Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B71A69210D911EE90843F1F4AD9E6FC.roa
File: 2B71A69210D911EE90843F1F4AD9E6FC.roa (raw, json)
Hash identifier: dYwRsqizFgEArtN+soJwyYb5SgqMtg1Qb22tE3IANNc=
Subject key identifier: 2D:85:5C:6F:C1:7C:77:F1:6B:D0:14:E4:B6:3F:6B:06:97:E7:70:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2CDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B71A69210D911EE90843F1F4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:45:42 +0000
ROA not before: Thu 22 Jun 2023 08:45:38 +0000
ROA not after: Tue 30 Apr 2024 08:45:38 +0000
asID: 4809
IP address blocks: 45.195.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 08:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11486 (0x2cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 08:45:38 2023 GMT
Not After : Apr 30 08:45:38 2024 GMT
Subject: CN=64940a36-6bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:ec:01:c7:9a:69:de:01:cb:cc:2e:61:3d:
10:ba:bc:54:8a:c9:49:ba:3a:32:40:00:4d:1c:16:
ff:39:98:41:43:81:fb:d4:3b:4c:a4:80:22:47:57:
0f:05:20:ef:99:a4:75:72:68:2b:d6:13:70:75:36:
67:2f:77:61:0e:1e:16:21:a4:38:fc:bf:e2:6f:93:
32:5c:79:61:12:cd:0c:b1:0e:2b:69:ba:a7:01:3d:
46:74:e7:74:3b:81:30:88:26:34:33:11:0a:ce:3f:
54:d9:63:87:d4:d4:7a:fa:a0:c2:2f:00:36:ea:84:
64:0b:da:09:65:09:96:4d:03:ba:75:a6:8f:df:69:
25:ec:f1:29:36:48:d6:03:d2:05:be:c9:41:8d:f7:
27:3d:41:73:34:87:9c:03:1d:13:16:b0:86:95:fd:
f2:26:db:80:0f:fd:8a:ea:a1:a1:62:62:86:56:f5:
a6:12:aa:06:6c:b0:fa:93:30:23:f0:8e:ac:03:2a:
16:22:57:c9:7f:24:e6:87:8d:ed:1d:00:7a:3e:14:
c7:f3:76:93:82:e5:05:78:d1:88:89:74:65:fe:de:
11:ad:d1:d8:7c:94:ef:55:bf:4a:89:3e:cf:92:2e:
ec:ea:98:74:8b:ef:2a:c4:ab:59:a7:cc:f1:67:67:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:85:5C:6F:C1:7C:77:F1:6B:D0:14:E4:B6:3F:6B:06:97:E7:70:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B71A69210D911EE90843F1F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e0:79:7d:aa:b6:cb:d1:2d:3f:2e:98:36:e1:26:ac:dd:a6:
63:73:2b:0c:1c:81:b6:34:0b:85:50:4b:a3:f0:b1:50:b2:19:
0c:b7:a0:c1:78:d3:a4:6f:89:ad:1b:9a:5e:b6:46:3d:af:9b:
0b:f8:c1:9d:36:63:1c:4b:fa:eb:1a:36:50:ed:64:4c:a1:8f:
f0:43:5c:ab:4c:78:1c:9d:3a:f9:69:41:67:fd:bf:ab:49:b0:
7c:d5:cf:8c:5d:56:ab:27:e8:a5:28:3b:61:97:fa:8d:ab:51:
c3:ab:56:13:21:44:b5:23:10:e7:f5:a5:e2:8f:87:f0:0f:b5:
77:0b:0b:d3:26:76:03:65:d9:67:17:9a:e9:f0:3b:c3:3c:fa:
20:2f:6b:d2:db:7c:1d:1a:eb:01:cb:11:ce:db:c8:c4:31:4b:
52:bf:84:67:70:6e:6d:fe:22:47:f9:c6:bc:d5:ba:21:f7:15:
be:c7:9f:7f:41:5f:12:56:88:1f:ae:6f:c1:5c:24:60:8d:68:
d3:cf:ea:f4:a9:4b:93:38:48:bd:e3:59:88:dd:6d:49:ad:ba:
66:c5:26:03:f6:84:f4:4d:2b:8c:dd:98:15:40:42:43:54:ac:
32:b5:c5:c1:9a:e7:73:31:fa:c3:fa:ed:47:2b:9f:65:4a:a3:
bd:eb:d0:7d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLN4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MjIwODQ1MzhaFw0yNDA0MzAwODQ1MzhaMBgxFjAU
BgNVBAMTDTY0OTQwYTM2LTZiZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu9uwBx5pp3gHLzC5hPRC6vFSKyUm6OjJAAE0cFv85mEFDgfvUO0ykgCJH
Vw8FIO+ZpHVyaCvWE3B1Nmcvd2EOHhYhpDj8v+JvkzJceWESzQyxDitpuqcBPUZ0
53Q7gTCIJjQzEQrOP1TZY4fU1Hr6oMIvADbqhGQL2gllCZZNA7p1po/faSXs8Sk2
SNYD0gW+yUGN9yc9QXM0h5wDHRMWsIaV/fIm24AP/YrqoaFiYoZW9aYSqgZssPqT
MCPwjqwDKhYiV8l/JOaHje0dAHo+FMfzdpOC5QV40YiJdGX+3hGt0dh8lO9Vv0qJ
Ps+SLuzqmHSL7yrEq1mnzPFnZ39PAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQULYVc
b8F8d/Fr0BTktj9rBpfncHEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzJCNzFBNjkyMTBEOTExRUU5MDg0M0YxRjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwwQwDQYJKoZIhvcNAQELBQAD
ggEBALHgeX2qtsvRLT8umDbhJqzdpmNzKwwcgbY0C4VQS6PwsVCyGQy3oMF406Rv
ia0bml62Rj2vmwv4wZ02YxxL+usaNlDtZEyhj/BDXKtMeBydOvlpQWf9v6tJsHzV
z4xdVqsn6KUoO2GX+o2rUcOrVhMhRLUjEOf1peKPh/APtXcLC9MmdgNl2WcXmunw
O8M8+iAva9LbfB0a6wHLEc7byMQxS1K/hGdwbm3+Ikf5xrzVuiH3Fb7Hn39BXxJW
iB+ub8FcJGCNaNPP6vSpS5M4SL3jWYjdbUmtumbFJgP2hPRNK4zdmBVAQkNUrDK1
xcGa53Mx+sP67Ucrn2VKo73r0H0=
-----END CERTIFICATE-----
Generated at Mon Apr 29 12:50:19 2024 by rpki-client on console-ams.rpki-client.org