Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3296BB8C9AAE11EFB8F0B374762E951A.roa
File: 3296BB8C9AAE11EFB8F0B374762E951A.roa (raw, json)
Hash identifier: PoVl0Wz15PKADD2NOdTEi2teg+tUO9iNqe8AOsjVHg0=
Subject key identifier: 80:AB:26:35:F2:25:D3:E4:89:17:A6:70:3C:95:3C:7B:BC:E1:45:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3296BB8C9AAE11EFB8F0B374762E951A.roa
Signing time: Mon 04 Nov 2024 13:10:43 +0000
ROA not before: Mon 04 Nov 2024 13:10:40 +0000
ROA not after: Tue 03 Dec 2024 13:10:40 +0000
asID: 141883
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52648 (0xcda8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:10:40 2024 GMT
Not After : Dec 3 13:10:40 2024 GMT
Subject: CN=6728c7d3-adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:d2:2b:c4:c8:7e:60:83:e5:18:98:09:4e:
3d:8e:41:e9:7d:d9:c1:7e:05:c3:fd:a8:51:a6:18:
5f:94:27:e3:47:ea:c5:52:91:e1:b7:b2:a8:76:0a:
b3:f3:2e:61:da:0e:c6:a5:b9:d9:82:bd:fd:d3:c0:
e4:7e:ee:74:5c:e0:7b:ea:e5:6b:98:c0:7a:b2:af:
b7:70:45:05:6e:96:34:fe:b1:01:bf:17:98:82:22:
c1:ca:71:01:4a:9a:4a:97:45:64:ca:d6:1d:33:52:
60:4f:4a:1c:a1:70:cd:61:7d:80:aa:ad:b9:07:a1:
0b:eb:73:14:fa:51:45:21:2c:c2:fc:d4:1e:80:f9:
ec:ea:eb:b5:4d:f9:48:80:d0:7d:50:d8:33:3e:28:
e7:90:c2:62:09:b1:10:e3:35:72:a7:f3:64:5c:30:
2d:34:a8:89:87:bb:4e:2e:6f:2c:69:f2:28:59:74:
11:b3:f6:7f:20:3e:ae:87:56:fd:71:ff:a0:85:eb:
0a:52:a8:14:46:7a:66:d3:6b:00:37:74:c0:e5:2e:
4b:f1:83:60:a7:d5:ff:16:25:c8:3c:e6:9e:f6:9b:
4d:6d:e6:95:d0:86:67:fd:c0:b2:39:d8:2a:77:71:
31:37:93:1e:24:0a:85:c4:85:be:72:0a:0e:2e:4f:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AB:26:35:F2:25:D3:E4:89:17:A6:70:3C:95:3C:7B:BC:E1:45:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3296BB8C9AAE11EFB8F0B374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
60:00:9b:80:d8:ef:af:08:c6:7e:c5:4b:03:5b:bd:0b:c3:03:
53:0c:55:23:40:48:9f:84:e8:1a:85:9d:30:72:9b:ae:64:0d:
4f:55:a5:a8:c7:a9:2d:db:bb:d8:f6:3b:4a:53:66:7c:12:3e:
d0:99:53:01:6c:19:dc:b3:bc:4f:79:81:28:41:14:5f:61:a6:
2e:40:57:38:dd:2f:a7:66:5d:46:a5:b4:0a:60:77:55:78:a7:
7e:35:30:3c:f7:16:f9:9d:81:58:78:60:48:25:01:9d:87:d2:
10:bc:64:67:51:89:92:a3:04:b2:3c:e5:b9:f9:4a:49:9e:98:
83:85:b0:01:ad:d1:f6:5c:2a:2f:3b:01:ab:7b:6c:12:0a:6e:
b2:90:c0:42:29:d6:00:c9:ea:99:0e:d2:06:e8:8d:df:97:1d:
34:e8:5d:e8:02:b6:47:0b:71:20:ff:f7:07:4f:fc:80:0e:e5:
45:67:2e:31:bd:d4:be:b1:be:de:39:44:59:e3:80:20:f5:94:
15:c2:e7:fa:07:87:fa:dc:ee:c1:14:fe:fc:0c:ba:9f:2e:6f:
fd:17:69:80:41:ea:19:22:e0:31:5a:d0:bd:ee:d9:d9:18:b5:
95:54:fc:ba:a9:fa:ed:08:84:b0:0c:b1:9f:8d:c6:01:11:ad:
7f:99:c3:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAM2oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA0MTMxMDQwWhcNMjQxMjAzMTMxMDQwWjAYMRYw
FAYDVQQDEw02NzI4YzdkMy1hZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxdrSK8TIfmCD5RiYCU49jkHpfdnBfgXD/ahRphhflCfjR+rFUpHht7Ko
dgqz8y5h2g7GpbnZgr3908Dkfu50XOB76uVrmMB6sq+3cEUFbpY0/rEBvxeYgiLB
ynEBSppKl0VkytYdM1JgT0ocoXDNYX2Aqq25B6EL63MU+lFFISzC/NQegPns6uu1
TflIgNB9UNgzPijnkMJiCbEQ4zVyp/NkXDAtNKiJh7tOLm8safIoWXQRs/Z/ID6u
h1b9cf+ghesKUqgURnpm02sAN3TA5S5L8YNgp9X/FiXIPOae9ptNbeaV0IZn/cCy
Odgqd3ExN5MeJAqFxIW+cgoOLk+4+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFICr
JjXyJdPkiRemcDyVPHu84UUSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjk2QkI4QzlBQUUxMUVGQjhGMEIzNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcnwMA0GCSqGSIb3DQEBCwUA
A4IBAQBgAJuA2O+vCMZ+xUsDW70LwwNTDFUjQEifhOgahZ0wcpuuZA1PVaWox6kt
27vY9jtKU2Z8Ej7QmVMBbBncs7xPeYEoQRRfYaYuQFc43S+nZl1GpbQKYHdVeKd+
NTA89xb5nYFYeGBIJQGdh9IQvGRnUYmSowSyPOW5+UpJnpiDhbABrdH2XCovOwGr
e2wSCm6ykMBCKdYAyeqZDtIG6I3flx006F3oArZHC3Eg//cHT/yADuVFZy4xvdS+
sb7eOURZ44Ag9ZQVwuf6B4f63O7BFP78DLqfLm/9F2mAQeoZIuAxWtC97tnZGLWV
VPy6qfrtCISwDLGfjcYBEa1/mcMO
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:23 2024 by rpki-client on console-fra.rpki-client.org