Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C1ADE86A4D911EFB613BBA8762E951A.roa
File: 0C1ADE86A4D911EFB613BBA8762E951A.roa (raw, json)
Hash identifier: h9HEGfcdXlqARz50Ko08SHwHoLFopMCmcy2aLMe9biY=
Subject key identifier: FD:92:61:46:02:A3:E5:3E:3C:93:42:7C:15:6C:A9:96:35:28:A9:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D525
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C1ADE86A4D911EFB613BBA8762E951A.roa
Signing time: Sun 17 Nov 2024 11:42:39 +0000
ROA not before: Sun 17 Nov 2024 11:42:35 +0000
ROA not after: Thu 28 Nov 2024 11:42:35 +0000
asID: 133847
IP address blocks: 45.200.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54565 (0xd525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:42:35 2024 GMT
Not After : Nov 28 11:42:35 2024 GMT
Subject: CN=6739d6af-871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:6f:c7:4d:3f:72:a4:5a:32:05:eb:ec:19:
5b:c3:44:bc:27:b4:e1:b9:ff:9e:a7:46:fc:0c:4e:
60:fe:ed:d4:d1:7b:a1:88:71:a4:fe:0f:3b:d0:74:
dd:e2:12:d3:70:fb:92:9c:fd:1a:f4:21:00:29:1c:
2c:91:47:52:cc:8b:2a:34:10:25:26:be:9b:97:74:
b7:07:90:00:d5:17:ba:28:52:48:ab:83:ca:6e:93:
c9:1d:34:ce:00:2b:2a:4d:e2:11:e3:d0:2b:17:90:
70:e7:5d:bf:43:58:10:38:9a:c5:c3:f3:06:ba:7f:
0d:df:45:37:32:30:d5:d3:07:ac:d3:a1:7d:41:3c:
08:07:cc:e2:3d:01:51:86:1c:8b:7c:38:07:8e:35:
bf:a0:b0:28:92:8a:6a:bf:38:87:6c:44:a6:37:ff:
32:77:c3:f4:b6:b0:ad:4a:18:12:22:76:44:74:31:
e8:f9:65:98:eb:0f:6a:a0:41:dd:92:cd:ef:fc:9f:
8d:2f:b0:c5:e9:a0:ed:ad:fc:9d:29:20:38:3d:4f:
43:87:c8:7c:43:52:0e:a5:4d:a4:e7:77:45:06:6c:
f9:0e:4c:1b:b8:8a:97:e0:34:1b:6c:4a:ed:7f:3b:
46:a7:d6:18:61:ea:ee:1b:b3:7f:c7:d8:8d:86:84:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:92:61:46:02:A3:E5:3E:3C:93:42:7C:15:6C:A9:96:35:28:A9:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C1ADE86A4D911EFB613BBA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.84.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:7a:b5:c3:3d:17:f0:de:64:ac:12:26:95:69:be:82:dd:7e:
e9:8e:4c:8a:b5:4f:48:df:20:60:6c:fd:04:52:c4:92:94:c7:
17:ea:49:9c:5f:d1:2f:4a:19:a4:b7:e0:e8:82:3e:74:ff:ed:
97:fd:7f:f6:30:ce:5c:36:19:8a:9e:94:cd:92:48:9d:95:2f:
0c:5f:f4:30:1c:92:66:31:34:ec:05:27:9a:9e:0b:44:2e:25:
ac:74:61:77:6f:98:d5:04:8e:3d:dd:e7:9d:58:db:8a:d1:ef:
1d:8e:cd:a9:26:3f:e9:46:77:a2:88:57:73:5a:18:27:e2:16:
c9:8a:06:0b:42:30:ce:1b:28:af:5f:b5:e7:8f:b2:a6:1a:fc:
4d:ba:16:1e:7d:ed:8d:35:36:11:e4:b4:c3:c1:17:48:24:c8:
8d:e9:d6:b1:f1:0b:20:92:f3:ed:cc:18:e6:7f:e3:e8:27:fe:
a8:9f:d1:fb:f8:15:db:5a:46:cd:13:92:fe:97:d0:91:c9:1f:
a6:37:56:55:ad:4e:6d:62:e1:fb:82:45:ca:d0:7e:29:a2:63:
78:33:a0:3f:0e:72:a1:c9:2f:19:3c:0e:14:65:f2:9d:54:85:
ef:91:21:69:09:6a:e1:af:51:c9:19:87:c9:fe:8d:53:75:29:
96:4c:1b:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANUlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE3MTE0MjM1WhcNMjQxMTI4MTE0MjM1WjAYMRYw
FAYDVQQDEw02NzM5ZDZhZi04NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAndlvx00/cqRaMgXr7Blbw0S8J7Thuf+ep0b8DE5g/u3U0XuhiHGk/g87
0HTd4hLTcPuSnP0a9CEAKRwskUdSzIsqNBAlJr6bl3S3B5AA1Re6KFJIq4PKbpPJ
HTTOACsqTeIR49ArF5Bw512/Q1gQOJrFw/MGun8N30U3MjDV0wes06F9QTwIB8zi
PQFRhhyLfDgHjjW/oLAokopqvziHbESmN/8yd8P0trCtShgSInZEdDHo+WWY6w9q
oEHdks3v/J+NL7DF6aDtrfydKSA4PU9Dh8h8Q1IOpU2k53dFBmz5DkwbuIqX4DQb
bErtfztGp9YYYeruG7N/x9iNhoTe+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP2S
YUYCo+U+PJNCfBVsqZY1KKnwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQzFBREU4NkE0RDkxMUVGQjYxM0JCQTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLchUMA0GCSqGSIb3DQEBCwUA
A4IBAQC2erXDPRfw3mSsEiaVab6C3X7pjkyKtU9I3yBgbP0EUsSSlMcX6kmcX9Ev
Shmkt+Dogj50/+2X/X/2MM5cNhmKnpTNkkidlS8MX/QwHJJmMTTsBSeangtELiWs
dGF3b5jVBI493eedWNuK0e8djs2pJj/pRneiiFdzWhgn4hbJigYLQjDOGyivX7Xn
j7KmGvxNuhYefe2NNTYR5LTDwRdIJMiN6dax8QsgkvPtzBjmf+PoJ/6on9H7+BXb
WkbNE5L+l9CRyR+mN1ZVrU5tYuH7gkXK0H4pomN4M6A/DnKhyS8ZPA4UZfKdVIXv
kSFpCWrhr1HJGYfJ/o1TdSmWTBtT
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org