Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D78027EACA211EF8DCECAA6762E951A.roa
File: 0D78027EACA211EF8DCECAA6762E951A.roa (raw, json)
Hash identifier: n9TJnVyW+IfdHNZMkx794diHTq61CT+igcHxWJo/7CI=
Subject key identifier: 98:27:75:5D:DD:D5:2D:84:85:4C:17:3D:5B:C9:9F:A6:3C:52:C9:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DBDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D78027EACA211EF8DCECAA6762E951A.roa
Signing time: Wed 27 Nov 2024 09:29:08 +0000
ROA not before: Wed 27 Nov 2024 09:29:04 +0000
ROA not after: Tue 11 Feb 2025 09:29:04 +0000
asID: 9009
IP address blocks: 45.192.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56284 (0xdbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 27 09:29:04 2024 GMT
Not After : Feb 11 09:29:04 2025 GMT
Subject: CN=6746e664-e977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:9a:b2:77:45:14:bc:cc:ef:b6:47:94:77:
16:3f:7b:21:75:93:03:6a:c3:e7:65:65:b0:fb:e8:
43:d2:52:32:7c:96:e9:df:52:66:dd:3a:80:82:e7:
15:ad:05:34:95:2c:9a:77:22:ee:5e:aa:65:bf:e8:
b0:16:f0:e5:bf:a5:7d:c4:71:6f:80:9c:69:50:21:
d2:33:69:09:d3:b1:0b:43:f0:54:a6:3a:01:8e:f9:
bd:63:93:01:b7:d3:2a:a4:c7:f8:cd:a3:f8:a8:2b:
52:fe:0e:38:b2:26:b1:71:65:c0:16:cd:87:91:31:
a8:da:08:fc:43:3d:fd:d4:61:2f:f4:24:3e:f1:5a:
90:5a:3e:54:16:bf:38:eb:f3:81:cd:ab:6b:f5:87:
5b:38:57:1f:35:eb:9a:0e:fc:af:65:03:dc:30:c8:
09:35:3a:2b:ee:0d:d5:6b:e7:a6:0f:89:c7:d2:58:
e4:aa:39:71:f6:25:10:4d:da:83:41:ec:cd:06:b1:
0c:2c:b1:8c:63:d7:2d:86:b2:7d:71:6f:01:ea:f7:
32:14:23:a2:15:bb:1d:73:c1:77:2b:32:e7:16:7c:
dc:92:32:cb:61:3b:1a:86:2b:d7:b0:61:d0:ea:70:
ee:d1:18:a2:60:04:f8:cc:60:34:59:a4:76:4a:23:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:75:5D:DD:D5:2D:84:85:4C:17:3D:5B:C9:9F:A6:3C:52:C9:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D78027EACA211EF8DCECAA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.144.0/23
Signature Algorithm: sha256WithRSAEncryption
92:28:97:a3:b2:0a:ce:25:43:78:0d:e6:42:4e:4d:cf:5e:07:
fe:a8:82:09:a9:09:3b:f0:89:82:49:e1:1b:ec:3d:26:d7:bf:
cf:6e:89:70:25:a8:8e:d8:02:65:3f:08:10:7c:8d:5b:dd:53:
ff:ad:d4:3b:76:c7:43:9e:55:90:db:c2:68:c2:05:72:35:1d:
5a:56:83:c7:30:83:4b:9c:b6:d3:0f:a6:50:48:8b:72:0f:6f:
ea:4a:a9:cc:dc:9e:21:46:2b:c9:c1:bf:11:7d:72:14:92:ac:
8c:31:62:43:c9:49:6b:c3:07:13:cc:26:3e:a8:8c:3e:ee:61:
d2:06:e8:26:2e:26:49:d0:fa:b3:28:22:f7:3e:8f:d4:93:0a:
18:f6:9e:ea:2a:a9:5f:0b:4c:20:23:76:61:f9:9c:6a:74:c5:
82:57:2b:3e:a9:ca:98:f9:0c:da:fd:b6:08:4e:3c:53:a0:64:
a2:0b:dd:b1:89:cd:61:61:12:d4:6e:08:9e:48:f1:a5:a4:6f:
1f:8c:f3:ef:ee:f6:78:8f:76:04:9d:ff:87:e9:5b:8d:b9:a3:
86:a6:38:c4:8c:01:f3:cb:44:03:0a:fb:50:31:1b:ef:75:ba:
77:29:5f:86:d6:cd:49:9b:70:23:34:fc:92:0a:ed:d3:62:aa:
d4:be:06:93
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANvcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTI3MDkyOTA0WhcNMjUwMjExMDkyOTA0WjAYMRYw
FAYDVQQDEw02NzQ2ZTY2NC1lOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlNyasndFFLzM77ZHlHcWP3shdZMDasPnZWWw++hD0lIyfJbp31Jm3TqA
gucVrQU0lSyadyLuXqplv+iwFvDlv6V9xHFvgJxpUCHSM2kJ07ELQ/BUpjoBjvm9
Y5MBt9MqpMf4zaP4qCtS/g44siaxcWXAFs2HkTGo2gj8Qz391GEv9CQ+8VqQWj5U
Fr846/OBzatr9YdbOFcfNeuaDvyvZQPcMMgJNTor7g3Va+emD4nH0ljkqjlx9iUQ
TdqDQezNBrEMLLGMY9cthrJ9cW8B6vcyFCOiFbsdc8F3KzLnFnzckjLLYTsahivX
sGHQ6nDu0RiiYAT4zGA0WaR2SiPN8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJgn
dV3d1S2EhUwXPVvJn6Y8UsnpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRDc4MDI3RUFDQTIxMUVGOERDRUNBQTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcCQMA0GCSqGSIb3DQEBCwUA
A4IBAQCSKJejsgrOJUN4DeZCTk3PXgf+qIIJqQk78ImCSeEb7D0m17/PbolwJaiO
2AJlPwgQfI1b3VP/rdQ7dsdDnlWQ28JowgVyNR1aVoPHMINLnLbTD6ZQSItyD2/q
SqnM3J4hRivJwb8RfXIUkqyMMWJDyUlrwwcTzCY+qIw+7mHSBugmLiZJ0PqzKCL3
Po/UkwoY9p7qKqlfC0wgI3Zh+ZxqdMWCVys+qcqY+Qza/bYITjxToGSiC92xic1h
YRLUbgieSPGlpG8fjPPv7vZ4j3YEnf+H6VuNuaOGpjjEjAHzy0QDCvtQMRvvdbp3
KV+G1s1Jm3AjNPySCu3TYqrUvgaT
-----END CERTIFICATE-----
Generated at Thu Dec 26 14:47:16 2024 by rpki-client on console-fra.rpki-client.org