Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7BC0E08D3011EFA9F75F6B762E951A.roa
File: 3E7BC0E08D3011EFA9F75F6B762E951A.roa (raw, json)
Hash identifier: p6kDbVwZCXbN1rgLAzTLnCTOZiBJN8VKH4fqd0tZ8ek=
Subject key identifier: 8C:1F:C8:14:FE:AA:E8:5B:01:92:66:19:41:BF:75:45:DB:55:9E:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7BC0E08D3011EFA9F75F6B762E951A.roa
Signing time: Fri 18 Oct 2024 09:06:22 +0000
ROA not before: Fri 18 Oct 2024 09:06:18 +0000
ROA not after: Sat 23 Nov 2024 09:06:18 +0000
asID: 202656
IP address blocks: 45.192.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50834 (0xc692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 09:06:18 2024 GMT
Not After : Nov 23 09:06:18 2024 GMT
Subject: CN=6712250e-a28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:3e:41:3f:d4:1b:f5:50:20:c7:be:3e:7e:
4f:57:a4:34:a6:ae:45:0b:51:4c:b1:f0:6f:c6:78:
40:e6:74:81:95:a6:ac:4f:05:fd:82:20:51:8b:97:
70:ed:ff:05:f8:4e:aa:4f:b6:27:6b:3b:65:d5:a6:
10:31:90:a8:71:4e:41:60:ec:4e:4c:50:b8:a7:dc:
4d:81:05:ed:36:01:1e:57:6e:b0:c1:ac:87:b2:78:
ef:f7:64:5e:7d:6d:79:68:66:58:a0:22:75:cc:09:
16:28:f5:fa:98:77:64:da:94:72:02:3d:ae:c3:c9:
d1:14:17:80:cf:28:b3:f9:29:fb:f8:f9:93:1f:00:
13:3f:dd:5c:d5:78:da:5e:2c:1c:62:4a:0a:1c:78:
81:cb:60:73:60:da:ac:6f:0d:04:95:ac:05:b9:cc:
d9:d9:4a:26:a8:60:eb:c2:f7:61:08:9d:37:ad:8b:
71:a5:2e:25:39:ec:8b:9b:97:fb:ff:94:b4:25:47:
60:de:bc:57:7c:42:6f:a9:c4:cf:23:d9:77:90:ee:
ec:7b:ef:d6:7f:2a:55:5a:ec:e5:7b:0d:66:86:8c:
5e:31:ba:96:91:2e:c0:85:09:82:5e:c6:4c:db:79:
ff:88:12:43:d6:03:77:da:3f:3e:95:9e:ff:53:c3:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1F:C8:14:FE:AA:E8:5B:01:92:66:19:41:BF:75:45:DB:55:9E:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7BC0E08D3011EFA9F75F6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:e6:25:ca:98:89:2c:01:99:4f:0f:ff:33:0f:11:cd:4f:2a:
68:ae:ec:43:d8:5d:20:fc:be:01:43:20:df:7f:a5:35:7d:10:
2b:66:e4:6d:41:27:69:23:23:7a:f5:45:ca:3b:8e:06:9f:44:
b7:8d:89:8e:86:cc:2b:53:66:16:7f:6d:79:c5:6b:af:37:1c:
a1:f9:d2:96:a6:b1:93:64:f4:47:cc:ea:72:97:74:3a:f2:58:
ea:b9:c5:fa:c5:72:79:01:9d:7a:4e:83:16:2b:da:db:93:bb:
72:72:8a:48:14:8a:e5:bb:33:18:a1:6d:97:8e:ce:b6:e6:dc:
a3:23:10:63:1b:b4:eb:36:a3:10:89:e2:32:37:3a:85:53:63:
88:aa:9d:be:34:18:6c:19:08:d4:6f:6d:a2:c6:f6:0c:fe:32:
16:7c:4d:f3:1f:8e:fa:d9:59:5d:af:61:19:66:e2:3b:f8:3b:
48:21:fd:57:df:cb:25:24:35:cc:25:ac:a4:08:50:f3:ab:c9:
ce:ea:fd:7a:a5:4e:3f:04:56:a7:fd:dc:a0:a4:be:94:59:c6:
e3:d5:d3:bb:e3:67:05:49:f2:ca:71:e8:4e:ff:ee:3c:09:fe:
c5:36:2a:49:06:0a:a7:d7:7b:91:27:0f:5f:da:6f:34:9e:1e:
73:e3:04:c5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMaSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDE4MDkwNjE4WhcNMjQxMTIzMDkwNjE4WjAYMRYw
FAYDVQQDEw02NzEyMjUwZS1hMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArVQ+QT/UG/VQIMe+Pn5PV6Q0pq5FC1FMsfBvxnhA5nSBlaasTwX9giBR
i5dw7f8F+E6qT7Ynaztl1aYQMZCocU5BYOxOTFC4p9xNgQXtNgEeV26wwayHsnjv
92RefW15aGZYoCJ1zAkWKPX6mHdk2pRyAj2uw8nRFBeAzyiz+Sn7+PmTHwATP91c
1XjaXiwcYkoKHHiBy2BzYNqsbw0ElawFuczZ2UomqGDrwvdhCJ03rYtxpS4lOeyL
m5f7/5S0JUdg3rxXfEJvqcTPI9l3kO7se+/WfypVWuzlew1mhoxeMbqWkS7AhQmC
XsZM23n/iBJD1gN32j8+lZ7/U8Ol3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIwf
yBT+quhbAZJmGUG/dUXbVZ6IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRTdCQzBFMDhEMzAxMUVGQTlGNzVGNkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcA8MA0GCSqGSIb3DQEBCwUA
A4IBAQCd5iXKmIksAZlPD/8zDxHNTyporuxD2F0g/L4BQyDff6U1fRArZuRtQSdp
IyN69UXKO44Gn0S3jYmOhswrU2YWf215xWuvNxyh+dKWprGTZPRHzOpyl3Q68ljq
ucX6xXJ5AZ16ToMWK9rbk7tycopIFIrluzMYoW2Xjs625tyjIxBjG7TrNqMQieIy
NzqFU2OIqp2+NBhsGQjUb22ixvYM/jIWfE3zH4762Vldr2EZZuI7+DtIIf1X38sl
JDXMJaykCFDzq8nO6v16pU4/BFan/dygpL6UWcbj1dO742cFSfLKcehO/+48Cf7F
NipJBgqn13uRJw9f2m80nh5z4wTF
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org