Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A948E06014011EF840D0A17017001B1.roa
File: 4A948E06014011EF840D0A17017001B1.roa (raw, json)
Hash identifier: W7ZmJfIF/WKVt9F2ZpBp9KuSgGVazD7L5eispPhAUME=
Subject key identifier: 24:F2:87:D8:6F:59:43:E2:86:94:10:B2:E3:8B:0F:AC:D4:51:E9:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A948E06014011EF840D0A17017001B1.roa
Signing time: Tue 23 Apr 2024 07:08:31 +0000
ROA not before: Tue 23 Apr 2024 07:08:28 +0000
ROA not after: Sat 11 May 2024 07:08:28 +0000
asID: 22773
IP address blocks: 45.196.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33756 (0x83dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:08:28 2024 GMT
Not After : May 11 07:08:28 2024 GMT
Subject: CN=66275e6f-cd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:c1:75:65:2f:6a:34:a8:c4:12:81:43:54:
cb:14:ef:8e:45:2a:80:15:7f:57:3b:c5:24:95:bb:
7c:fc:3f:93:eb:22:af:69:4a:9f:74:83:98:6d:67:
86:cc:d1:ea:59:00:db:9f:b7:06:9f:89:31:a2:29:
46:bf:39:9d:19:14:0e:aa:78:52:ca:0e:cf:15:bb:
57:b2:17:f8:f1:80:64:e9:2f:af:6c:57:72:37:dd:
18:b8:7b:f8:bf:a4:7c:8a:9c:88:49:88:cc:14:11:
e5:8b:22:51:1c:0d:3b:d2:d1:85:49:55:0e:95:87:
23:4f:a4:1e:1a:7e:23:57:8a:00:c2:9d:75:97:0b:
f0:c2:b5:80:64:65:99:ca:9c:4f:e7:de:85:c6:4f:
e8:f5:2c:f4:b4:13:e2:e0:d6:cc:5e:81:b7:25:c4:
00:5f:44:db:94:11:66:13:e9:db:fa:9f:80:ce:b0:
3b:63:09:39:cd:17:99:4f:f3:7d:9b:91:4b:b9:0f:
18:24:e9:70:31:f2:a8:da:5d:4d:26:c4:69:7f:e2:
3a:75:31:6a:51:79:d2:aa:e9:09:42:16:1a:20:6c:
c8:c9:76:92:f0:4f:a7:75:58:4b:69:f6:7d:b6:a3:
f0:e1:0e:b5:20:cb:d2:0f:3d:fb:2f:13:97:3f:34:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F2:87:D8:6F:59:43:E2:86:94:10:B2:E3:8B:0F:AC:D4:51:E9:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A948E06014011EF840D0A17017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.52.0/22
Signature Algorithm: sha256WithRSAEncryption
21:e8:89:97:b9:f0:13:65:a1:94:ba:a4:20:51:e0:50:31:6c:
9f:99:ae:50:c1:96:72:9b:84:a7:e2:e9:5f:d3:94:8b:c2:eb:
79:38:09:1d:91:3c:e7:d3:0d:ef:cc:3f:a7:4b:8c:f9:3d:4a:
49:ca:cf:85:16:9f:71:59:ec:ec:f1:9b:9f:b6:32:88:f5:8b:
27:0b:5f:5e:71:72:7d:89:7f:11:fa:61:a6:4b:d9:28:5e:84:
de:fe:f3:81:f0:6f:2b:5c:da:d4:93:4b:b2:99:98:4c:43:0c:
83:07:2d:e1:00:fd:a4:b1:ec:0b:18:55:3a:bb:e7:74:ae:c9:
4e:56:df:30:69:91:91:22:55:ee:c4:fc:aa:fd:3b:ac:08:b7:
4b:d1:ec:da:e7:96:b2:35:75:16:0d:ef:aa:4f:4c:10:66:cd:
e1:e2:2a:09:cf:45:fe:eb:dd:5e:85:99:0c:8f:41:07:53:c4:
51:fd:ab:dd:d0:bd:04:e2:dd:8b:a0:54:11:eb:e5:6b:2e:b8:
94:ce:49:57:b5:ac:3a:10:8f:ce:c5:5d:7b:59:49:8a:4e:a2:
0a:8c:97:40:8b:25:e4:ec:02:24:1b:db:89:d6:e6:de:79:62:
d8:39:4b:b6:8a:19:6d:f6:35:bb:73:72:08:99:7c:18:ef:df:
0c:9f:08:a0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIPcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMDcwODI4WhcNMjQwNTExMDcwODI4WjAYMRYw
FAYDVQQDEw02NjI3NWU2Zi1jZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmXLBdWUvajSoxBKBQ1TLFO+ORSqAFX9XO8Uklbt8/D+T6yKvaUqfdIOY
bWeGzNHqWQDbn7cGn4kxoilGvzmdGRQOqnhSyg7PFbtXshf48YBk6S+vbFdyN90Y
uHv4v6R8ipyISYjMFBHliyJRHA070tGFSVUOlYcjT6QeGn4jV4oAwp11lwvwwrWA
ZGWZypxP596Fxk/o9Sz0tBPi4NbMXoG3JcQAX0TblBFmE+nb+p+AzrA7Ywk5zReZ
T/N9m5FLuQ8YJOlwMfKo2l1NJsRpf+I6dTFqUXnSqukJQhYaIGzIyXaS8E+ndVhL
afZ9tqPw4Q61IMvSDz37LxOXPzRqLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCTy
h9hvWUPihpQQsuOLD6zUUelIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QTk0OEUwNjAxNDAxMUVGODQwRDBBMTcwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQ0MA0GCSqGSIb3DQEBCwUA
A4IBAQAh6ImXufATZaGUuqQgUeBQMWyfma5QwZZym4Sn4ulf05SLwut5OAkdkTzn
0w3vzD+nS4z5PUpJys+FFp9xWezs8ZuftjKI9YsnC19ecXJ9iX8R+mGmS9koXoTe
/vOB8G8rXNrUk0uymZhMQwyDBy3hAP2ksewLGFU6u+d0rslOVt8waZGRIlXuxPyq
/TusCLdL0eza55ayNXUWDe+qT0wQZs3h4ioJz0X+691ehZkMj0EHU8RR/avd0L0E
4t2LoFQR6+VrLriUzklXtaw6EI/OxV17WUmKTqIKjJdAiyXk7AIkG9uJ1ubeeWLY
OUu2ihlt9jW7c3IImXwY798Mnwig
-----END CERTIFICATE-----
Generated at Sun May 5 02:33:16 2024 by rpki-client on console-fra.rpki-client.org