Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F265F4A44A11EFAE94749E762E951A.roa
File: 55F265F4A44A11EFAE94749E762E951A.roa (raw, json)
Hash identifier: XNRZXwnMUJSRF4Qgvld2RJpHD3BwxHqZqsOTruR9XV8=
Subject key identifier: D9:52:42:FB:51:D6:EC:73:83:5F:3D:CD:13:7C:CE:66:77:89:7C:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F265F4A44A11EFAE94749E762E951A.roa
Signing time: Sat 16 Nov 2024 18:41:05 +0000
ROA not before: Sat 16 Nov 2024 18:41:01 +0000
ROA not after: Mon 25 Nov 2024 18:41:01 +0000
asID: 9009
IP address blocks: 45.192.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54180 (0xd3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:41:01 2024 GMT
Not After : Nov 25 18:41:01 2024 GMT
Subject: CN=6738e741-f2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:bf:4d:76:ef:74:52:a1:00:64:53:73:59:
02:53:76:78:69:d1:29:6d:d1:09:92:e2:a5:fe:15:
e7:24:83:ba:ae:04:2f:9c:b7:16:28:a8:f9:a9:9c:
48:a3:c0:8a:a5:67:4a:c0:6f:d5:81:b3:53:41:51:
b1:3d:bf:25:e9:a2:5e:3a:64:35:08:95:40:7e:84:
51:6d:39:0b:bd:5c:d0:a3:dd:2b:eb:b9:28:71:86:
ec:a6:f6:44:00:91:69:1d:6f:2c:e4:62:60:66:a2:
40:22:7f:80:ed:50:d3:80:6a:30:62:8b:5e:de:fc:
98:53:30:2e:c2:24:00:09:0b:34:b0:47:98:7d:12:
07:a6:9e:16:14:f2:9f:c7:a4:8a:ff:b0:8f:06:f7:
ec:c7:7b:dd:00:82:a3:c0:c1:3b:57:d4:ef:53:d2:
b0:2d:86:fa:df:59:1b:c9:6c:13:1d:47:e8:34:07:
0d:bd:44:58:7d:7a:ad:8a:d3:30:5e:1b:d0:a4:c9:
83:6e:6d:99:8f:08:ba:9c:e7:66:a8:26:ba:43:53:
0d:ac:2d:7e:01:63:8e:6d:ae:4e:87:14:98:54:bf:
ee:7f:4b:29:38:25:97:39:8f:2f:ed:97:7c:b4:26:
03:82:75:19:53:fd:b0:54:51:3c:21:17:b6:db:50:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:52:42:FB:51:D6:EC:73:83:5F:3D:CD:13:7C:CE:66:77:89:7C:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55F265F4A44A11EFAE94749E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d1:4a:15:2b:7b:76:d9:7d:99:d6:73:f3:74:b4:e7:da:cc:
7f:9c:4f:d2:e7:35:4b:d4:4d:cb:57:ba:91:88:2d:77:9c:19:
21:f8:87:6b:ff:67:5f:9d:01:dc:bc:3b:fe:ea:bd:ca:12:06:
db:34:03:a0:e6:69:ad:7d:13:e5:9c:50:b5:55:5a:7b:9e:9b:
80:3c:a3:36:f3:90:5c:99:2d:ad:21:f1:f3:7b:32:5f:89:ad:
66:23:30:0b:bf:2a:db:9d:e6:39:01:7a:72:38:8d:82:06:73:
0b:ba:32:61:4d:14:60:bd:19:e2:6b:22:32:eb:cd:4d:bb:9c:
22:c4:b8:24:4e:28:30:ee:b7:ba:8a:a6:b6:56:6d:da:ba:fc:
c5:a9:6b:35:98:8e:e6:2e:f1:37:6e:3d:ad:25:41:95:cc:13:
00:17:e9:ac:2c:65:2d:c5:5e:b1:cc:f2:05:c1:54:59:ef:55:
84:4f:21:21:3e:fd:ef:55:d1:4b:09:72:5e:3e:07:97:3a:f5:
85:00:ad:6b:b1:57:e3:14:8f:4d:77:db:a5:31:3e:f9:38:b2:
4c:0e:19:19:77:69:cf:0e:f1:66:91:bc:78:31:e3:b7:fb:6f:
22:c0:f7:57:53:d7:0a:e6:51:3d:27:e0:af:dd:b2:e6:c1:72:
17:b1:41:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANOkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTg0MTAxWhcNMjQxMTI1MTg0MTAxWjAYMRYw
FAYDVQQDEw02NzM4ZTc0MS1mMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnBW/TXbvdFKhAGRTc1kCU3Z4adEpbdEJkuKl/hXnJIO6rgQvnLcWKKj5
qZxIo8CKpWdKwG/VgbNTQVGxPb8l6aJeOmQ1CJVAfoRRbTkLvVzQo90r67kocYbs
pvZEAJFpHW8s5GJgZqJAIn+A7VDTgGowYote3vyYUzAuwiQACQs0sEeYfRIHpp4W
FPKfx6SK/7CPBvfsx3vdAIKjwME7V9TvU9KwLYb631kbyWwTHUfoNAcNvURYfXqt
itMwXhvQpMmDbm2Zjwi6nOdmqCa6Q1MNrC1+AWOOba5OhxSYVL/uf0spOCWXOY8v
7Zd8tCYDgnUZU/2wVFE8IRe221AXfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNlS
QvtR1uxzg189zRN8zmZ3iXweMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NUYyNjVGNEE0NEExMUVGQUU5NDc0OUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcCCMA0GCSqGSIb3DQEBCwUA
A4IBAQBb0UoVK3t22X2Z1nPzdLTn2sx/nE/S5zVL1E3LV7qRiC13nBkh+Idr/2df
nQHcvDv+6r3KEgbbNAOg5mmtfRPlnFC1VVp7npuAPKM285BcmS2tIfHzezJfia1m
IzALvyrbneY5AXpyOI2CBnMLujJhTRRgvRniayIy681Nu5wixLgkTigw7re6iqa2
Vm3auvzFqWs1mI7mLvE3bj2tJUGVzBMAF+msLGUtxV6xzPIFwVRZ71WETyEhPv3v
VdFLCXJePgeXOvWFAK1rsVfjFI9Nd9ulMT75OLJMDhkZd2nPDvFmkbx4MeO3+28i
wPdXU9cK5lE9J+Cv3bLmwXIXsUGZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org