Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20328608A74A11EFA06BAC79762E951A.roa
File: 20328608A74A11EFA06BAC79762E951A.roa (raw, json)
Hash identifier: Q1ok1EmFTNhQEcO/7zi+u89/mqCXW5vEdhAiYpD2Lb8=
Subject key identifier: 5B:A3:2A:19:3C:98:9D:DE:43:5A:40:26:D0:3C:D9:4E:58:E3:F9:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20328608A74A11EFA06BAC79762E951A.roa
Signing time: Wed 20 Nov 2024 14:17:08 +0000
ROA not before: Wed 20 Nov 2024 14:17:04 +0000
ROA not after: Sat 30 Nov 2024 14:17:04 +0000
asID: 202656
IP address blocks: 45.199.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54944 (0xd6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:17:04 2024 GMT
Not After : Nov 30 14:17:04 2024 GMT
Subject: CN=673def64-4d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:21:be:b1:9f:c5:79:6b:5e:e2:6d:14:c5:
89:e3:04:f5:8b:03:cd:e0:56:41:8f:7f:60:83:d4:
4c:3f:28:82:f9:fd:5d:e9:f4:6b:f3:35:3d:29:b0:
f5:b0:0d:6e:05:e0:4b:51:76:47:0c:aa:a7:54:9c:
ba:eb:12:3b:57:ac:80:b1:22:e1:a7:50:0a:67:43:
28:48:f4:f1:27:c2:b6:28:1b:f8:0d:b5:ff:a3:72:
ce:cb:0f:06:00:74:93:15:cc:c8:aa:e3:3b:05:01:
55:fe:a9:a3:59:c6:20:4c:5f:0a:e7:ad:04:90:d4:
ba:87:d2:94:4e:3a:b2:3a:6d:24:fd:27:f8:44:d4:
4c:e8:90:c4:b5:92:b0:a8:b9:10:a1:d6:e9:b5:b3:
d6:25:a8:e8:13:02:1a:4c:af:5c:dd:e2:08:87:22:
07:73:4e:62:f6:70:05:75:32:80:76:99:3c:46:58:
1a:42:4c:1f:42:1f:e7:aa:7b:a4:46:93:d5:88:b3:
24:50:7d:40:56:35:c9:4f:68:7f:71:b3:36:95:90:
78:b7:9a:17:80:fe:1e:c6:2e:9c:4d:d8:1d:32:4c:
d3:7d:8b:08:f3:ba:d8:b4:ac:fd:fb:9d:4a:b7:08:
8b:8d:e3:9b:2e:9f:aa:1d:a3:9a:79:b2:a4:c4:bb:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:2A:19:3C:98:9D:DE:43:5A:40:26:D0:3C:D9:4E:58:E3:F9:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20328608A74A11EFA06BAC79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.194.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e1:3b:35:5e:a7:a2:2a:3a:9d:84:82:ad:d2:8e:d7:ed:44:
47:fa:43:2e:c3:37:5a:b9:20:d4:e2:38:53:2e:05:50:ce:f6:
0f:59:59:f7:28:26:d5:9e:e7:8a:d4:5e:53:f0:bb:21:4a:c8:
ca:07:7b:6c:0c:76:c2:98:f5:b0:0f:53:70:67:4a:01:2c:84:
f6:12:75:20:37:a7:ba:64:bd:f6:c7:15:93:b4:cf:83:22:4e:
4f:65:d1:6b:6f:1f:80:cc:af:8f:da:ca:b9:de:f3:5b:98:b0:
36:f2:26:7c:e4:a0:6f:69:dd:55:ac:68:b0:67:cd:e9:9d:2f:
34:aa:c3:75:1c:d7:f5:52:4e:fe:8c:2b:99:0b:59:52:e4:b2:
fc:8d:26:82:e1:46:f4:0c:36:d0:89:c3:e8:0b:3c:12:0f:46:
7b:ef:f9:54:7d:4f:ba:c4:33:24:c8:ad:5b:19:84:1a:1a:d4:
c3:a7:69:e1:ee:16:92:fa:ae:14:44:32:81:2c:d2:40:31:db:
9d:d5:5e:95:70:6b:53:27:17:6b:f4:01:ed:48:30:e2:d4:8b:
0f:58:d2:03:b7:91:92:12:13:99:cd:bc:56:af:1a:d4:41:ad:
30:06:4c:ee:96:2e:fe:3c:71:67:4a:c2:1c:e7:26:82:a0:53:
f7:6d:f8:d6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANagMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMTQxNzA0WhcNMjQxMTMwMTQxNzA0WjAYMRYw
FAYDVQQDEw02NzNkZWY2NC00ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzNEhvrGfxXlrXuJtFMWJ4wT1iwPN4FZBj39gg9RMPyiC+f1d6fRr8zU9
KbD1sA1uBeBLUXZHDKqnVJy66xI7V6yAsSLhp1AKZ0MoSPTxJ8K2KBv4DbX/o3LO
yw8GAHSTFczIquM7BQFV/qmjWcYgTF8K560EkNS6h9KUTjqyOm0k/Sf4RNRM6JDE
tZKwqLkQodbptbPWJajoEwIaTK9c3eIIhyIHc05i9nAFdTKAdpk8RlgaQkwfQh/n
qnukRpPViLMkUH1AVjXJT2h/cbM2lZB4t5oXgP4exi6cTdgdMkzTfYsI87rYtKz9
+51KtwiLjeObLp+qHaOaebKkxLvC1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFuj
Khk8mJ3eQ1pAJtA82U5Y4/mZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMDMyODYwOEE3NEExMUVGQTA2QkFDNzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcfCMA0GCSqGSIb3DQEBCwUA
A4IBAQBm4Ts1XqeiKjqdhIKt0o7X7URH+kMuwzdauSDU4jhTLgVQzvYPWVn3KCbV
nueK1F5T8LshSsjKB3tsDHbCmPWwD1NwZ0oBLIT2EnUgN6e6ZL32xxWTtM+DIk5P
ZdFrbx+AzK+P2sq53vNbmLA28iZ85KBvad1VrGiwZ83pnS80qsN1HNf1Uk7+jCuZ
C1lS5LL8jSaC4Ub0DDbQicPoCzwSD0Z77/lUfU+6xDMkyK1bGYQaGtTDp2nh7haS
+q4URDKBLNJAMdud1V6VcGtTJxdr9AHtSDDi1IsPWNIDt5GSEhOZzbxWrxrUQa0w
Bkzuli7+PHFnSsIc5yaCoFP3bfjW
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org