Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BC032C7EC111EE9B5B90744AD9E6FC.roa
File: 11BC032C7EC111EE9B5B90744AD9E6FC.roa (raw, json)
Hash identifier: i24VVo0SoG9ZvAaDAq4AGFsoj4qU/BOirJra7wIFoPw=
Subject key identifier: 39:D8:F1:53:F2:D6:6F:5C:A5:08:39:C6:CB:AD:50:1D:76:52:AB:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4515
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BC032C7EC111EE9B5B90744AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:30:19 +0000
ROA not before: Thu 09 Nov 2023 05:30:15 +0000
ROA not after: Thu 07 Nov 2024 05:30:15 +0000
asID: 133847
IP address blocks: 45.200.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17685 (0x4515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:30:15 2023 GMT
Not After : Nov 7 05:30:15 2024 GMT
Subject: CN=654c6e6b-e1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:89:6d:2c:10:af:0f:d9:71:de:48:e9:c9:d5:
3c:62:f4:5e:7a:3e:af:e8:a3:a2:dd:db:fb:6e:56:
ab:01:de:36:a6:06:d1:4e:4f:fc:f1:0d:73:b2:1e:
b0:1d:2c:05:87:a5:23:83:c6:9f:d3:49:55:57:54:
e3:81:12:69:6c:2f:0f:d1:ad:db:71:c6:1f:f3:b3:
9e:a7:bd:57:7c:9a:f7:aa:81:a4:56:53:d9:c6:ea:
0c:9d:e8:17:99:01:ac:34:60:5d:1f:31:a0:fc:b5:
c6:82:71:88:11:54:bd:c6:9e:ca:d2:82:32:37:a1:
74:8a:f0:94:5a:e4:fa:6a:a9:20:b6:04:d7:50:8d:
1a:d0:8f:95:01:fc:a4:65:1c:35:9e:b2:9f:08:ba:
d0:bc:ac:fa:39:fd:99:d4:78:04:8d:89:56:6a:3b:
a4:57:4b:8e:0c:35:3e:aa:c7:ec:9f:1a:06:33:04:
58:50:d8:28:bb:bf:6c:8e:49:d7:81:f1:06:4b:5e:
26:97:ce:09:a4:72:99:b3:ce:8d:c5:37:18:04:d7:
09:74:ea:2f:87:f3:43:5e:0f:bb:f2:5a:4d:e2:d2:
fc:d2:e9:60:79:65:f8:81:58:f0:89:e6:ba:fe:a1:
23:14:7f:bb:5b:5d:62:66:56:a1:08:78:3e:4e:7c:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:F1:53:F2:D6:6F:5C:A5:08:39:C6:CB:AD:50:1D:76:52:AB:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BC032C7EC111EE9B5B90744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ec:9a:05:bb:e8:c8:b8:1f:ff:27:eb:9a:04:63:22:d3:dd:
5f:1d:ba:ac:9c:e2:29:3f:88:c9:64:39:bf:c2:58:7b:c3:00:
ac:00:d4:b0:e7:72:9f:20:de:b7:ea:e6:7b:23:93:08:a2:52:
ed:ae:66:77:93:99:ec:85:fc:e9:f6:c4:c8:5a:f9:c8:c2:4f:
1f:16:18:83:c7:c9:0f:b6:fb:53:f2:52:cc:16:86:a5:2e:e3:
cc:b5:71:28:0c:32:d2:ab:66:19:9f:2a:de:96:e5:55:84:18:
6c:94:40:8b:a9:de:31:78:41:50:f7:d2:3e:be:d7:a9:09:9b:
d0:78:36:31:b0:4b:8e:c6:f8:a0:06:41:bd:d0:6c:bd:ef:b7:
23:b0:b9:bc:14:54:e7:0f:fc:0d:f1:51:da:07:10:f4:34:f1:
5b:5a:d7:70:7a:be:22:b7:41:c5:59:07:af:21:78:a3:0f:b7:
c9:8b:01:c3:cd:7d:ad:20:59:d5:a8:4e:71:16:21:d7:b1:25:
47:6e:7d:c2:1c:48:0f:70:1a:c0:24:00:dc:54:be:18:c7:33:
88:ce:51:17:f7:30:67:62:bc:23:fe:d9:cc:a8:b3:aa:92:7a:
9e:ec:2b:57:d7:df:71:63:26:a4:87:e0:a7:99:75:72:0e:cc:
19:13:40:76
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRRUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNTMwMTVaFw0yNDExMDcwNTMwMTVaMBgxFjAU
BgNVBAMTDTY1NGM2ZTZiLWUxYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiiW0sEK8P2XHeSOnJ1Txi9F56Pq/oo6Ld2/tuVqsB3jamBtFOT/zxDXOy
HrAdLAWHpSODxp/TSVVXVOOBEmlsLw/Rrdtxxh/zs56nvVd8mveqgaRWU9nG6gyd
6BeZAaw0YF0fMaD8tcaCcYgRVL3GnsrSgjI3oXSK8JRa5PpqqSC2BNdQjRrQj5UB
/KRlHDWesp8IutC8rPo5/ZnUeASNiVZqO6RXS44MNT6qx+yfGgYzBFhQ2Ci7v2yO
SdeB8QZLXiaXzgmkcpmzzo3FNxgE1wl06i+H80NeD7vyWk3i0vzS6WB5ZfiBWPCJ
5rr+oSMUf7tbXWJmVqEIeD5OfNuZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOdjx
U/LWb1ylCDnGy61QHXZSq1IwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzExQkMwMzJDN0VDMTExRUU5QjVCOTA3NDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyFIwDQYJKoZIhvcNAQELBQAD
ggEBAH/smgW76Mi4H/8n65oEYyLT3V8duqyc4ik/iMlkOb/CWHvDAKwA1LDncp8g
3rfq5nsjkwiiUu2uZneTmeyF/On2xMha+cjCTx8WGIPHyQ+2+1PyUswWhqUu48y1
cSgMMtKrZhmfKt6W5VWEGGyUQIup3jF4QVD30j6+16kJm9B4NjGwS47G+KAGQb3Q
bL3vtyOwubwUVOcP/A3xUdoHEPQ08Vta13B6viK3QcVZB68heKMPt8mLAcPNfa0g
WdWoTnEWIdexJUdufcIcSA9wGsAkANxUvhjHM4jOURf3MGdivCP+2cyos6qSep7s
K1fX33FjJqSH4KeZdXIOzBkTQHY=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org