Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1419169008FC11EE8BB7E63A4AD9E6FC.roa
File: 1419169008FC11EE8BB7E63A4AD9E6FC.roa (raw, json)
Hash identifier: 73sMpVU4S5cCdJTAjoXvL3LmSAwm8EUSV81TKI3Y5Zg=
Subject key identifier: 19:9E:54:CC:B0:BB:E9:AB:6F:D6:DC:06:A5:6E:3D:A6:2A:BC:25:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2B55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1419169008FC11EE8BB7E63A4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:35:26 +0000
ROA not before: Mon 12 Jun 2023 08:35:22 +0000
ROA not after: Sat 25 May 2024 08:35:22 +0000
asID: 131178
IP address blocks: 45.201.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11093 (0x2b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 08:35:22 2023 GMT
Not After : May 25 08:35:22 2024 GMT
Subject: CN=6486d8ce-01c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:c5:89:a9:a3:03:de:56:eb:40:03:b5:6e:
54:b0:d7:05:d5:1a:7f:1c:a5:2a:71:e0:5e:55:1f:
5f:c8:fa:3e:75:21:10:5e:b3:52:0e:7a:a1:ea:63:
34:73:d0:75:fd:07:ad:36:e0:e8:05:83:9b:d4:d8:
6f:ca:d0:c1:f0:c8:42:ef:b1:05:3b:b5:3d:9b:2c:
90:1e:26:01:c3:20:22:12:37:6a:bb:7e:34:c8:06:
c0:a9:d5:05:47:09:1c:c2:a7:ea:ae:f4:b5:9e:51:
51:2d:65:b3:02:c9:ae:5b:eb:13:2e:7f:a8:1d:2c:
b2:b5:6b:a9:f8:af:80:b2:67:ba:74:62:8f:3e:41:
5f:82:8f:79:7c:84:dd:4f:bf:f5:d7:b6:ea:38:4f:
5a:dd:03:f8:fa:53:ea:36:e9:cb:dc:5a:f0:11:fc:
39:5f:08:8d:06:76:d4:97:2e:b4:64:2c:5c:65:81:
a3:68:47:13:f2:9f:20:9a:a6:15:fa:2f:88:51:9a:
d3:ce:34:ec:0b:fe:0d:f9:cd:14:84:bb:ce:27:2d:
2a:e5:4a:4f:ec:83:0b:eb:40:1c:a3:c1:b7:d6:eb:
7b:2d:b6:a7:bd:56:8a:7e:64:48:3e:b9:4c:ac:55:
5d:a2:f4:72:42:33:5e:fa:66:d2:50:ab:75:11:23:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:54:CC:B0:BB:E9:AB:6F:D6:DC:06:A5:6E:3D:A6:2A:BC:25:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1419169008FC11EE8BB7E63A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b0:d2:1e:f4:d8:d9:77:62:85:ab:e2:bf:30:0a:08:51:de:
ec:4b:ad:aa:03:6c:90:a8:65:aa:f6:32:28:d8:f4:6a:7e:7b:
f1:d2:74:34:1d:af:c2:f2:77:d1:1a:c7:e3:03:57:9f:1a:13:
fb:54:30:3a:e0:61:17:2e:5e:6a:45:d9:6b:a4:61:7e:e4:e2:
d9:fb:3e:4d:bb:0a:bd:76:6b:79:c8:32:9e:9a:bf:9a:f7:7f:
27:44:c3:6b:18:10:9e:ad:a6:47:81:54:ba:38:37:f8:04:cf:
a8:cd:b2:bd:b3:0b:60:bc:13:91:f9:08:01:6c:c4:f7:32:58:
d2:b9:e1:01:ad:d8:a1:c8:99:06:56:fa:17:3e:da:22:80:98:
d2:e9:9c:a3:67:b3:a5:0c:8a:a1:ae:56:34:f0:b7:7d:7a:df:
b8:c5:8a:61:bd:f1:3f:21:29:93:8d:c0:65:09:a9:88:13:fa:
a7:64:fb:67:1e:0f:aa:b2:f0:66:69:71:1c:34:12:87:ae:d7:
30:e1:de:80:e9:97:1f:89:c4:57:94:57:e7:67:59:d8:af:9b:
f5:9a:f4:a7:79:ef:3d:8d:bc:05:ce:cb:dd:45:38:be:a7:ba:
fd:29:35:ae:bc:60:43:f3:a6:88:1c:41:0c:55:69:a3:04:4e:
27:3d:8c:eb
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICK1UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTIwODM1MjJaFw0yNDA1MjUwODM1MjJaMBgxFjAU
BgNVBAMTDTY0ODZkOGNlLTAxYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/08WJqaMD3lbrQAO1blSw1wXVGn8cpSpx4F5VH1/I+j51IRBes1IOeqHq
YzRz0HX9B6024OgFg5vU2G/K0MHwyELvsQU7tT2bLJAeJgHDICISN2q7fjTIBsCp
1QVHCRzCp+qu9LWeUVEtZbMCya5b6xMuf6gdLLK1a6n4r4CyZ7p0Yo8+QV+Cj3l8
hN1Pv/XXtuo4T1rdA/j6U+o26cvcWvAR/DlfCI0GdtSXLrRkLFxlgaNoRxPynyCa
phX6L4hRmtPONOwL/g35zRSEu84nLSrlSk/sgwvrQByjwbfW63sttqe9Vop+ZEg+
uUysVV2i9HJCM176ZtJQq3URI1WVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUGZ5U
zLC76atv1twGpW49piq8JUUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzE0MTkxNjkwMDhGQzExRUU4QkI3RTYzQTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtydUwDQYJKoZIhvcNAQELBQAD
ggEBAEuw0h702Nl3YoWr4r8wCghR3uxLraoDbJCoZar2MijY9Gp+e/HSdDQdr8Ly
d9Eax+MDV58aE/tUMDrgYRcuXmpF2WukYX7k4tn7Pk27Cr12a3nIMp6av5r3fydE
w2sYEJ6tpkeBVLo4N/gEz6jNsr2zC2C8E5H5CAFsxPcyWNK54QGt2KHImQZW+hc+
2iKAmNLpnKNns6UMiqGuVjTwt31637jFimG98T8hKZONwGUJqYgT+qdk+2ceD6qy
8GZpcRw0Eoeu1zDh3oDplx+JxFeUV+dnWdivm/Wa9Kd57z2NvAXOy91FOL6nuv0p
Na68YEPzpogcQQxVaaMETic9jOs=
-----END CERTIFICATE-----
Generated at Thu May 2 14:41:19 2024 by rpki-client on console-ams.rpki-client.org