Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4D46D8734F11EF9CCDFEBB762E951A.roa
File: 6C4D46D8734F11EF9CCDFEBB762E951A.roa (raw, json)
Hash identifier: 7X6RFcsqF17LM3q5MhKXoaZRgOBP4pG6ovzAw2B4ljM=
Subject key identifier: 9B:7D:CA:DC:7E:1A:50:1F:6F:E1:6E:00:C7:65:39:D4:FC:6C:59:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B65A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4D46D8734F11EF9CCDFEBB762E951A.roa
Signing time: Sun 15 Sep 2024 10:44:03 +0000
ROA not before: Sun 15 Sep 2024 10:44:00 +0000
ROA not after: Fri 08 Aug 2025 10:44:00 +0000
asID: 133861
IP address blocks: 45.207.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46682 (0xb65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:44:00 2024 GMT
Not After : Aug 8 10:44:00 2025 GMT
Subject: CN=66e6ba73-846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3d:8c:66:e6:7c:c6:00:4f:4b:93:a0:c9:22:
02:66:71:b3:92:d2:2b:7b:46:00:4a:45:0a:52:a0:
3f:f5:f2:63:25:8e:ca:84:ea:d3:82:43:dc:fa:db:
98:90:2d:93:50:67:b9:e0:9b:2e:3a:2f:39:3b:8c:
69:a5:ed:a7:d5:4a:cb:77:df:be:68:c9:59:95:20:
88:66:30:64:16:eb:41:8d:77:4e:5b:11:5f:b6:19:
20:f7:26:0b:68:fc:09:42:58:07:9b:6d:6b:4d:68:
ef:34:85:7e:4c:38:31:0b:8b:61:f6:c8:8f:46:c9:
82:31:f7:4f:6e:7c:1d:7b:bd:26:87:0e:01:6d:e5:
61:96:18:16:78:c5:84:78:a9:67:de:9c:e2:eb:9e:
d9:11:90:0a:56:1f:ee:bd:da:19:04:09:5e:52:c3:
27:22:92:3b:f7:e6:70:ca:f0:5f:ea:3d:47:06:0b:
d2:d8:04:38:0c:4d:0f:96:c9:cd:b6:04:78:35:75:
4e:2e:78:7e:d6:a3:6f:90:22:87:3a:d8:f9:22:14:
61:07:e3:54:32:95:5d:ed:1e:a4:18:5b:e4:f1:3e:
c1:dd:13:88:6e:7b:21:79:6b:07:24:d7:cc:4c:aa:
37:b1:35:5c:39:bc:c4:6d:83:85:34:96:b0:9f:43:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:CA:DC:7E:1A:50:1F:6F:E1:6E:00:C7:65:39:D4:FC:6C:59:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C4D46D8734F11EF9CCDFEBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:34:81:df:f3:39:e3:c8:ca:70:84:fb:50:a9:9f:45:84:62:
d2:be:df:d0:cd:3a:36:ed:7b:6a:5d:31:97:71:81:97:55:a3:
a1:66:fb:8b:68:d1:07:ee:05:0a:2d:ae:ed:26:95:6f:cd:ce:
07:6c:a1:bf:b2:e1:ea:7b:7b:ae:6a:72:ed:7b:b7:59:0c:0b:
c2:59:74:6e:99:24:e7:47:23:2b:61:8a:4b:1c:b2:a2:b3:5d:
01:1f:f6:42:a9:e9:6f:58:b2:38:6b:d8:be:94:6d:95:53:b1:
34:8b:b3:3c:f1:b5:98:49:a1:be:f8:09:2a:65:eb:de:87:c5:
c4:5f:9e:49:5e:aa:d1:4b:13:b9:7e:a1:e3:db:15:75:d1:da:
12:d2:3c:f9:0a:07:c8:00:5e:9a:80:9c:1b:32:d2:cf:40:6e:
08:89:d5:ac:d9:e7:86:0a:e4:8f:2b:8d:e4:24:aa:10:06:3e:
4b:3b:a5:86:ef:04:04:40:40:f6:75:9e:47:0c:86:02:4d:7f:
42:d9:03:6d:fb:89:32:48:5a:d4:07:3e:c6:41:61:c1:86:d4:
69:4b:7d:7e:54:17:0a:2f:a4:3a:3c:a6:ab:00:ee:97:f3:d4:
6a:74:81:84:a6:16:7d:1e:c2:43:f2:69:e8:3a:76:a5:07:12:
25:ac:d2:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALZaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE1MTA0NDAwWhcNMjUwODA4MTA0NDAwWjAYMRYw
FAYDVQQDEw02NmU2YmE3My04NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8z2MZuZ8xgBPS5OgySICZnGzktIre0YASkUKUqA/9fJjJY7KhOrTgkPc
+tuYkC2TUGe54JsuOi85O4xppe2n1UrLd9++aMlZlSCIZjBkFutBjXdOWxFfthkg
9yYLaPwJQlgHm21rTWjvNIV+TDgxC4th9siPRsmCMfdPbnwde70mhw4BbeVhlhgW
eMWEeKln3pzi657ZEZAKVh/uvdoZBAleUsMnIpI79+ZwyvBf6j1HBgvS2AQ4DE0P
lsnNtgR4NXVOLnh+1qNvkCKHOtj5IhRhB+NUMpVd7R6kGFvk8T7B3ROIbnsheWsH
JNfMTKo3sTVcObzEbYOFNJawn0OpHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJt9
ytx+GlAfb+FuAMdlOdT8bFmXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QzRENDZEODczNEYxMUVGOUNDREZFQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8sMA0GCSqGSIb3DQEBCwUA
A4IBAQCkNIHf8znjyMpwhPtQqZ9FhGLSvt/QzTo27XtqXTGXcYGXVaOhZvuLaNEH
7gUKLa7tJpVvzc4HbKG/suHqe3uuanLte7dZDAvCWXRumSTnRyMrYYpLHLKis10B
H/ZCqelvWLI4a9i+lG2VU7E0i7M88bWYSaG++AkqZeveh8XEX55JXqrRSxO5fqHj
2xV10doS0jz5CgfIAF6agJwbMtLPQG4IidWs2eeGCuSPK43kJKoQBj5LO6WG7wQE
QED2dZ5HDIYCTX9C2QNt+4kySFrUBz7GQWHBhtRpS31+VBcKL6Q6PKarAO6X89Rq
dIGEphZ9HsJD8mnoOnalBxIlrNKU
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org