Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544B5FDCA25E11EFA1339685762E951A.roa
File: 544B5FDCA25E11EFA1339685762E951A.roa (raw, json)
Hash identifier: iv8L0bOxYPFw3b/NQ+a/sZfzamaZJXcJadqOP4WNH0o=
Subject key identifier: E2:F9:77:B3:0B:DE:DE:D5:65:57:AD:B0:74:D3:69:39:4B:ED:35:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D289
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544B5FDCA25E11EFA1339685762E951A.roa
Signing time: Thu 14 Nov 2024 07:59:10 +0000
ROA not before: Thu 14 Nov 2024 07:59:06 +0000
ROA not after: Sat 14 Dec 2024 07:59:06 +0000
asID: 6079
IP address blocks: 45.203.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53897 (0xd289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:59:06 2024 GMT
Not After : Dec 14 07:59:06 2024 GMT
Subject: CN=6735adce-556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:80:ef:45:db:68:cd:46:a9:60:a0:b0:84:
44:20:99:e5:97:40:09:b6:67:c3:0c:51:bd:53:39:
2f:ec:fb:80:c1:9d:a2:53:41:23:37:c2:40:ef:b1:
cb:b4:49:f3:ed:4a:a5:7c:31:aa:5c:6d:35:80:81:
28:61:39:b2:8d:da:0c:1b:2b:91:dc:88:16:d4:75:
0c:70:28:a6:01:0e:b1:ae:0a:7b:f0:32:ab:f2:0e:
02:5d:20:97:57:40:17:c9:53:83:30:e2:47:3d:12:
2f:11:2b:10:4d:61:11:7b:63:f6:76:8d:2a:e9:62:
26:83:7f:b1:dc:20:36:1a:ec:d3:bf:9e:5d:78:3c:
b1:e6:49:91:29:f2:f4:82:75:73:f0:be:75:1a:49:
5a:dd:5e:08:0c:f8:91:6a:9a:d2:52:6d:ad:cd:b7:
e4:b6:87:fb:f0:ad:e2:fe:60:fc:65:be:16:93:5b:
a3:34:d5:f5:7b:64:dc:d6:8a:9b:9d:ae:93:7b:16:
2a:22:05:fc:df:75:68:c5:3f:ad:4e:20:87:24:7d:
26:b7:ee:8f:c8:2e:49:02:05:e7:12:de:d1:f1:94:
d8:58:5d:3b:2f:16:17:91:a1:5e:6e:fe:f3:63:59:
4d:86:a1:40:a9:0e:6c:d4:53:60:3b:20:59:b1:c3:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:77:B3:0B:DE:DE:D5:65:57:AD:B0:74:D3:69:39:4B:ED:35:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544B5FDCA25E11EFA1339685762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.192.0/22
Signature Algorithm: sha256WithRSAEncryption
49:34:88:b0:f6:96:3e:a3:38:c8:f0:14:e2:5e:b4:06:07:ef:
be:c7:b4:47:89:41:c9:2d:22:dd:a5:73:69:f7:30:da:57:8e:
27:06:b7:75:39:c0:34:8a:d1:fa:48:07:3c:2c:55:67:4c:bc:
39:ea:d4:14:66:4c:ee:1b:45:de:1a:c3:6f:33:e7:9f:93:01:
46:49:c1:b5:d6:0d:8f:71:39:8d:b4:54:1d:5b:ee:12:97:79:
4f:ba:23:f2:14:8d:79:ed:38:07:29:69:69:01:7f:6b:59:f4:
ee:64:d5:20:52:69:cb:08:bb:b3:ab:0d:f0:12:b4:20:87:f7:
fb:35:6b:d8:7e:58:85:67:62:19:42:36:ec:27:f7:11:08:b6:
96:97:1b:49:e7:ba:b7:f3:59:a7:05:98:34:14:d4:c7:ef:70:
bc:d3:07:51:60:ca:55:48:04:4e:32:c6:0e:56:13:4a:21:22:
66:f6:36:0d:03:ee:8e:68:02:2c:19:5d:d6:63:0e:a9:28:e6:
41:c6:7b:e9:b5:8b:35:52:57:e6:b0:4c:00:24:34:ca:c5:85:
ad:cf:4f:79:9b:7b:cf:59:1f:50:8c:e8:5a:da:20:3d:f9:5a:
b0:3b:f9:6b:ca:f9:b1:02:c0:c7:8c:c2:25:d1:57:73:fc:84:
c5:f2:ea:a2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANKJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE0MDc1OTA2WhcNMjQxMjE0MDc1OTA2WjAYMRYw
FAYDVQQDEw02NzM1YWRjZS01NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArVKA70XbaM1GqWCgsIREIJnll0AJtmfDDFG9Uzkv7PuAwZ2iU0EjN8JA
77HLtEnz7UqlfDGqXG01gIEoYTmyjdoMGyuR3IgW1HUMcCimAQ6xrgp78DKr8g4C
XSCXV0AXyVODMOJHPRIvESsQTWERe2P2do0q6WImg3+x3CA2GuzTv55deDyx5kmR
KfL0gnVz8L51Gkla3V4IDPiRaprSUm2tzbfktof78K3i/mD8Zb4Wk1ujNNX1e2Tc
1oqbna6TexYqIgX833VoxT+tTiCHJH0mt+6PyC5JAgXnEt7R8ZTYWF07LxYXkaFe
bv7zY1lNhqFAqQ5s1FNgOyBZscP2vwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOL5
d7ML3t7VZVetsHTTaTlL7TWQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NDRCNUZEQ0EyNUUxMUVGQTEzMzk2ODU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcvAMA0GCSqGSIb3DQEBCwUA
A4IBAQBJNIiw9pY+ozjI8BTiXrQGB+++x7RHiUHJLSLdpXNp9zDaV44nBrd1OcA0
itH6SAc8LFVnTLw56tQUZkzuG0XeGsNvM+efkwFGScG11g2PcTmNtFQdW+4Sl3lP
uiPyFI157TgHKWlpAX9rWfTuZNUgUmnLCLuzqw3wErQgh/f7NWvYfliFZ2IZQjbs
J/cRCLaWlxtJ57q381mnBZg0FNTH73C80wdRYMpVSAROMsYOVhNKISJm9jYNA+6O
aAIsGV3WYw6pKOZBxnvptYs1UlfmsEwAJDTKxYWtz095m3vPWR9QjOha2iA9+Vqw
O/lryvmxAsDHjMIl0Vdz/ITF8uqi
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org