Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09CC937CF72D11EEBBC7B570017001B1.roa
File: 09CC937CF72D11EEBBC7B570017001B1.roa (raw, json)
Hash identifier: L6A5M/wAUZr9coLMTYgmo/aSaZlK1HI7DdQ1EJqelFc=
Subject key identifier: 84:5C:AE:DB:13:4C:CC:24:77:AF:A5:34:D9:C4:C4:BF:A0:13:91:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09CC937CF72D11EEBBC7B570017001B1.roa
Signing time: Wed 10 Apr 2024 11:25:30 +0000
ROA not before: Wed 10 Apr 2024 11:25:27 +0000
ROA not after: Thu 17 Oct 2024 11:25:27 +0000
asID: 137443
IP address blocks: 45.195.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33279 (0x81ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 11:25:27 2024 GMT
Not After : Oct 17 11:25:27 2024 GMT
Subject: CN=6616772a-20a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:6b:b4:3b:9f:7f:29:81:b0:da:35:bc:ba:
26:8c:b4:ce:a3:64:bc:9c:1d:09:c6:8c:31:3c:4d:
91:8a:97:4c:d3:ed:08:ca:d1:b6:be:23:2a:a7:41:
49:2a:89:ad:16:29:a4:ad:d7:6f:ea:f2:60:50:7d:
58:2a:3b:a0:82:2a:c3:68:b3:47:cc:8f:53:e5:7c:
5e:9e:a7:7d:a4:9b:32:0d:05:37:2a:72:ae:5b:21:
2c:dd:30:54:fa:b1:7e:84:32:50:5c:bc:9c:49:d1:
48:23:b0:e1:69:cc:c6:f9:2b:c2:a1:1e:e6:07:43:
64:76:3c:96:a6:61:4b:a5:fb:26:73:8f:f3:8f:97:
4b:df:6c:51:d7:23:fe:94:4d:ad:5c:7e:e0:20:d5:
85:23:be:b2:f2:22:17:38:fb:a9:b1:7c:eb:08:96:
61:6f:cb:fb:4c:20:3b:ec:dd:bb:9d:5e:8f:e8:78:
d5:9e:4a:82:7a:ab:13:c8:c0:c3:c5:d9:18:77:20:
d8:f6:46:2e:6e:ea:b1:23:32:74:67:8a:96:74:46:
d3:c7:1b:4f:b3:cc:0c:00:84:f1:49:0a:94:d4:4c:
d8:2f:76:f8:b4:90:3e:10:8d:12:46:de:4b:91:6e:
00:fb:20:21:0c:01:9c:66:d0:1d:1f:96:20:f9:08:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:AE:DB:13:4C:CC:24:77:AF:A5:34:D9:C4:C4:BF:A0:13:91:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09CC937CF72D11EEBBC7B570017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:2b:77:86:4a:d8:df:40:76:78:5c:21:af:63:32:50:67:d3:
2e:f3:dd:19:10:83:d9:a8:1c:27:f7:b7:34:84:5e:90:63:2e:
a9:60:a4:43:b3:3d:7f:86:b0:b9:b5:93:41:1e:3b:86:1a:c9:
0b:5f:ae:81:36:78:a4:25:1e:55:a6:d2:50:8f:09:7b:e5:e0:
62:0a:28:1a:05:c1:b6:36:98:61:3b:3b:ff:c3:e4:27:a5:c3:
70:87:a3:10:5f:f7:8a:11:79:4d:ce:db:e2:25:4c:a2:43:20:
3e:4b:8c:f6:ba:c4:60:60:cf:44:66:ab:bc:70:ad:ac:ff:8a:
cc:24:4c:b6:03:0d:86:69:da:48:ec:4f:2f:16:10:be:66:f4:
c5:23:42:49:6b:ff:5d:2f:1e:85:0f:bb:d3:8e:f7:b4:23:4c:
60:bb:97:84:43:85:ec:a2:e3:78:db:57:87:81:9f:33:ad:88:
08:08:c8:7d:15:b0:ae:ad:e0:b3:ba:08:fc:d2:ac:99:0b:c1:
d7:6f:1a:47:62:20:66:e7:73:7f:57:68:bd:6c:22:b0:cb:29:
19:45:c5:fc:dc:84:6e:2c:51:34:f7:51:32:9b:1b:c4:c8:d6:
ab:c8:4e:33:1e:62:67:fa:a1:0b:b6:50:e4:dd:03:78:a7:b5:
d9:2a:85:d5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIH/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEwMTEyNTI3WhcNMjQxMDE3MTEyNTI3WjAYMRYw
FAYDVQQDEw02NjE2NzcyYS0yMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4fRrtDuffymBsNo1vLomjLTOo2S8nB0JxowxPE2RipdM0+0IytG2viMq
p0FJKomtFimkrddv6vJgUH1YKjuggirDaLNHzI9T5Xxenqd9pJsyDQU3KnKuWyEs
3TBU+rF+hDJQXLycSdFII7DhaczG+SvCoR7mB0NkdjyWpmFLpfsmc4/zj5dL32xR
1yP+lE2tXH7gINWFI76y8iIXOPupsXzrCJZhb8v7TCA77N27nV6P6HjVnkqCeqsT
yMDDxdkYdyDY9kYubuqxIzJ0Z4qWdEbTxxtPs8wMAITxSQqU1EzYL3b4tJA+EI0S
Rt5LkW4A+yAhDAGcZtAdH5Yg+QiwHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIRc
rtsTTMwkd6+lNNnExL+gE5ERMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOUNDOTM3Q0Y3MkQxMUVFQkJDN0I1NzAwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcM0MA0GCSqGSIb3DQEBCwUA
A4IBAQCtK3eGStjfQHZ4XCGvYzJQZ9Mu890ZEIPZqBwn97c0hF6QYy6pYKRDsz1/
hrC5tZNBHjuGGskLX66BNnikJR5VptJQjwl75eBiCigaBcG2NphhOzv/w+QnpcNw
h6MQX/eKEXlNztviJUyiQyA+S4z2usRgYM9EZqu8cK2s/4rMJEy2Aw2GadpI7E8v
FhC+ZvTFI0JJa/9dLx6FD7vTjve0I0xgu5eEQ4XsouN421eHgZ8zrYgICMh9FbCu
reCzugj80qyZC8HXbxpHYiBm53N/V2i9bCKwyykZRcX83IRuLFE091EymxvEyNar
yE4zHmJn+qELtlDk3QN4p7XZKoXV
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:47 2024 by rpki-client on console-fra.rpki-client.org