Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08D6B606156411EEA41CFE614AD9E6FC.roa
File: 08D6B606156411EEA41CFE614AD9E6FC.roa (raw, json)
Hash identifier: C/R4p5gT9u3ajMFLw2QqJUTP2vVg7QR9tg/gA2f5eF0=
Subject key identifier: 44:FE:BD:7C:11:CB:E0:0C:07:BA:58:D3:C1:A7:6C:6C:F1:E9:4C:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08D6B606156411EEA41CFE614AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:29:48 +0000
ROA not before: Wed 28 Jun 2023 03:29:45 +0000
ROA not after: Sun 16 Jun 2024 03:29:45 +0000
asID: 270068
IP address blocks: 45.195.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11674 (0x2d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:29:45 2023 GMT
Not After : Jun 16 03:29:45 2024 GMT
Subject: CN=649ba92c-98a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:2d:53:e9:ab:b1:d8:bf:a9:7d:4f:c1:da:
fa:31:9e:97:9e:24:76:9c:c9:c2:14:c2:aa:81:03:
f9:db:94:48:d5:d2:3f:7e:86:83:ce:42:92:9d:b6:
33:3c:51:5e:73:13:2b:41:a9:92:09:d3:d9:c7:2f:
de:38:24:7f:f4:b9:08:1c:dc:b7:cc:02:d6:86:d4:
f0:11:3f:30:cf:a5:0f:b3:71:85:b6:9b:0d:39:b3:
1c:d0:45:a7:44:03:d1:b5:e5:b5:ba:f6:1d:9d:93:
f9:32:3f:25:9a:0c:f4:2c:96:b8:da:a6:57:5d:56:
98:ab:6c:d5:50:48:dd:33:92:76:ab:52:5a:4c:2f:
bf:e5:6a:2e:2f:ec:e1:88:7f:da:c2:fd:9f:88:1c:
6f:43:00:f8:c0:c0:8c:5f:d4:11:d3:cb:82:38:ef:
2b:1f:b8:f4:55:97:de:c0:d9:f2:e7:c9:ab:3d:9a:
6d:69:2d:5c:ea:fc:8e:e8:35:f5:79:e4:c2:9c:d9:
b0:84:7d:7b:1e:37:df:19:aa:0e:b4:a7:c4:0a:3b:
47:f8:d7:93:0d:9a:04:6c:15:5c:b6:dc:30:1e:9b:
d5:7d:97:09:f2:6f:fe:b4:b8:4f:28:87:71:e1:72:
66:7f:70:80:a2:ae:b8:da:e9:09:28:51:01:75:b7:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:BD:7C:11:CB:E0:0C:07:BA:58:D3:C1:A7:6C:6C:F1:E9:4C:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08D6B606156411EEA41CFE614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e3:00:8c:fb:24:4d:30:73:9d:9b:3a:0a:4a:03:68:57:79:
1a:0e:c0:93:c3:d2:78:94:e8:d7:1e:5c:38:17:66:09:69:95:
30:90:63:98:d7:e2:62:64:4e:91:e7:e1:cb:62:dc:bb:f6:99:
3e:14:9b:e8:14:de:d0:c3:1c:3f:55:bb:82:31:f5:69:54:96:
c8:f2:82:ac:e7:77:5d:cd:38:e7:55:d3:28:72:c1:8c:9d:54:
89:dd:6f:e4:df:31:ae:71:a4:89:31:5f:cb:51:58:35:8d:9d:
19:36:f9:08:40:89:1b:d6:53:36:d5:d2:be:1a:9c:cd:c0:fa:
06:b6:5f:84:f8:fe:f9:6d:82:40:eb:d8:d3:86:b2:b0:78:ac:
11:24:67:87:5d:d5:35:e1:d4:1b:82:e7:53:1f:54:67:0b:a8:
d0:fc:22:84:77:5d:aa:d5:b1:29:0b:dd:3a:77:35:84:f9:50:
8d:b0:f4:ea:d2:af:94:df:a4:ee:59:22:6e:a8:d0:bd:27:65:
08:30:c3:4f:d1:5c:b3:f5:2a:b4:11:cf:a8:1e:8c:a8:ea:44:
25:a8:ae:5b:62:a3:19:81:1e:40:5f:d6:80:a3:c2:ee:bd:b0:
8e:a9:28:0d:1b:36:da:1c:fe:ba:53:2f:41:38:e5:77:39:56:
48:38:51:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLZowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MjgwMzI5NDVaFw0yNDA2MTYwMzI5NDVaMBgxFjAU
BgNVBAMTDTY0OWJhOTJjLTk4YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAWi1T6aux2L+pfU/B2voxnpeeJHacycIUwqqBA/nblEjV0j9+hoPOQpKd
tjM8UV5zEytBqZIJ09nHL944JH/0uQgc3LfMAtaG1PARPzDPpQ+zcYW2mw05sxzQ
RadEA9G15bW69h2dk/kyPyWaDPQslrjaplddVpirbNVQSN0zknarUlpML7/lai4v
7OGIf9rC/Z+IHG9DAPjAwIxf1BHTy4I47ysfuPRVl97A2fLnyas9mm1pLVzq/I7o
NfV55MKc2bCEfXseN98Zqg60p8QKO0f415MNmgRsFVy23DAem9V9lwnyb/60uE8o
h3HhcmZ/cICirrja6QkoUQF1twfJAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQURP69
fBHL4AwHuljTwadsbPHpTDowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzA4RDZCNjA2MTU2NDExRUVBNDFDRkU2MTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw1wwDQYJKoZIhvcNAQELBQAD
ggEBAC3jAIz7JE0wc52bOgpKA2hXeRoOwJPD0niU6NceXDgXZglplTCQY5jX4mJk
TpHn4cti3Lv2mT4Um+gU3tDDHD9Vu4Ix9WlUlsjygqznd13NOOdV0yhywYydVInd
b+TfMa5xpIkxX8tRWDWNnRk2+QhAiRvWUzbV0r4anM3A+ga2X4T4/vltgkDr2NOG
srB4rBEkZ4dd1TXh1BuC51MfVGcLqND8IoR3XarVsSkL3Tp3NYT5UI2w9OrSr5Tf
pO5ZIm6o0L0nZQgww0/RXLP1KrQRz6gejKjqRCWorltioxmBHkBf1oCjwu69sI6p
KA0bNtoc/rpTL0E45Xc5Vkg4UTk=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:04 2024 by rpki-client on console-fra.rpki-client.org