Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E0D0D6AA73D11EFA6C69FAA762E951A.roa
File: 6E0D0D6AA73D11EFA6C69FAA762E951A.roa (raw, json)
Hash identifier: Tk7QbLd/ASYiF8Z+ipVS9rKkG5FDpQTnI/vwH4fKNoA=
Subject key identifier: F1:F3:A0:A3:D9:F9:62:A2:81:0A:F6:2F:CC:B3:2B:1C:23:6B:39:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D621
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E0D0D6AA73D11EFA6C69FAA762E951A.roa
Signing time: Wed 20 Nov 2024 12:46:15 +0000
ROA not before: Wed 20 Nov 2024 12:46:12 +0000
ROA not after: Sat 30 Nov 2024 12:46:12 +0000
asID: 48031
IP address blocks: 45.200.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54817 (0xd621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:46:12 2024 GMT
Not After : Nov 30 12:46:12 2024 GMT
Subject: CN=673dda17-d39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:22:f9:a5:e5:bc:05:76:9c:66:e0:7a:7e:
32:f8:cc:42:8f:eb:84:2c:9c:29:32:f5:8b:33:4c:
33:59:77:aa:da:9f:c6:12:17:bb:74:9f:73:66:d7:
d3:aa:d5:5a:d4:98:0c:35:88:4b:58:8f:14:51:72:
eb:15:eb:6d:92:44:84:9e:d0:59:84:68:fb:a5:8f:
11:5e:61:d7:8e:a2:87:a7:80:b0:5a:ed:05:9b:25:
1d:cf:84:d8:46:c1:86:98:2d:30:83:af:12:d5:a0:
67:1c:55:7d:ac:17:79:a4:50:cb:f7:77:7d:c9:fa:
c7:17:99:e2:5f:92:fe:f3:d9:8c:c3:f5:14:a6:f5:
a6:28:c4:05:f5:81:20:59:80:99:54:94:65:2a:55:
0a:c4:fb:61:ce:6a:0d:09:1f:dc:e6:a8:a6:10:4e:
55:34:3c:0c:66:a7:9b:6d:4f:c5:ad:15:cd:c5:11:
ce:a2:c1:16:3a:e3:11:67:2e:34:5f:af:dd:7f:97:
62:9f:57:13:38:02:16:b0:ee:83:a3:ab:9f:dc:fc:
5b:9c:4b:48:7c:4f:82:3d:e2:0d:62:5d:7f:70:db:
2a:5c:88:df:ce:91:61:81:21:a1:6f:94:51:e3:21:
22:84:64:4e:59:fa:04:b3:1c:b3:3c:97:da:2f:2a:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:A0:A3:D9:F9:62:A2:81:0A:F6:2F:CC:B3:2B:1C:23:6B:39:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E0D0D6AA73D11EFA6C69FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:05:da:81:6b:e4:29:f1:0e:b7:56:15:76:ca:c4:32:5d:61:
ac:35:2f:a3:23:25:f6:42:5b:55:f0:80:18:32:11:cb:99:ad:
9f:68:50:57:98:58:d0:2c:10:3a:65:b6:db:0d:e7:64:f4:d5:
27:9a:13:2e:5f:df:bd:62:90:f4:9f:6e:b7:e2:09:b8:1e:2a:
2a:e8:89:65:ec:09:4c:05:f0:f5:b3:46:4b:5c:e2:55:39:72:
e2:26:20:4f:78:ea:0b:24:c5:a7:20:fd:7f:b1:59:57:07:01:
39:32:b7:41:d8:2f:b1:a0:a9:17:80:3b:77:ea:56:da:14:18:
02:34:27:83:45:2c:15:90:ca:d6:da:be:5e:25:dd:63:b5:d7:
cc:a7:22:2b:6c:18:e7:36:89:ac:5f:dc:50:46:c9:23:c1:44:
64:d9:5e:37:fd:13:1b:9a:af:4e:d3:04:12:df:74:a5:84:b6:
43:61:00:c8:c2:a5:51:96:95:d1:b1:bf:e3:c7:d6:f8:4d:56:
80:99:ee:b4:da:02:e6:be:46:23:ed:bb:ab:ad:97:d2:42:1f:
28:73:fd:ef:33:d9:5c:5e:10:e6:86:14:4e:7f:e8:b4:62:5b:
c4:69:c2:c1:59:18:e0:94:5f:fd:0e:35:47:6e:a5:cc:f4:3a:
39:eb:e4:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANYhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMTI0NjEyWhcNMjQxMTMwMTI0NjEyWjAYMRYw
FAYDVQQDEw02NzNkZGExNy1kMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx9ki+aXlvAV2nGbgen4y+MxCj+uELJwpMvWLM0wzWXeq2p/GEhe7dJ9z
ZtfTqtVa1JgMNYhLWI8UUXLrFettkkSEntBZhGj7pY8RXmHXjqKHp4CwWu0FmyUd
z4TYRsGGmC0wg68S1aBnHFV9rBd5pFDL93d9yfrHF5niX5L+89mMw/UUpvWmKMQF
9YEgWYCZVJRlKlUKxPthzmoNCR/c5qimEE5VNDwMZqebbU/FrRXNxRHOosEWOuMR
Zy40X6/df5din1cTOAIWsO6Do6uf3PxbnEtIfE+CPeINYl1/cNsqXIjfzpFhgSGh
b5RR4yEihGROWfoEsxyzPJfaLypt4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPHz
oKPZ+WKigQr2L8yzKxwjaznsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RTBEMEQ2QUE3M0QxMUVGQTZDNjlGQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLci6MA0GCSqGSIb3DQEBCwUA
A4IBAQBrBdqBa+Qp8Q63VhV2ysQyXWGsNS+jIyX2QltV8IAYMhHLma2faFBXmFjQ
LBA6ZbbbDedk9NUnmhMuX9+9YpD0n2634gm4Hioq6Ill7AlMBfD1s0ZLXOJVOXLi
JiBPeOoLJMWnIP1/sVlXBwE5MrdB2C+xoKkXgDt36lbaFBgCNCeDRSwVkMrW2r5e
Jd1jtdfMpyIrbBjnNomsX9xQRskjwURk2V43/RMbmq9O0wQS33SlhLZDYQDIwqVR
lpXRsb/jx9b4TVaAme602gLmvkYj7burrZfSQh8oc/3vM9lcXhDmhhROf+i0YlvE
acLBWRjglF/9DjVHbqXM9Do56+Rz
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org