Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490DB342A2EE11EE9EF11877D25BE465.roa
File: 490DB342A2EE11EE9EF11877D25BE465.roa (raw, json)
Hash identifier: gvSQluPvE51AX5A0WudFo6ge3ozUHYU94CHPNR6PvQU=
Subject key identifier: B1:EF:27:56:13:48:19:66:EB:FC:85:D0:2B:41:0C:8A:5C:57:15:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5922
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490DB342A2EE11EE9EF11877D25BE465.roa
Signing time: Mon 25 Dec 2023 06:24:41 +0000
ROA not before: Mon 25 Dec 2023 06:24:37 +0000
ROA not after: Wed 02 Oct 2024 06:24:37 +0000
asID: 393294
IP address blocks: 45.199.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22818 (0x5922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 06:24:37 2023 GMT
Not After : Oct 2 06:24:37 2024 GMT
Subject: CN=65892029-0d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:19:35:8d:73:33:ff:3e:03:41:e6:eb:fb:
29:f4:8a:ed:33:61:59:4c:db:87:87:3b:02:76:2c:
90:59:75:08:b3:40:6b:88:fa:5f:a3:8e:96:dd:7d:
0a:55:b3:fc:c0:95:79:b2:6c:51:47:5a:ae:f2:39:
1d:39:49:cc:a5:33:78:bc:3c:fe:2e:54:b3:b6:e3:
ed:21:0e:c4:67:8e:8f:d5:18:a1:75:da:a5:61:25:
d8:db:a0:da:8f:a8:13:2e:45:3f:b0:4b:18:8f:1f:
92:6c:3c:ae:73:fd:ea:bf:5b:0c:3c:7e:ea:0e:3b:
8b:fe:95:7e:1f:e9:6b:e0:93:e1:3a:86:04:e8:40:
0f:d3:3f:6d:f7:94:fd:a8:44:e6:87:b7:a3:ca:15:
ad:18:96:27:5e:e7:8e:1f:b9:90:04:d0:84:bd:11:
40:17:5c:09:4e:ad:60:74:4f:39:04:90:6d:a9:b5:
9c:20:df:68:44:82:bc:d0:68:79:9b:48:74:8d:75:
ed:4e:23:99:ac:13:23:36:27:0e:36:e5:33:4d:ee:
54:ea:c1:90:b0:85:a3:48:6d:af:03:9a:b8:c3:ce:
12:16:c6:d9:b4:b6:85:5e:ac:74:b7:dd:15:2b:c8:
b2:5d:44:ee:70:24:2f:2f:62:b6:0d:66:fe:80:78:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EF:27:56:13:48:19:66:EB:FC:85:D0:2B:41:0C:8A:5C:57:15:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/490DB342A2EE11EE9EF11877D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:51:e6:46:0f:61:7c:2f:60:ed:53:bc:42:93:0b:de:49:d3:
71:f2:44:fc:a1:b3:8b:ec:58:43:54:14:8f:ad:a3:76:2d:80:
d8:05:be:5f:1e:19:33:6d:16:85:b5:2d:4a:5d:41:c0:4e:64:
79:d9:29:4a:ec:c1:93:03:96:52:bc:47:35:8b:85:f9:e8:7c:
df:d1:84:7d:cd:26:e3:5f:39:75:37:92:5e:65:fe:6a:06:28:
96:9e:c4:93:8e:a4:24:69:2a:a9:f0:e0:da:09:43:df:84:21:
03:79:f0:b9:d8:03:40:3e:ab:da:b1:ae:89:b7:e1:1c:cd:ae:
52:15:a2:cf:b7:fa:b7:a8:07:56:cb:7d:49:b7:84:f6:7e:42:
1b:8c:a1:af:82:96:28:c8:51:5b:22:48:cd:8f:1e:9c:27:fc:
d5:a8:4c:cb:00:d0:6b:57:5e:e9:3a:27:64:3a:6f:f0:b2:3f:
73:ee:59:9d:59:e6:68:50:f1:8c:da:33:08:f3:2d:ec:12:17:
c6:ac:01:cc:1d:02:71:97:47:32:fa:7f:fd:2e:d7:51:8e:5f:
bd:6d:ce:09:11:df:20:03:b7:ba:b0:38:ba:a8:e9:01:c6:98:
c6:03:da:23:4d:ae:2a:b3:25:47:83:82:31:06:62:4c:1e:3e:
f5:38:9b:b1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICWSIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEyMjUwNjI0MzdaFw0yNDEwMDIwNjI0MzdaMBgxFjAU
BgNVBAMTDTY1ODkyMDI5LTBkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDigBk1jXMz/z4DQebr+yn0iu0zYVlM24eHOwJ2LJBZdQizQGuI+l+jjpbd
fQpVs/zAlXmybFFHWq7yOR05ScylM3i8PP4uVLO24+0hDsRnjo/VGKF12qVhJdjb
oNqPqBMuRT+wSxiPH5JsPK5z/eq/Www8fuoOO4v+lX4f6Wvgk+E6hgToQA/TP233
lP2oROaHt6PKFa0Ylide544fuZAE0IS9EUAXXAlOrWB0TzkEkG2ptZwg32hEgrzQ
aHmbSHSNde1OI5msEyM2Jw425TNN7lTqwZCwhaNIba8DmrjDzhIWxtm0toVerHS3
3RUryLJdRO5wJC8vYrYNZv6AeId7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUse8n
VhNIGWbr/IXQK0EMilxXFYkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzQ5MERCMzQyQTJFRTExRUU5RUYxMTg3N0QyNUJFNDY1LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtx6QwDQYJKoZIhvcNAQELBQAD
ggEBAJ9R5kYPYXwvYO1TvEKTC95J03HyRPyhs4vsWENUFI+to3YtgNgFvl8eGTNt
FoW1LUpdQcBOZHnZKUrswZMDllK8RzWLhfnofN/RhH3NJuNfOXU3kl5l/moGKJae
xJOOpCRpKqnw4NoJQ9+EIQN58LnYA0A+q9qxrom34RzNrlIVos+3+reoB1bLfUm3
hPZ+QhuMoa+ClijIUVsiSM2PHpwn/NWoTMsA0GtXXuk6J2Q6b/CyP3PuWZ1Z5mhQ
8YzaMwjzLewSF8asAcwdAnGXRzL6f/0u11GOX71tzgkR3yADt7qwOLqo6QHGmMYD
2iNNriqzJUeDgjEGYkwePvU4m7E=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org