Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3361B3FC9B5B11EF9B591BBA762E951A.roa
File: 3361B3FC9B5B11EF9B591BBA762E951A.roa (raw, json)
Hash identifier: URN45+FRdzHWV5nqgX+aCwE0gziYVw1W6VaGEWww52Y=
Subject key identifier: 2F:E0:DD:E3:2E:6D:AD:FF:FD:50:DC:77:7B:49:C7:D3:3E:63:79:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3361B3FC9B5B11EF9B591BBA762E951A.roa
Signing time: Tue 05 Nov 2024 09:49:08 +0000
ROA not before: Tue 05 Nov 2024 09:49:04 +0000
ROA not after: Fri 06 Dec 2024 09:49:04 +0000
asID: 395793
IP address blocks: 45.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52809 (0xce49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 09:49:04 2024 GMT
Not After : Dec 6 09:49:04 2024 GMT
Subject: CN=6729ea14-c7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:4a:18:34:71:58:b7:10:d7:46:58:d9:1c:
4f:1f:ab:a9:81:2d:43:75:de:27:02:6b:74:a2:2e:
60:dd:a7:93:b7:2c:a0:25:61:2f:03:ac:06:bc:7a:
ac:c6:1c:1d:e8:a7:08:ed:cd:e7:a5:6b:89:ef:13:
e4:24:7f:13:ef:08:a7:92:4f:e9:3f:12:f4:23:6b:
ab:18:3c:86:c1:de:41:ea:e3:83:f7:d3:61:a4:93:
8f:20:1e:66:cb:63:d4:ec:13:c7:4f:d2:63:35:0a:
e0:8d:34:a8:18:43:2b:8f:70:c5:2c:92:55:f4:27:
54:36:ce:36:0c:30:07:59:15:b9:1b:80:09:c7:13:
73:c7:41:b7:59:d4:df:ae:95:b6:a5:49:c6:8f:44:
b6:fe:06:ee:4a:ee:4c:33:12:b8:e8:ce:24:db:64:
61:a7:07:79:c2:73:33:c2:21:99:4d:bb:a6:ca:0d:
5a:c5:3c:9f:33:70:ec:2f:93:e8:8c:b4:23:b7:59:
a1:93:1f:9d:9f:31:72:29:ff:a2:44:80:0c:75:32:
63:2d:ed:76:94:64:94:06:48:5a:17:73:b7:5c:60:
8a:4b:cf:97:89:ac:ca:0e:7c:f5:d2:dc:44:63:13:
e0:b4:c4:81:ff:3b:ef:bd:e9:db:6f:0e:c3:c9:27:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:DD:E3:2E:6D:AD:FF:FD:50:DC:77:7B:49:C7:D3:3E:63:79:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3361B3FC9B5B11EF9B591BBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:44:fc:66:a2:c6:4e:9e:65:7b:bd:3a:ce:16:9e:b9:8f:b9:
24:6f:37:a2:77:c0:f7:d2:28:55:15:9b:37:d8:1c:22:9f:64:
d6:6d:4c:b7:26:7a:14:cb:44:1f:69:e4:37:ff:e5:a2:8c:e2:
79:82:e6:79:33:ef:31:f5:67:91:5b:6e:88:d6:c8:d4:f2:70:
7c:b0:33:63:8c:66:7a:75:f6:5e:93:87:0a:d2:ce:e0:26:98:
0e:20:27:ad:78:44:6c:19:57:03:b2:25:58:62:64:d2:3f:44:
da:50:67:88:a1:cd:99:10:06:d6:14:8d:69:c4:cf:50:4c:03:
b4:3f:0f:1b:1c:cd:b4:dd:39:69:e8:e8:0d:55:e8:9d:d8:47:
fa:20:19:b9:db:b9:de:c9:4b:77:0c:65:cb:23:65:98:48:04:
a1:c1:ac:bb:76:bf:98:53:bc:36:20:c3:e2:62:ce:b8:04:90:
d9:2e:4b:b6:b5:1c:6c:6b:5e:d5:c6:e8:ce:59:51:43:f4:58:
7e:17:88:b3:9e:1a:9e:02:3d:e7:30:96:49:ee:ae:6f:86:ed:
b5:26:02:4c:8b:ae:25:b0:0d:60:2f:44:80:87:d5:dc:9e:e5:
9d:2c:04:58:bc:bb:c5:49:d1:4e:0d:83:ba:7c:04:77:20:49:
1f:95:0e:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAM5JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA1MDk0OTA0WhcNMjQxMjA2MDk0OTA0WjAYMRYw
FAYDVQQDEw02NzI5ZWExNC1jN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwJRKGDRxWLcQ10ZY2RxPH6upgS1Ddd4nAmt0oi5g3aeTtyygJWEvA6wG
vHqsxhwd6KcI7c3npWuJ7xPkJH8T7winkk/pPxL0I2urGDyGwd5B6uOD99NhpJOP
IB5my2PU7BPHT9JjNQrgjTSoGEMrj3DFLJJV9CdUNs42DDAHWRW5G4AJxxNzx0G3
WdTfrpW2pUnGj0S2/gbuSu5MMxK46M4k22Rhpwd5wnMzwiGZTbumyg1axTyfM3Ds
L5PojLQjt1mhkx+dnzFyKf+iRIAMdTJjLe12lGSUBkhaF3O3XGCKS8+XiazKDnz1
0txEYxPgtMSB/zvvvenbbw7DySfBuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC/g
3eMuba3//VDcd3tJx9M+Y3kCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzYxQjNGQzlCNUIxMUVGOUI1OTFCQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckgMA0GCSqGSIb3DQEBCwUA
A4IBAQBsRPxmosZOnmV7vTrOFp65j7kkbzeid8D30ihVFZs32Bwin2TWbUy3JnoU
y0QfaeQ3/+WijOJ5guZ5M+8x9WeRW26I1sjU8nB8sDNjjGZ6dfZek4cK0s7gJpgO
ICeteERsGVcDsiVYYmTSP0TaUGeIoc2ZEAbWFI1pxM9QTAO0Pw8bHM203Tlp6OgN
Veid2Ef6IBm527neyUt3DGXLI2WYSAShway7dr+YU7w2IMPiYs64BJDZLku2tRxs
a17VxujOWVFD9Fh+F4iznhqeAj3nMJZJ7q5vhu21JgJMi64lsA1gL0SAh9XcnuWd
LARYvLvFSdFODYO6fAR3IEkflQ6U
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org