76:f1:ae:62:df:
44:22:b7:92:75:15:26:75:23:8d:38:96:a7:a0:f4:
88:a2:94:c3:1e:f8:41:80:cd:cf:b1:d9:0a:86:2c:
4b:89:72:3e:52:17:0b:05:fa:09:53:42:47:20:fc:
1c:c7:fa:e4:cb:e8:83:78:41:07:ab:58:a7:35:fd:
23:6b:a1:cd:6e:0e:d7:be:e7:a6:83:d0:4e:99:84:
44:52:62:aa:74:67:28:6f:96:ee:00:84:90:f4:b5:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:0B:4C:53:A4:F2:23:A5:EA:A2:3E:11:14:BA:5F:1A:4B:25:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0676E8D8390B11EFB1D9F755762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
48:43:0a:60:85:1f:e1:9e:34:05:9b:ab:e9:08:66:d8:ee:2d:
a4:6a:bf:3f:9d:c6:31:37:db:73:14:81:6d:d6:f2:21:a5:a1:
83:f6:40:a4:e2:82:8a:3c:eb:99:a0:03:bc:46:a2:fb:9a:5d:
6e:b8:ae:b0:be:7d:9b:39:61:74:3b:2b:27:fc:b7:92:a9:e0:
25:d7:81:be:5e:53:2b:ef:9d:33:2b:43:ea:64:f9:0e:c7:93:
52:9d:bb:b5:65:17:e4:cb:35:58:66:80:26:05:e2:30:b0:d8:
c7:4a:33:4d:52:62:f3:17:5a:10:f8:38:f2:2d:9a:8c:f7:41:
d7:b6:ec:43:bf:60:ca:62:6c:d9:91:db:da:4d:42:2d:12:72:
c5:cd:4a:b0:a5:ef:a7:6d:77:3f:c3:89:cc:5e:5b:75:aa:b1:
86:c3:f8:33:a1:a6:e6:df:16:a7:ff:0d:ac:db:f1:03:eb:2d:
b1:ff:5d:c4:d8:df:b2:6f:ac:03:7a:4e:a5:82:53:74:01:aa:
65:5d:c2:ac:81:4c:33:6e:1e:6a:91:09:a7:cf:c6:3c:df:ef:
cf:82:0e:1c:39:9e:bf:d8:b2:c8:73:a8:eb:43:73:9b:9c:ed:
0c:38:fc:5a:9d:d5:f4:98:5a:6f:89:7a:4c:86:27:e8:54:e9:
16:2f:13:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJe6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzAzMDcwODE1WhcNMjQxMDA0MDcwODE1WjAYMRYw
FAYDVQQDEw02Njg0ZjhlMy04MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7mgmG2tAWpOuR5MSdG3Xh4Fz0MRZ0yPINop2t/c3C3HgO2iFj1eDIJTb
1B3XmS3vpmkQ2XxypiCs3E4Jt8+QH979n2qE1h0QRYFJ8+eU2iKaZ3+YtT8wB92n
RRsR+pzvFda4pQt7Q8S3zY3pNpkuF2yr6kSt3yMOLvwcAJ79N+T6AuuNGRBCy7aJ
s0Ycr7/4ccU41N0G02Cz+d3eZbRUdvGuYt9EIreSdRUmdSONOJanoPSIopTDHvhB
gM3PsdkKhixLiXI+UhcLBfoJU0JHIPwcx/rky+iDeEEHq1inNf0ja6HNbg7Xvuem
g9BOmYREUmKqdGcob5buAISQ9LUIEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNGH
C0xTpPIjpeqiPhEUul8aSyV5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjc2RThEODM5MEIxMUVGQjFEOUY3NTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPJMA0GCSqGSIb3DQEBCwUA
A4IBAQBIQwpghR/hnjQFm6vpCGbY7i2kar8/ncYxN9tzFIFt1vIhpaGD9kCk4oKK
POuZoAO8RqL7ml1uuK6wvn2bOWF0Oysn/LeSqeAl14G+XlMr750zK0PqZPkOx5NS
nbu1ZRfkyzVYZoAmBeIwsNjHSjNNUmLzF1oQ+DjyLZqM90HXtuxDv2DKYmzZkdva
TUItEnLFzUqwpe+nbXc/w4nMXlt1qrGGw/gzoabm3xan/w2s2/ED6y2x/13E2N+y
b6wDek6lglN0AaplXcKsgUwzbh5qkQmnz8Y83+/Pgg4cOZ6/2LLIc6jrQ3ObnO0M
OPxandX0mFpviXpMhifoVOkWLxMu
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:11:53 2024 by rpki-client on console-ams.rpki-client.org