Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A9DC50C8D3411EFA7A65685762E951A.roa
File: 6A9DC50C8D3411EFA7A65685762E951A.roa (raw, json)
Hash identifier: NxAGsBfgPdppcn1vL8i6AMbQ69lk/B6p+BDnHKa58zw=
Subject key identifier: 3E:DB:14:18:4D:2E:4F:50:2A:FA:60:EA:07:3A:0D:14:68:72:42:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C6C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A9DC50C8D3411EFA7A65685762E951A.roa
Signing time: Fri 18 Oct 2024 09:36:14 +0000
ROA not before: Fri 18 Oct 2024 09:36:10 +0000
ROA not after: Sat 23 Nov 2024 09:36:10 +0000
asID: 202656
IP address blocks: 45.195.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50882 (0xc6c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 09:36:10 2024 GMT
Not After : Nov 23 09:36:10 2024 GMT
Subject: CN=67122c0e-f674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:00:55:2e:ad:1d:e6:fd:9a:c2:e1:d3:51:
f3:96:3b:f1:37:18:4a:da:ea:37:09:29:ab:ae:d8:
8f:06:e9:99:7c:12:6b:35:e0:62:2c:dc:6e:52:18:
e8:9a:bd:bd:fd:49:36:e4:1c:38:4c:31:00:04:97:
b8:5e:16:72:73:89:34:6b:65:e8:23:6b:ac:28:4b:
76:a2:30:d8:59:26:60:a6:eb:7d:82:3a:5a:e5:ad:
d8:bb:80:83:0f:25:a6:fd:08:95:16:54:82:b2:ac:
b6:7e:92:33:71:05:0f:ae:f1:36:fb:50:31:86:c8:
93:8d:43:b8:32:97:92:a0:8b:8c:35:8c:d2:ae:28:
3c:e1:2b:42:d6:68:d8:fb:6b:07:2b:2c:1c:16:60:
e3:97:c6:fd:1d:ed:9c:54:cc:63:e8:16:6b:71:e2:
a1:f7:6b:a0:fe:2f:4c:f9:d4:31:b6:6a:f7:5c:83:
24:69:86:c8:4b:d1:1c:eb:69:b3:2c:7d:9f:f2:90:
ac:52:ba:26:37:e9:2d:4c:61:1a:24:02:68:fa:5b:
e4:55:d9:c1:cd:b2:b1:d8:82:7b:c2:61:31:70:d8:
2c:98:13:49:e5:35:71:ed:8b:9c:ef:2c:64:12:8d:
a9:9e:23:59:d2:1c:01:18:e8:23:12:74:3a:de:e9:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:14:18:4D:2E:4F:50:2A:FA:60:EA:07:3A:0D:14:68:72:42:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A9DC50C8D3411EFA7A65685762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:1d:f4:07:32:5a:d2:4e:5c:5a:3e:6e:d9:1f:be:2d:8f:62:
ec:a1:33:e6:51:27:97:e6:38:58:6e:ec:61:cb:dd:76:5b:5e:
7a:9c:5e:f4:5c:89:fa:01:5a:66:39:8f:38:95:1b:05:e5:d0:
4e:33:31:83:59:35:b2:5d:1b:08:df:4c:5d:38:1a:b5:26:45:
a8:5a:ed:44:4a:4d:a3:c5:01:e0:13:9d:8f:98:19:3d:fc:5e:
7f:06:1a:46:2e:17:c1:08:6f:1a:34:6e:10:c1:2c:94:eb:51:
a6:1a:c8:49:48:07:81:8e:1c:6f:d0:96:c0:84:48:bb:15:d0:
7e:26:ea:f9:ea:dc:1a:27:91:4b:b2:6b:1a:aa:1b:71:99:81:
23:16:f2:6b:df:31:e4:10:c3:af:07:e4:a4:48:f4:eb:6f:4b:
b5:84:c6:1c:a5:34:2c:e9:98:b6:1c:f2:98:13:70:d8:a4:6d:
60:ae:33:f5:17:19:68:fb:3a:89:73:d6:51:14:dc:96:30:f9:
e3:ce:01:5b:45:e9:6b:7e:af:9b:03:66:a7:f7:a0:b3:6c:37:
7f:39:a4:ab:24:d0:db:95:3e:e3:10:85:cc:f2:07:bb:76:4a:
35:65:2f:a4:91:e5:38:bd:a9:3b:ab:bd:a9:aa:ec:75:e0:01:
9f:98:d3:08
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMbCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDE4MDkzNjEwWhcNMjQxMTIzMDkzNjEwWjAYMRYw
FAYDVQQDEw02NzEyMmMwZS1mNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyvMAVS6tHeb9msLh01HzljvxNxhK2uo3CSmrrtiPBumZfBJrNeBiLNxu
Uhjomr29/Uk25Bw4TDEABJe4XhZyc4k0a2XoI2usKEt2ojDYWSZgput9gjpa5a3Y
u4CDDyWm/QiVFlSCsqy2fpIzcQUPrvE2+1AxhsiTjUO4MpeSoIuMNYzSrig84StC
1mjY+2sHKywcFmDjl8b9He2cVMxj6BZrceKh92ug/i9M+dQxtmr3XIMkaYbIS9Ec
62mzLH2f8pCsUromN+ktTGEaJAJo+lvkVdnBzbKx2IJ7wmExcNgsmBNJ5TVx7Yuc
7yxkEo2pniNZ0hwBGOgjEnQ63unplQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD7b
FBhNLk9QKvpg6gc6DRRockKVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QTlEQzUwQzhEMzQxMUVGQTdBNjU2ODU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcOgMA0GCSqGSIb3DQEBCwUA
A4IBAQAqHfQHMlrSTlxaPm7ZH74tj2LsoTPmUSeX5jhYbuxhy912W156nF70XIn6
AVpmOY84lRsF5dBOMzGDWTWyXRsI30xdOBq1JkWoWu1ESk2jxQHgE52PmBk9/F5/
BhpGLhfBCG8aNG4QwSyU61GmGshJSAeBjhxv0JbAhEi7FdB+Jur56twaJ5FLsmsa
qhtxmYEjFvJr3zHkEMOvB+SkSPTrb0u1hMYcpTQs6Zi2HPKYE3DYpG1grjP1Fxlo
+zqJc9ZRFNyWMPnjzgFbRelrfq+bA2an96CzbDd/OaSrJNDblT7jEIXM8ge7dko1
ZS+kkeU4vak7q72pqux14AGfmNMI
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org