Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53AEEA26014611EFA6816F45017001B1.roa
File: 53AEEA26014611EFA6816F45017001B1.roa (raw, json)
Hash identifier: Da9PzshsDwq5uB/I/ttokHyUYC7rVuAsRYjaQqTgzp0=
Subject key identifier: BC:79:BE:2A:FC:02:BB:EC:9D:36:EB:F2:8B:F5:6D:EE:BE:D6:14:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8422
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53AEEA26014611EFA6816F45017001B1.roa
Signing time: Tue 23 Apr 2024 07:51:44 +0000
ROA not before: Tue 23 Apr 2024 07:51:40 +0000
ROA not after: Sat 11 May 2024 07:51:40 +0000
asID: 7029
IP address blocks: 45.196.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33826 (0x8422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:51:40 2024 GMT
Not After : May 11 07:51:40 2024 GMT
Subject: CN=6627688f-5f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:35:10:a1:47:8a:24:28:5b:49:94:c7:6a:
9c:19:20:35:95:f9:29:4b:ac:7e:01:68:6e:dd:1b:
ee:c4:a6:62:26:20:c5:2e:c6:35:ec:ab:04:9b:4b:
cb:f0:7f:5e:cf:99:6a:3c:48:05:a8:51:f8:8f:a0:
19:97:6a:12:6b:ce:c5:98:53:31:01:58:71:af:fb:
57:5f:8b:66:07:68:99:cc:c5:63:25:d1:5d:29:91:
58:8e:c2:62:c8:59:b6:0b:7b:72:6d:46:6d:3d:a0:
49:6c:63:95:d5:16:98:17:ab:d6:13:aa:7c:f8:39:
01:51:9d:fe:d8:17:75:f0:bf:e8:2c:91:29:1f:ea:
40:37:2a:5d:aa:26:19:a6:4a:17:70:28:a4:bd:08:
f9:79:cd:4f:63:94:0f:ec:71:d3:75:99:0c:47:9f:
24:96:20:d4:cc:e7:89:d0:1c:0e:5d:7e:22:e6:24:
61:b5:d5:d8:7d:9e:0b:a3:5c:43:53:46:07:59:4a:
35:7c:31:03:b0:58:b9:72:4b:e4:75:9a:c3:2b:99:
f5:15:0c:d5:d1:2d:2a:5c:cb:f1:10:88:91:72:ad:
75:16:70:dd:f6:69:74:91:e4:4d:cf:7d:46:54:6b:
c3:28:4b:b5:f5:6d:11:eb:5a:ff:1b:5d:fc:d9:58:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:BE:2A:FC:02:BB:EC:9D:36:EB:F2:8B:F5:6D:EE:BE:D6:14:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53AEEA26014611EFA6816F45017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:39:1d:ea:99:38:06:c6:3d:c2:ca:7d:c6:9b:7c:2a:90:83:
66:35:10:81:11:e6:99:6c:c6:9a:33:c7:ee:21:1d:96:ba:1d:
29:c7:3f:6e:ab:c1:4b:a7:c6:9e:4a:60:79:71:f0:7b:d5:74:
e0:59:86:86:7a:6f:25:4b:fa:57:4c:ed:99:16:1f:f3:f8:01:
e2:21:72:2b:6e:59:ac:da:3e:64:7f:53:d9:77:5a:d0:05:a6:
b8:e4:d6:cd:46:b5:8f:5f:46:34:0f:ca:bb:4c:ad:6b:a2:06:
cb:d3:50:9d:da:07:b0:4c:9f:7f:71:53:6e:4c:7c:a9:11:37:
e5:11:5e:1f:83:6a:ba:fa:60:80:ee:f4:c0:3b:2a:84:f2:22:
02:6f:91:98:25:0f:ee:05:44:5f:a1:2f:be:19:2e:66:f8:cf:
53:8d:ed:6d:92:22:25:ec:cd:61:3f:58:09:43:65:2e:0e:1a:
45:2e:f0:4d:90:5a:f2:d7:c3:39:bc:a4:af:97:8a:4f:bf:7c:
c1:63:80:4c:ba:40:8d:bb:34:86:de:1b:41:3a:07:45:b8:59:
39:ba:51:23:b1:ff:22:a4:79:c9:29:75:10:3a:20:fd:18:3a:
c5:87:fa:9d:d8:e4:12:33:bb:9f:76:45:65:da:e2:97:d1:61:
f4:2f:c2:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIQiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMDc1MTQwWhcNMjQwNTExMDc1MTQwWjAYMRYw
FAYDVQQDEw02NjI3Njg4Zi01Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqzs1EKFHiiQoW0mUx2qcGSA1lfkpS6x+AWhu3RvuxKZiJiDFLsY17KsE
m0vL8H9ez5lqPEgFqFH4j6AZl2oSa87FmFMxAVhxr/tXX4tmB2iZzMVjJdFdKZFY
jsJiyFm2C3tybUZtPaBJbGOV1RaYF6vWE6p8+DkBUZ3+2Bd18L/oLJEpH+pANypd
qiYZpkoXcCikvQj5ec1PY5QP7HHTdZkMR58kliDUzOeJ0BwOXX4i5iRhtdXYfZ4L
o1xDU0YHWUo1fDEDsFi5ckvkdZrDK5n1FQzV0S0qXMvxEIiRcq11FnDd9ml0keRN
z31GVGvDKEu19W0R61r/G1382Vgt6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLx5
vir8ArvsnTbr8ov1be6+1hSVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81M0FFRUEyNjAxNDYxMUVGQTY4MTZGNDUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQgMA0GCSqGSIb3DQEBCwUA
A4IBAQBbOR3qmTgGxj3Cyn3Gm3wqkINmNRCBEeaZbMaaM8fuIR2Wuh0pxz9uq8FL
p8aeSmB5cfB71XTgWYaGem8lS/pXTO2ZFh/z+AHiIXIrblms2j5kf1PZd1rQBaa4
5NbNRrWPX0Y0D8q7TK1rogbL01Cd2gewTJ9/cVNuTHypETflEV4fg2q6+mCA7vTA
OyqE8iICb5GYJQ/uBURfoS++GS5m+M9Tje1tkiIl7M1hP1gJQ2UuDhpFLvBNkFry
18M5vKSvl4pPv3zBY4BMukCNuzSG3htBOgdFuFk5ulEjsf8ipHnJKXUQOiD9GDrF
h/qd2OQSM7ufdkVl2uKX0WH0L8L/
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org