Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59F9BD10F90F11EDA974947E4AD9E6FC.roa
File: 59F9BD10F90F11EDA974947E4AD9E6FC.roa (raw, json)
Hash identifier: 9tpHtLMww9rUBPNLdwBi1XxC9jPd/ClMzzdjhz5T0TA=
Subject key identifier: 24:88:46:4B:AB:39:5A:ED:AE:59:46:99:72:EA:60:17:80:AC:04:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2660
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59F9BD10F90F11EDA974947E4AD9E6FC.roa
Signing time: Tue 23 May 2023 02:13:05 +0000
ROA not before: Tue 23 May 2023 02:13:01 +0000
ROA not after: Tue 25 Jun 2024 02:13:01 +0000
asID: 135607
IP address blocks: 45.202.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9824 (0x2660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:13:01 2023 GMT
Not After : Jun 25 02:13:01 2024 GMT
Subject: CN=646c2131-3732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:b2:36:0e:f0:f7:bc:49:2d:7a:fc:a2:f8:
1b:51:76:39:82:48:d1:11:09:5d:1a:8b:db:ec:0b:
8f:83:9e:63:54:31:9d:6c:d8:88:12:47:c8:a3:30:
e1:14:5a:c9:a4:88:50:f3:ea:3b:6f:aa:6f:fc:4e:
d9:3c:34:e4:5c:c7:3f:5a:fa:1b:8c:b7:8d:34:85:
e0:62:5a:5c:cb:ed:f5:70:a2:61:90:6d:96:7b:a6:
6c:8e:21:5e:66:a5:a1:99:1d:b5:45:41:a9:a9:d1:
58:52:52:18:71:1f:3b:c2:ee:e3:1e:1a:f4:ea:d3:
dc:bf:5c:63:f1:e9:4a:2f:a6:59:1e:46:4f:fa:41:
4d:ae:02:be:37:5c:3d:f2:27:49:ea:e6:81:fc:da:
0f:a1:e3:4b:49:cb:66:80:70:3b:23:28:a8:4c:9e:
c2:04:71:b9:6a:07:ab:b6:d3:4a:0a:5c:8c:a9:df:
30:c1:dd:23:32:1d:5d:b2:24:cb:da:a3:36:ce:a0:
f1:d1:38:5b:04:50:94:a0:54:73:c7:c9:13:e9:0c:
03:04:06:2e:e9:9b:b2:81:03:41:b7:36:f5:67:00:
91:2e:99:8c:60:8f:d9:8f:51:b9:de:e6:52:cb:93:
ab:28:79:4c:bb:9b:ca:81:46:d8:d2:ec:54:17:c9:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:88:46:4B:AB:39:5A:ED:AE:59:46:99:72:EA:60:17:80:AC:04:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59F9BD10F90F11EDA974947E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.17.0/24
Signature Algorithm: sha256WithRSAEncryption
35:10:0f:2a:f0:21:17:6b:41:6a:03:22:40:16:b0:3e:3d:0c:
65:1e:02:76:2b:ba:75:bb:aa:50:be:e4:2b:31:fc:c5:bd:87:
f5:77:b7:30:a1:8c:c2:a8:af:52:6e:65:e5:17:ad:9e:87:9c:
2e:cd:a6:dc:c0:ce:9b:c8:98:c5:70:3f:e3:0c:f8:74:f3:e5:
d1:67:9f:6c:5c:5a:0e:73:c5:4d:f3:90:2e:4d:a6:d4:a1:b1:
52:34:ac:fc:71:d4:61:a4:49:ba:01:c9:3e:69:cb:84:a0:02:
4d:75:1a:ce:4f:61:9f:46:65:30:65:4b:94:72:db:d0:8f:35:
a8:d1:09:95:c8:14:38:b5:d0:b2:69:43:77:c3:bf:2f:df:fc:
c0:3d:1c:3e:0a:a5:1a:0c:54:1c:ea:5c:89:53:dc:71:5c:f1:
4e:dd:79:1b:6c:f8:fe:b0:5d:27:1d:90:9e:12:5e:0d:61:12:
0a:dc:83:44:cf:ca:6d:82:40:a2:46:e0:43:c7:d0:65:a1:9b:
91:76:45:ae:0e:ef:10:98:bc:25:f0:2e:50:30:20:4b:60:32:
82:99:df:a7:e5:63:bd:94:4b:a9:d2:27:51:e7:01:9f:8e:b2:
3b:ad:b9:ac:17:62:8e:0d:a5:38:76:1d:ab:0e:9c:1d:20:7f:
d5:3f:08:36
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJmAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjMwMjEzMDFaFw0yNDA2MjUwMjEzMDFaMBgxFjAU
BgNVBAMTDTY0NmMyMTMxLTM3MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSO7I2DvD3vEktevyi+BtRdjmCSNERCV0ai9vsC4+DnmNUMZ1s2IgSR8ij
MOEUWsmkiFDz6jtvqm/8Ttk8NORcxz9a+huMt400heBiWlzL7fVwomGQbZZ7pmyO
IV5mpaGZHbVFQamp0VhSUhhxHzvC7uMeGvTq09y/XGPx6UovplkeRk/6QU2uAr43
XD3yJ0nq5oH82g+h40tJy2aAcDsjKKhMnsIEcblqB6u200oKXIyp3zDB3SMyHV2y
JMvaozbOoPHROFsEUJSgVHPHyRPpDAMEBi7pm7KBA0G3NvVnAJEumYxgj9mPUbne
5lLLk6soeUy7m8qBRtjS7FQXyW4tAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJIhG
S6s5Wu2uWUaZcupgF4CsBC8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzU5RjlCRDEwRjkwRjExRURBOTc0OTQ3RTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyhEwDQYJKoZIhvcNAQELBQAD
ggEBADUQDyrwIRdrQWoDIkAWsD49DGUeAnYrunW7qlC+5Csx/MW9h/V3tzChjMKo
r1JuZeUXrZ6HnC7NptzAzpvImMVwP+MM+HTz5dFnn2xcWg5zxU3zkC5NptShsVI0
rPxx1GGkSboByT5py4SgAk11Gs5PYZ9GZTBlS5Ry29CPNajRCZXIFDi10LJpQ3fD
vy/f/MA9HD4KpRoMVBzqXIlT3HFc8U7deRts+P6wXScdkJ4SXg1hEgrcg0TPym2C
QKJG4EPH0GWhm5F2Ra4O7xCYvCXwLlAwIEtgMoKZ36flY72US6nSJ1HnAZ+Osjut
uawXYo4NpTh2HasOnB0gf9U/CDY=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:09 2024 by rpki-client on console-fra.rpki-client.org