Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151DA686A32F11EF8BBAF1B8762E951A.roa
File: 151DA686A32F11EF8BBAF1B8762E951A.roa (raw, json)
Hash identifier: tPjFQzB4GWcSan3hegBbiL8cFfDmb3VkFoiaCm0rp1M=
Subject key identifier: 57:0C:9D:5C:40:EC:2D:05:24:1A:D8:31:E3:40:7C:2E:0F:6F:EF:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151DA686A32F11EF8BBAF1B8762E951A.roa
Signing time: Fri 15 Nov 2024 08:53:28 +0000
ROA not before: Fri 15 Nov 2024 08:53:25 +0000
ROA not after: Sat 21 Dec 2024 08:53:25 +0000
asID: 140869
IP address blocks: 45.203.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53993 (0xd2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 08:53:25 2024 GMT
Not After : Dec 21 08:53:25 2024 GMT
Subject: CN=67370c08-dad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:ae:e3:0d:9e:01:15:4e:d7:c9:36:dd:ca:
b1:29:1f:cb:89:06:e1:c5:e0:7c:1b:1a:f1:ce:78:
1f:67:61:3c:04:0d:85:8b:24:0a:10:0c:82:10:53:
89:ff:fc:4d:f0:86:e6:3d:61:a2:e4:9d:9e:1e:81:
e3:0a:76:ae:35:73:13:6a:7e:c7:32:57:52:60:9a:
7a:46:bf:27:15:26:e8:7f:13:c7:e7:6f:8a:3e:50:
83:53:88:27:a8:0a:4a:4c:8d:2c:60:97:95:52:1e:
05:7b:c0:57:cb:3e:11:c3:7a:5f:aa:8a:00:6c:be:
b0:30:67:98:7e:70:41:da:80:de:b9:ca:6c:d4:99:
db:12:45:52:d2:22:09:37:3a:fd:14:0f:04:b5:6a:
16:32:c5:53:29:37:e7:7c:19:85:c6:7e:3c:ff:ab:
43:a0:b0:89:67:c5:8a:b7:ab:9c:9e:84:dd:e1:11:
10:3d:79:4d:1d:d7:8b:97:3e:70:dd:72:db:a2:92:
20:b9:72:f9:37:bc:c8:67:e2:9b:4a:81:44:95:fe:
db:c7:ef:77:43:9c:81:de:50:4a:f2:2c:7f:c6:f6:
e7:a2:91:38:98:82:ef:7c:f3:b4:68:29:04:f5:51:
d3:ce:b9:cb:85:fb:3f:04:1c:7c:d6:48:ca:80:75:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:9D:5C:40:EC:2D:05:24:1A:D8:31:E3:40:7C:2E:0F:6F:EF:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151DA686A32F11EF8BBAF1B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.216.0/22
Signature Algorithm: sha256WithRSAEncryption
64:11:c8:27:5f:05:70:94:83:04:7e:de:35:54:47:24:76:19:
20:7e:21:7c:85:13:79:3a:4b:50:8b:b6:4d:82:62:08:c4:73:
33:49:6b:d5:f2:c3:59:6b:80:55:96:3e:c1:1b:b9:e0:e7:eb:
9c:91:7e:8b:9e:78:e7:13:71:af:3a:2a:6c:87:28:01:37:7f:
5b:a0:4e:38:38:a7:0e:c9:35:16:93:21:fb:81:e6:1e:4e:33:
72:28:f7:a8:8b:46:b4:56:2e:da:f5:28:0d:78:21:88:f8:10:
50:66:ed:9b:a0:77:8c:ff:f5:13:24:7e:8d:ae:3e:1f:59:99:
80:e6:38:64:bb:e2:26:75:1c:b1:82:1f:47:56:4e:ee:1e:a0:
52:20:e1:ca:8d:2f:bd:31:07:b2:d9:fe:08:10:d3:fe:78:c9:
36:f6:b1:5e:88:1b:c6:92:14:e1:b4:6c:db:c5:e1:87:1f:36:
c3:08:9b:ab:56:2e:f7:45:7a:5b:dd:f6:37:c9:e0:40:ac:12:
44:12:b8:cb:b2:e9:ad:5c:a4:29:62:51:ea:4e:95:ab:9a:c6:
f0:5d:04:4c:77:0f:d7:85:77:27:51:d2:87:6f:e9:02:b7:5c:
72:5f:e4:fa:d4:60:51:94:d2:fa:89:51:d1:a5:8e:79:47:24:
7f:01:15:fd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANLpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE1MDg1MzI1WhcNMjQxMjIxMDg1MzI1WjAYMRYw
FAYDVQQDEw02NzM3MGMwOC1kYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwr6u4w2eARVO18k23cqxKR/LiQbhxeB8GxrxzngfZ2E8BA2FiyQKEAyC
EFOJ//xN8IbmPWGi5J2eHoHjCnauNXMTan7HMldSYJp6Rr8nFSbofxPH52+KPlCD
U4gnqApKTI0sYJeVUh4Fe8BXyz4Rw3pfqooAbL6wMGeYfnBB2oDeucps1JnbEkVS
0iIJNzr9FA8EtWoWMsVTKTfnfBmFxn48/6tDoLCJZ8WKt6ucnoTd4REQPXlNHdeL
lz5w3XLbopIguXL5N7zIZ+KbSoFElf7bx+93Q5yB3lBK8ix/xvbnopE4mILvfPO0
aCkE9VHTzrnLhfs/BBx81kjKgHVW3QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFcM
nVxA7C0FJBrYMeNAfC4Pb+9qMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNTFEQTY4NkEzMkYxMUVGOEJCQUYxQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcvYMA0GCSqGSIb3DQEBCwUA
A4IBAQBkEcgnXwVwlIMEft41VEckdhkgfiF8hRN5OktQi7ZNgmIIxHMzSWvV8sNZ
a4BVlj7BG7ng5+uckX6LnnjnE3GvOipshygBN39boE44OKcOyTUWkyH7geYeTjNy
KPeoi0a0Vi7a9SgNeCGI+BBQZu2boHeM//UTJH6Nrj4fWZmA5jhku+ImdRyxgh9H
Vk7uHqBSIOHKjS+9MQey2f4IENP+eMk29rFeiBvGkhThtGzbxeGHHzbDCJurVi73
RXpb3fY3yeBArBJEErjLsumtXKQpYlHqTpWrmsbwXQRMdw/XhXcnUdKHb+kCt1xy
X+T61GBRlNL6iVHRpY55RyR/ARX9
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org