Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD7E08CA4C611EFA4E607B2762E951A.roa
File: 2CD7E08CA4C611EFA4E607B2762E951A.roa (raw, json)
Hash identifier: IvgELRr3ZORgsbzy+3f+25+sP6JRu0dydh8fkX7xf/c=
Subject key identifier: 3A:B2:E1:A5:30:BA:E1:A6:74:A7:CA:E5:B5:0B:A6:05:84:06:BF:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D485
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD7E08CA4C611EFA4E607B2762E951A.roa
Signing time: Sun 17 Nov 2024 09:27:34 +0000
ROA not before: Sun 17 Nov 2024 09:27:30 +0000
ROA not after: Mon 25 Nov 2024 09:27:30 +0000
asID: 22773
IP address blocks: 45.196.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54405 (0xd485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:27:30 2024 GMT
Not After : Nov 25 09:27:30 2024 GMT
Subject: CN=6739b705-40a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:69:0c:0b:7f:7c:34:02:ce:e7:76:c4:61:
76:5c:cb:32:7d:6f:a9:35:43:f9:39:af:bd:f1:10:
f8:3d:ca:1c:02:f5:ed:d5:b1:79:82:72:1e:c0:3f:
44:d1:04:af:4f:f4:e2:82:e0:25:64:e3:6d:f1:02:
2a:d6:ed:0b:78:fb:ad:d5:f0:d3:2f:3e:3a:4c:01:
f1:f6:2d:af:70:d3:b6:43:04:75:7a:34:dc:35:4e:
e4:34:92:63:ed:f8:e2:7b:88:e9:79:fe:fb:95:49:
4e:c1:e1:74:83:22:fc:18:40:0f:bd:b3:03:a3:8c:
13:d8:0b:2f:03:18:ed:14:b0:91:d4:12:00:d9:5e:
a1:f9:ca:ed:b2:8e:24:25:b8:64:a6:65:d8:fe:38:
09:65:fe:3c:1f:7f:8b:f4:90:36:6c:41:d5:ba:cf:
c2:b5:4e:c1:28:b3:ae:90:6d:7f:47:d7:fb:e5:f6:
0f:c3:e5:48:dc:e7:52:b6:a7:15:c3:a7:ec:0b:87:
f4:15:be:ca:db:88:0d:bd:e0:e6:72:48:a2:90:16:
f7:ce:2a:2d:c4:c2:ac:64:5e:70:33:4e:af:9e:38:
08:11:f8:7e:bd:fd:b4:41:9a:ea:04:7b:4d:62:65:
62:bc:e0:54:e6:36:ec:8e:cc:2b:b0:24:9e:15:7e:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B2:E1:A5:30:BA:E1:A6:74:A7:CA:E5:B5:0B:A6:05:84:06:BF:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD7E08CA4C611EFA4E607B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:b9:68:91:64:15:f1:b2:a0:35:ed:05:44:4a:f8:13:42:06:
75:28:95:1e:08:38:f5:8e:4c:f1:18:c2:33:7f:8a:70:3b:5e:
9a:8d:18:e4:08:a9:2d:b1:f4:d2:a4:87:0b:03:7b:87:2e:62:
6a:96:71:ca:ce:d4:c5:1a:a4:f9:4a:2a:38:b2:bc:af:89:72:
85:c6:45:ac:6b:06:9e:3a:b9:78:ce:36:44:5e:4f:af:bd:7b:
d8:26:ca:3c:a2:45:98:43:92:d3:d9:b8:5d:7a:2f:6a:14:7f:
21:95:ab:4b:3f:42:1b:f3:4b:5f:64:a4:81:c2:15:29:32:3e:
91:2e:f1:83:5b:4e:67:96:d0:84:92:ba:4d:dc:6c:55:aa:12:
5d:0b:22:0f:38:4d:91:74:af:f3:f8:1d:39:d2:6d:da:2f:f9:
cb:0d:7b:c2:3f:ed:ed:54:4f:db:71:b9:11:55:67:f0:f7:25:
c0:f2:37:5f:2b:42:d6:53:62:b6:3a:5a:17:dd:01:7b:b2:dd:
f0:71:52:19:58:70:1a:9a:4f:b6:3a:10:44:62:c4:60:98:f6:
c1:14:34:14:a2:74:44:be:7c:4e:1f:12:76:65:14:d0:20:dd:
05:82:38:01:d6:d7:c1:2c:5e:ce:3d:7c:5e:5e:cf:71:b5:6f:
15:b4:46:d1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANSFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE3MDkyNzMwWhcNMjQxMTI1MDkyNzMwWjAYMRYw
FAYDVQQDEw02NzM5YjcwNS00MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv/lpDAt/fDQCzud2xGF2XMsyfW+pNUP5Oa+98RD4PcocAvXt1bF5gnIe
wD9E0QSvT/TiguAlZONt8QIq1u0LePut1fDTLz46TAHx9i2vcNO2QwR1ejTcNU7k
NJJj7fjie4jpef77lUlOweF0gyL8GEAPvbMDo4wT2AsvAxjtFLCR1BIA2V6h+crt
so4kJbhkpmXY/jgJZf48H3+L9JA2bEHVus/CtU7BKLOukG1/R9f75fYPw+VI3OdS
tqcVw6fsC4f0Fb7K24gNveDmckiikBb3ziotxMKsZF5wM06vnjgIEfh+vf20QZrq
BHtNYmVivOBU5jbsjswrsCSeFX4smQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDqy
4aUwuuGmdKfK5bULpgWEBr/tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQ0Q3RTA4Q0E0QzYxMUVGQTRFNjA3QjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQ0MA0GCSqGSIb3DQEBCwUA
A4IBAQChuWiRZBXxsqA17QVESvgTQgZ1KJUeCDj1jkzxGMIzf4pwO16ajRjkCKkt
sfTSpIcLA3uHLmJqlnHKztTFGqT5Sio4sryviXKFxkWsawaeOrl4zjZEXk+vvXvY
Jso8okWYQ5LT2bhdei9qFH8hlatLP0Ib80tfZKSBwhUpMj6RLvGDW05nltCEkrpN
3GxVqhJdCyIPOE2RdK/z+B050m3aL/nLDXvCP+3tVE/bcbkRVWfw9yXA8jdfK0LW
U2K2OloX3QF7st3wcVIZWHAamk+2OhBEYsRgmPbBFDQUonREvnxOHxJ2ZRTQIN0F
gjgB1tfBLF7OPXxeXs9xtW8VtEbR
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org