Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DEFE5EA982F11EF90A7A2B4762E951A.roa
File: 1DEFE5EA982F11EF90A7A2B4762E951A.roa (raw, json)
Hash identifier: xn/XcUwpP1Vf7w72p0vo78QAccHFvfKxr9e1j8TUM9A=
Subject key identifier: 76:1C:60:AE:82:4A:0B:0E:95:98:0D:57:5E:7C:9A:28:5D:BF:A4:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DEFE5EA982F11EF90A7A2B4762E951A.roa
Signing time: Fri 01 Nov 2024 08:56:01 +0000
ROA not before: Fri 01 Nov 2024 08:55:57 +0000
ROA not after: Wed 04 Dec 2024 08:55:57 +0000
asID: 42831
IP address blocks: 45.198.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52057 (0xcb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 08:55:57 2024 GMT
Not After : Dec 4 08:55:57 2024 GMT
Subject: CN=672497a0-c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:99:3a:43:86:14:fa:31:34:d8:60:cf:de:
41:12:d4:0b:1b:39:05:c3:52:3f:22:66:0c:52:3e:
ec:f5:85:4a:6e:e8:27:a0:01:b8:c6:d7:5f:98:98:
17:6b:0b:a0:82:62:e6:e6:00:9f:a7:0c:2e:91:ae:
db:ca:59:fe:c3:e1:7b:06:d5:bd:5b:06:cf:35:30:
a2:52:3b:1b:71:91:8a:98:bf:86:be:26:1b:a9:37:
38:dc:f4:4b:6c:f5:13:58:a8:be:71:c7:69:90:f9:
4c:87:f7:f7:b9:1f:45:3d:5b:38:18:c6:3e:0d:59:
b9:10:a0:8b:6b:ba:e6:95:93:7a:3e:fc:0b:52:7d:
b0:c2:00:c6:77:dc:63:c6:30:94:35:48:c2:b4:5e:
7f:b6:b2:30:b9:92:dc:66:cf:5a:ff:05:e0:dd:5d:
b1:50:3e:01:cd:38:de:8d:f7:8a:fb:6f:b5:8a:c4:
e1:63:4d:47:13:57:97:c7:18:a5:13:15:c7:70:4b:
c0:38:89:8b:5d:5f:49:83:23:0a:5f:b6:45:ec:0c:
fb:d8:37:21:a5:46:f4:c1:8b:41:e0:d8:74:f5:b2:
83:dd:66:52:9c:7b:41:f3:75:7f:4a:4d:e3:91:dc:
46:ab:31:c5:a9:e8:58:17:a9:d9:48:8c:ef:b8:be:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1C:60:AE:82:4A:0B:0E:95:98:0D:57:5E:7C:9A:28:5D:BF:A4:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DEFE5EA982F11EF90A7A2B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.180.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:41:8a:f9:05:34:cc:d5:71:c3:4f:55:8f:38:28:7a:f1:cc:
d9:42:f0:6d:d9:a2:21:fb:c5:ee:80:44:6b:81:9b:d3:04:02:
18:98:f2:ec:ac:aa:1b:42:4d:70:7a:c7:41:c5:b3:bf:d7:eb:
de:34:f8:5d:33:75:e6:54:d1:2d:52:dd:d9:c4:9a:9a:49:a8:
8f:ad:8c:42:fc:45:16:c2:cf:7e:2b:ff:df:4d:01:d5:48:75:
c9:ca:c1:35:4d:a7:02:9a:34:92:a1:73:73:53:2b:5c:ec:02:
e0:e9:bc:bc:01:db:76:93:27:c5:d9:79:03:94:e9:ea:d8:b5:
62:fb:4f:47:36:9f:55:1c:6c:04:9b:f5:01:09:e4:2c:c8:e0:
7e:93:e5:8e:e9:e9:57:a3:c1:6a:da:d5:63:a3:28:fd:46:e9:
3a:17:ae:29:4c:53:db:8b:53:db:a4:46:b3:b6:c4:b1:66:ce:
41:24:5c:e5:b6:6f:dc:cf:58:08:14:9e:20:92:f0:22:6b:cb:
68:9f:3a:bc:79:bb:0f:2e:f3:47:94:d9:d5:23:0a:3f:9d:dd:
03:67:26:2c:d8:b5:47:c3:08:86:6b:68:fe:57:3d:92:41:9f:
02:aa:72:c4:42:d5:bd:c8:3f:c5:56:43:b2:21:59:98:d0:b3:
61:80:af:fe
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMtZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTAxMDg1NTU3WhcNMjQxMjA0MDg1NTU3WjAYMRYw
FAYDVQQDEw02NzI0OTdhMC1jNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1muZOkOGFPoxNNhgz95BEtQLGzkFw1I/ImYMUj7s9YVKbugnoAG4xtdf
mJgXawuggmLm5gCfpwwuka7byln+w+F7BtW9WwbPNTCiUjsbcZGKmL+GviYbqTc4
3PRLbPUTWKi+ccdpkPlMh/f3uR9FPVs4GMY+DVm5EKCLa7rmlZN6PvwLUn2wwgDG
d9xjxjCUNUjCtF5/trIwuZLcZs9a/wXg3V2xUD4BzTjejfeK+2+1isThY01HE1eX
xxilExXHcEvAOImLXV9JgyMKX7ZF7Az72DchpUb0wYtB4Nh09bKD3WZSnHtB83V/
Sk3jkdxGqzHFqehYF6nZSIzvuL6MxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHYc
YK6CSgsOlZgNV158mihdv6SyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xREVGRTVFQTk4MkYxMUVGOTBBN0EyQjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLca0MA0GCSqGSIb3DQEBCwUA
A4IBAQB9QYr5BTTM1XHDT1WPOCh68czZQvBt2aIh+8XugERrgZvTBAIYmPLsrKob
Qk1wesdBxbO/1+veNPhdM3XmVNEtUt3ZxJqaSaiPrYxC/EUWws9+K//fTQHVSHXJ
ysE1TacCmjSSoXNzUytc7ALg6by8Adt2kyfF2XkDlOnq2LVi+09HNp9VHGwEm/UB
CeQsyOB+k+WO6elXo8Fq2tVjoyj9Ruk6F64pTFPbi1PbpEaztsSxZs5BJFzltm/c
z1gIFJ4gkvAia8tonzq8ebsPLvNHlNnVIwo/nd0DZyYs2LVHwwiGa2j+Vz2SQZ8C
qnLEQtW9yD/FVkOyIVmY0LNhgK/+
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org