Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BA2D562A59211EF898720B3762E951A.roa
File: 0BA2D562A59211EF898720B3762E951A.roa (raw, json)
Hash identifier: vueysv/tETu2s2KPVekTfu+7Om7CNw9T0UgNRlD/sFg=
Subject key identifier: 15:96:8F:28:80:26:8D:B4:51:4A:D2:7A:F4:04:70:EF:68:63:A3:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D534
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BA2D562A59211EF898720B3762E951A.roa
Signing time: Mon 18 Nov 2024 09:46:55 +0000
ROA not before: Mon 18 Nov 2024 09:46:51 +0000
ROA not after: Wed 25 Dec 2024 09:46:51 +0000
asID: 273135
IP address blocks: 45.195.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54580 (0xd534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 18 09:46:51 2024 GMT
Not After : Dec 25 09:46:51 2024 GMT
Subject: CN=673b0d0f-a6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:5a:c6:91:b1:76:d2:3f:d6:79:f7:6b:d5:
b3:ed:dd:85:4f:f6:22:6c:70:10:c8:e0:4f:66:9a:
fd:80:fd:6b:d0:18:94:8b:8e:89:fc:6c:e1:bc:8d:
fb:18:09:6a:6b:b0:38:a2:36:e3:f4:1b:5a:10:48:
da:82:4c:f3:95:44:66:c1:4a:72:dd:c9:b8:25:c7:
a5:ec:05:e6:5e:63:7b:1a:ba:eb:52:9d:41:b2:fb:
0b:e4:0a:80:5c:54:05:fa:47:16:e3:64:9c:10:0b:
57:a1:ee:18:a6:a6:b6:4c:35:ae:93:ad:8a:83:40:
f0:49:ca:3c:11:ea:6c:3f:1e:e3:ea:aa:cf:60:49:
72:f0:11:55:9a:d1:90:ed:2d:87:b3:c0:05:db:03:
88:90:fe:ab:ad:48:aa:e6:3c:f2:34:16:2f:cb:54:
d2:56:0e:43:80:6a:f0:0d:9b:fb:2b:27:0a:ae:85:
4f:a8:d1:7c:9c:c7:6f:b9:02:e0:62:85:8d:a0:9f:
cf:16:c7:b9:04:f4:4f:0b:16:f6:86:3e:ae:7f:c1:
7c:c2:ec:48:77:54:28:17:fc:9d:07:b2:d8:5f:4f:
66:d4:5a:96:27:be:4e:ab:09:5d:80:4f:04:cc:48:
50:c6:08:5e:61:90:f2:b7:12:cd:05:e5:b8:97:df:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:8F:28:80:26:8D:B4:51:4A:D2:7A:F4:04:70:EF:68:63:A3:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BA2D562A59211EF898720B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
Signature Algorithm: sha256WithRSAEncryption
85:37:b8:d1:53:3f:18:48:34:27:24:3f:fe:ac:97:0e:d7:fa:
49:c8:92:b4:2d:e8:5e:f4:ad:fb:11:e4:6e:ed:b8:27:38:01:
f3:69:f0:3a:eb:09:96:0f:65:4f:9f:5d:dd:f3:a5:c4:e1:56:
c9:a5:e6:a8:4e:1f:c5:a3:24:3b:df:f5:05:d3:0d:41:be:a3:
a0:14:ee:e7:ee:45:fc:18:56:17:a3:23:e9:6c:f4:94:92:cf:
fe:d2:27:95:83:7d:a7:c4:c7:d2:49:d3:be:0d:83:03:f4:92:
5b:5e:01:56:36:e7:2c:2e:a9:b0:61:d1:3d:b7:cd:49:03:90:
cd:8f:99:c6:a0:63:a2:7c:99:f6:1a:1b:67:dd:fe:97:66:dc:
05:61:6b:00:40:58:ca:5b:2b:c7:ed:93:39:70:24:43:f3:5e:
5f:75:56:6c:ff:57:29:bc:22:4c:4d:75:70:f1:5a:6b:07:95:
09:2b:3b:fa:3b:5d:4e:87:ea:0e:0a:9d:4f:6c:2b:4c:69:c1:
43:5d:5d:83:c8:52:87:a5:69:79:97:42:5d:1a:dc:0c:04:3c:
e2:e3:5e:f0:a5:1f:36:62:d1:01:4a:ea:90:49:04:b4:68:45:
a8:54:02:ce:91:fc:70:da:51:32:fe:83:00:a6:91:2b:39:ca:
05:ac:36:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANU0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE4MDk0NjUxWhcNMjQxMjI1MDk0NjUxWjAYMRYw
FAYDVQQDEw02NzNiMGQwZi1hNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArz9axpGxdtI/1nn3a9Wz7d2FT/YibHAQyOBPZpr9gP1r0BiUi46J/Gzh
vI37GAlqa7A4ojbj9BtaEEjagkzzlURmwUpy3cm4Jcel7AXmXmN7GrrrUp1BsvsL
5AqAXFQF+kcW42ScEAtXoe4Ypqa2TDWuk62Kg0DwSco8EepsPx7j6qrPYEly8BFV
mtGQ7S2Hs8AF2wOIkP6rrUiq5jzyNBYvy1TSVg5DgGrwDZv7KycKroVPqNF8nMdv
uQLgYoWNoJ/PFse5BPRPCxb2hj6uf8F8wuxId1QoF/ydB7LYX09m1FqWJ75Oqwld
gE8EzEhQxgheYZDytxLNBeW4l998ywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBWW
jyiAJo20UUrSevQEcO9oY6MsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQkEyRDU2MkE1OTIxMUVGODk4NzIwQjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcMPMA0GCSqGSIb3DQEBCwUA
A4IBAQCFN7jRUz8YSDQnJD/+rJcO1/pJyJK0Lehe9K37EeRu7bgnOAHzafA66wmW
D2VPn13d86XE4VbJpeaoTh/FoyQ73/UF0w1BvqOgFO7n7kX8GFYXoyPpbPSUks/+
0ieVg32nxMfSSdO+DYMD9JJbXgFWNucsLqmwYdE9t81JA5DNj5nGoGOifJn2Ghtn
3f6XZtwFYWsAQFjKWyvH7ZM5cCRD815fdVZs/1cpvCJMTXVw8VprB5UJKzv6O11O
h+oOCp1PbCtMacFDXV2DyFKHpWl5l0JdGtwMBDzi417wpR82YtEBSuqQSQS0aEWo
VALOkfxw2lEy/oMAppErOcoFrDaY
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org