Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F7E6120DC911EF9907A53E017001B1.roa
File: 33F7E6120DC911EF9907A53E017001B1.roa (raw, json)
Hash identifier: 9kVGACD6wx3GMtXnZwbN3kCr/1yaoDPDYRKes75cd6g=
Subject key identifier: DC:EB:09:34:E5:67:44:38:68:BB:B0:F1:6C:1E:9C:A0:AE:13:7A:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 88EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F7E6120DC911EF9907A53E017001B1.roa
Signing time: Thu 09 May 2024 05:58:48 +0000
ROA not before: Thu 09 May 2024 05:58:45 +0000
ROA not after: Tue 13 May 2025 05:58:45 +0000
asID: 55720
IP address blocks: 45.204.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35055 (0x88ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 05:58:45 2024 GMT
Not After : May 13 05:58:45 2025 GMT
Subject: CN=663c6618-d776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:c6:24:b8:ed:16:28:23:a5:6f:4e:4d:42:
9e:99:72:37:dc:28:bf:d4:99:78:a7:c3:05:7d:43:
db:0c:ce:e3:0f:1c:c0:1a:6a:eb:b0:5a:3c:e8:d4:
a0:96:d8:28:df:c0:5b:80:4a:a6:a4:4c:f6:82:e0:
69:6e:15:38:86:45:aa:8e:6a:1c:df:4e:1e:60:aa:
2e:f7:6a:c1:c5:dd:15:08:d3:de:c6:60:ef:5a:ad:
22:74:cd:f2:00:aa:da:94:cb:9b:0e:5f:4e:34:8a:
43:64:3a:c4:15:db:cb:c6:a5:39:59:08:e7:44:bc:
92:4d:68:ba:f2:7c:15:61:81:71:17:12:f9:d0:3a:
e6:ff:be:4b:74:63:ea:05:22:7a:25:6c:2f:21:f2:
18:4d:02:70:af:45:16:f9:d9:3e:e3:18:10:42:06:
e8:d5:3a:23:f8:c5:1f:3e:54:c1:02:76:6d:f0:d9:
6c:d5:46:72:72:fa:7e:e6:15:70:f0:ec:9c:24:9e:
27:d6:24:c7:3e:65:fb:38:1c:cd:4a:40:d1:f6:64:
78:31:1e:8c:6a:b0:5f:41:49:58:00:be:02:25:9f:
a0:3f:25:6f:2f:46:a1:a0:c9:c3:7d:82:dc:51:8c:
41:f8:91:33:8c:c2:ee:69:ed:7c:70:9c:ce:97:47:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:09:34:E5:67:44:38:68:BB:B0:F1:6C:1E:9C:A0:AE:13:7A:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F7E6120DC911EF9907A53E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.16.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5b:98:06:1d:8a:90:f6:12:55:42:b4:af:c8:59:18:c3:ed:
cb:da:c5:c4:0e:7e:fc:fc:b9:06:da:b4:f9:26:6d:e3:1c:ae:
08:2c:e0:f6:05:86:fd:fa:a4:c0:c0:7d:58:8f:09:5c:14:c3:
46:0d:27:4a:25:90:92:e1:9a:15:86:3f:93:17:9d:ca:ab:46:
ce:03:d3:81:90:12:24:45:31:a6:e7:1f:4a:20:bf:be:d0:f9:
52:02:7a:2d:32:45:24:9c:f2:90:d1:5b:94:eb:9c:ff:78:7c:
e1:b1:95:b1:d9:f8:ce:36:38:32:e8:17:a1:35:5c:c8:b1:68:
68:da:82:f2:03:f9:d2:53:2a:7f:42:6d:f8:34:a6:ea:5a:14:
8b:4d:cf:f7:cb:4f:32:cf:6c:cb:4d:64:0b:42:f8:52:a5:03:
25:e2:e7:eb:26:6d:f7:af:fb:2d:42:fc:e5:44:fe:4e:5d:a8:
9e:48:8c:59:8f:d9:42:5b:bc:99:e3:2f:63:dd:b4:cd:cf:5e:
61:9e:70:d2:94:42:71:04:b5:c5:ac:4e:2b:98:aa:b5:a2:c8:
8c:b9:17:12:65:37:0d:35:2c:61:b2:00:63:de:52:c8:5e:b6:
51:85:65:fe:bb:9e:a5:26:4f:9a:90:9c:b9:79:b6:ba:7e:6d:
45:a4:5c:8d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIjvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTA5MDU1ODQ1WhcNMjUwNTEzMDU1ODQ1WjAYMRYw
FAYDVQQDEw02NjNjNjYxOC1kNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvRbGJLjtFigjpW9OTUKemXI33Ci/1Jl4p8MFfUPbDM7jDxzAGmrrsFo8
6NSgltgo38BbgEqmpEz2guBpbhU4hkWqjmoc304eYKou92rBxd0VCNPexmDvWq0i
dM3yAKralMubDl9ONIpDZDrEFdvLxqU5WQjnRLySTWi68nwVYYFxFxL50Drm/75L
dGPqBSJ6JWwvIfIYTQJwr0UW+dk+4xgQQgbo1Toj+MUfPlTBAnZt8Nls1UZycvp+
5hVw8OycJJ4n1iTHPmX7OBzNSkDR9mR4MR6MarBfQUlYAL4CJZ+gPyVvL0ahoMnD
fYLcUYxB+JEzjMLuae18cJzOl0cRaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNzr
CTTlZ0Q4aLuw8WwenKCuE3rjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zM0Y3RTYxMjBEQzkxMUVGOTkwN0E1M0UwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcwQMA0GCSqGSIb3DQEBCwUA
A4IBAQAnW5gGHYqQ9hJVQrSvyFkYw+3L2sXEDn78/LkG2rT5Jm3jHK4ILOD2BYb9
+qTAwH1YjwlcFMNGDSdKJZCS4ZoVhj+TF53Kq0bOA9OBkBIkRTGm5x9KIL++0PlS
AnotMkUknPKQ0VuU65z/eHzhsZWx2fjONjgy6BehNVzIsWho2oLyA/nSUyp/Qm34
NKbqWhSLTc/3y08yz2zLTWQLQvhSpQMl4ufrJm33r/stQvzlRP5OXaieSIxZj9lC
W7yZ4y9j3bTNz15hnnDSlEJxBLXFrE4rmKq1osiMuRcSZTcNNSxhsgBj3lLIXrZR
hWX+u56lJk+akJy5eba6fm1FpFyN
-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:29 2024 by rpki-client on console-fra.rpki-client.org