Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382E5F66F86811EE8D7B4471017001B1.roa
File: 382E5F66F86811EE8D7B4471017001B1.roa (raw, json)
Hash identifier: E3c+3TAnAHHb1U/NvR66tDOAU3YMEYXd80CLx/zWbGU=
Subject key identifier: 89:7C:DE:DD:03:4B:24:CB:69:DA:06:6C:4B:14:70:4C:A1:08:EF:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8239
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382E5F66F86811EE8D7B4471017001B1.roa
Signing time: Fri 12 Apr 2024 01:01:40 +0000
ROA not before: Fri 12 Apr 2024 01:01:36 +0000
ROA not after: Tue 14 May 2024 01:01:36 +0000
asID: 212042
IP address blocks: 45.195.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33337 (0x8239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 01:01:36 2024 GMT
Not After : May 14 01:01:36 2024 GMT
Subject: CN=661887f4-726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:80:d6:67:64:f8:ba:16:32:cd:f9:45:78:
a3:89:0d:b2:30:5e:8a:19:75:69:2e:f4:33:90:67:
06:5d:fd:e2:3a:54:38:0c:c1:a0:20:f9:d5:87:11:
bb:a3:8a:80:09:ea:b8:44:63:9d:9d:38:e0:03:f6:
f2:91:4a:b4:24:42:22:70:54:ac:f1:96:4c:77:31:
ff:ae:0c:81:4c:b9:f4:fd:62:de:82:e4:97:9b:d1:
8a:74:a1:3f:e2:52:73:ad:78:df:2e:f8:f4:b1:01:
55:97:d7:19:7d:ce:9f:8a:cb:7a:57:69:3f:3e:cc:
ee:e5:37:4d:7c:10:71:d7:32:67:dd:bd:25:52:f0:
28:25:7d:41:85:e6:58:31:10:ed:f8:2a:df:b1:dc:
51:a4:36:b8:84:56:34:66:34:6e:17:e5:fa:8f:ae:
42:95:56:22:7d:5e:b0:5f:91:ed:1f:ab:0d:1e:ef:
b5:a6:75:5b:4a:95:d9:6a:23:33:a0:aa:2d:a3:83:
6b:52:d6:04:74:84:2f:99:f5:26:cc:ad:6c:64:db:
c6:dd:92:6f:ea:b9:96:10:36:ac:97:9e:fa:94:5e:
9c:89:d6:45:cf:99:89:51:8d:c1:20:ca:52:87:66:
ac:a5:3b:c3:01:d1:9d:c1:f2:32:d3:bd:b6:36:b5:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:DE:DD:03:4B:24:CB:69:DA:06:6C:4B:14:70:4C:A1:08:EF:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/382E5F66F86811EE8D7B4471017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.210.0/24
Signature Algorithm: sha256WithRSAEncryption
67:58:15:e4:b1:0c:68:2f:cf:25:ed:74:0f:07:62:a0:50:8a:
21:1e:77:67:63:91:ed:0e:26:8e:3e:60:b7:e4:1c:ee:68:01:
52:4f:22:07:a0:3e:4f:c7:7d:81:27:bb:97:1f:69:31:a9:8f:
f0:f8:39:18:f0:be:bd:9f:d3:ac:da:27:d9:de:d7:8f:29:17:
7a:7f:4e:8b:3a:09:5a:1d:6e:4c:c0:9e:70:28:7e:5b:ba:36:
5f:40:09:5b:e4:ff:e6:fb:8b:6f:58:bd:cb:cf:db:f9:4c:31:
30:63:5d:b6:5e:58:0a:db:e5:07:49:6d:6a:b5:3a:38:81:ef:
c5:e3:72:4c:ed:ca:c3:69:72:f1:90:3b:45:28:08:cf:80:0b:
a7:7a:09:fa:82:ff:83:43:63:64:db:f4:13:f3:c8:84:07:de:
47:79:22:b8:c7:e2:e5:27:1d:8a:80:b6:91:81:fb:c6:ed:92:
c5:3f:ed:ec:99:ba:ca:cc:d3:73:ef:11:87:93:bd:60:67:c6:
fa:ac:4a:f6:7e:5a:e6:ee:9b:4b:8c:e8:b3:af:60:f3:0f:f3:
e6:69:05:82:17:fc:46:63:e5:c6:72:12:5b:94:2a:ca:86:ed:
ad:bc:d7:87:35:fe:31:54:56:6a:f8:a7:70:2e:aa:41:cd:c6:
d1:2e:e8:9d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAII5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEyMDEwMTM2WhcNMjQwNTE0MDEwMTM2WjAYMRYw
FAYDVQQDEw02NjE4ODdmNC03MjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAylWA1mdk+LoWMs35RXijiQ2yMF6KGXVpLvQzkGcGXf3iOlQ4DMGgIPnV
hxG7o4qACeq4RGOdnTjgA/bykUq0JEIicFSs8ZZMdzH/rgyBTLn0/WLeguSXm9GK
dKE/4lJzrXjfLvj0sQFVl9cZfc6fist6V2k/Pszu5TdNfBBx1zJn3b0lUvAoJX1B
heZYMRDt+CrfsdxRpDa4hFY0ZjRuF+X6j65ClVYifV6wX5HtH6sNHu+1pnVbSpXZ
aiMzoKoto4NrUtYEdIQvmfUmzK1sZNvG3ZJv6rmWEDasl576lF6cidZFz5mJUY3B
IMpSh2aspTvDAdGdwfIy0722NrXl6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIl8
3t0DSyTLadoGbEsUcEyhCO/5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zODJFNUY2NkY4NjgxMUVFOEQ3QjQ0NzEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPSMA0GCSqGSIb3DQEBCwUA
A4IBAQBnWBXksQxoL88l7XQPB2KgUIohHndnY5HtDiaOPmC35BzuaAFSTyIHoD5P
x32BJ7uXH2kxqY/w+DkY8L69n9Os2ifZ3tePKRd6f06LOglaHW5MwJ5wKH5bujZf
QAlb5P/m+4tvWL3Lz9v5TDEwY122XlgK2+UHSW1qtTo4ge/F43JM7crDaXLxkDtF
KAjPgAunegn6gv+DQ2Nk2/QT88iEB95HeSK4x+LlJx2KgLaRgfvG7ZLFP+3smbrK
zNNz7xGHk71gZ8b6rEr2flrm7ptLjOizr2DzD/PmaQWCF/xGY+XGchJblCrKhu2t
vNeHNf4xVFZq+KdwLqpBzcbRLuid
-----END CERTIFICATE-----
Generated at Tue May 7 02:00:47 2024 by rpki-client on console-ams.rpki-client.org