Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71B51480953111EFA949DD57762E951A.roa
File: 71B51480953111EFA949DD57762E951A.roa (raw, json)
Hash identifier: PC3uY5GjwuZl1Bc80p4CRn45iu5qdQGIZ4OAaNZZDeY=
Subject key identifier: 3D:F2:BE:F7:6A:4E:5C:A3:C1:CF:38:DF:B7:E2:E0:90:95:CA:AE:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C967
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71B51480953111EFA949DD57762E951A.roa
Signing time: Mon 28 Oct 2024 13:35:06 +0000
ROA not before: Mon 28 Oct 2024 13:35:03 +0000
ROA not after: Tue 03 Dec 2024 13:35:03 +0000
asID: 272369
IP address blocks: 45.202.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51559 (0xc967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:35:03 2024 GMT
Not After : Dec 3 13:35:03 2024 GMT
Subject: CN=671f930a-ed41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:09:a3:8e:b9:a1:4c:2c:aa:69:bd:97:49:
35:79:1f:72:a0:4b:8d:e6:96:c9:0a:ea:c4:70:93:
c8:74:d8:7f:47:ce:0a:9a:b2:51:4c:a4:67:1f:90:
b4:1b:eb:a2:87:a4:e2:d3:e0:c8:12:6e:31:6a:90:
7e:94:c3:23:b3:02:04:50:57:b0:16:fc:f9:2c:bb:
8f:c7:5c:d2:d5:7e:35:a7:fa:6a:6b:78:17:3e:2f:
d1:99:f4:30:86:ea:bd:43:23:c3:a5:76:8d:c9:51:
b6:26:94:8c:38:39:8e:56:5b:34:a8:9b:ca:d4:15:
e8:66:3e:c0:65:90:df:1a:9f:62:98:98:b7:59:27:
0d:78:69:38:be:65:d5:7d:b2:2f:20:94:3a:90:d4:
d0:1b:40:34:73:88:56:37:75:37:25:18:e9:1d:8c:
2c:88:16:d9:2d:cd:01:07:80:ef:7c:cc:01:81:99:
3c:7a:24:61:06:fd:17:20:da:c2:a7:80:86:50:2f:
35:eb:6a:4b:25:e1:ed:22:ea:83:18:f7:4d:fb:86:
92:e5:3f:d1:64:13:ef:01:ec:05:eb:a7:74:2c:f4:
fd:ff:7b:03:0b:ff:3c:99:c8:ad:a9:ab:b4:d7:fe:
e4:6f:c1:2e:d8:6d:2e:1d:0c:d1:fd:af:76:ec:8f:
2c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:BE:F7:6A:4E:5C:A3:C1:CF:38:DF:B7:E2:E0:90:95:CA:AE:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71B51480953111EFA949DD57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.122.0/24
Signature Algorithm: sha256WithRSAEncryption
71:19:02:86:12:eb:1b:ee:7f:bb:23:e6:63:56:27:9e:f7:4b:
3a:b6:95:05:cf:81:66:a6:1f:af:2c:97:0e:64:4c:34:9c:78:
38:1d:df:aa:70:cc:c7:7e:2e:58:10:83:48:03:60:3e:1c:09:
d1:33:79:e8:a7:c9:ff:42:39:8e:66:7a:f2:ed:d3:1e:56:98:
72:09:26:4b:d6:ba:94:db:9c:01:60:c2:51:67:e7:c8:a4:63:
57:45:41:a8:fe:91:f5:2d:db:05:43:7e:15:72:f3:34:0b:84:
3b:b7:81:c1:d8:49:9e:79:3a:5d:be:1c:35:76:b9:31:af:a4:
5d:13:f8:68:6f:18:9a:1a:59:cc:a0:46:85:c5:29:f1:84:83:
f3:83:a9:78:28:e6:0d:cb:21:61:71:45:a1:84:98:dc:11:88:
23:7c:91:3a:27:c2:37:58:78:a1:3a:a2:74:a4:90:6e:04:22:
c4:ef:78:d0:e5:39:24:6a:56:93:47:29:9a:9f:49:2d:bd:fd:
d7:ce:48:65:be:f4:b9:0d:c1:e5:87:c4:05:bf:6e:87:0d:a0:
2e:7f:86:45:73:6a:ff:45:eb:31:a3:9b:fc:4a:a3:f8:42:4f:
3a:c7:cd:f3:bb:9f:df:12:63:df:22:ab:83:ac:5c:ac:3a:02:
f2:77:dc:48
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMlnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI4MTMzNTAzWhcNMjQxMjAzMTMzNTAzWjAYMRYw
FAYDVQQDEw02NzFmOTMwYS1lZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtIsJo465oUwsqmm9l0k1eR9yoEuN5pbJCurEcJPIdNh/R84KmrJRTKRn
H5C0G+uih6Ti0+DIEm4xapB+lMMjswIEUFewFvz5LLuPx1zS1X41p/pqa3gXPi/R
mfQwhuq9QyPDpXaNyVG2JpSMODmOVls0qJvK1BXoZj7AZZDfGp9imJi3WScNeGk4
vmXVfbIvIJQ6kNTQG0A0c4hWN3U3JRjpHYwsiBbZLc0BB4DvfMwBgZk8eiRhBv0X
INrCp4CGUC8162pLJeHtIuqDGPdN+4aS5T/RZBPvAewF66d0LPT9/3sDC/88mcit
qau01/7kb8Eu2G0uHQzR/a927I8sYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD3y
vvdqTlyjwc8437fi4JCVyq7mMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MUI1MTQ4MDk1MzExMUVGQTk0OURENTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcp6MA0GCSqGSIb3DQEBCwUA
A4IBAQBxGQKGEusb7n+7I+ZjViee90s6tpUFz4Fmph+vLJcOZEw0nHg4Hd+qcMzH
fi5YEINIA2A+HAnRM3nop8n/QjmOZnry7dMeVphyCSZL1rqU25wBYMJRZ+fIpGNX
RUGo/pH1LdsFQ34VcvM0C4Q7t4HB2EmeeTpdvhw1drkxr6RdE/hobxiaGlnMoEaF
xSnxhIPzg6l4KOYNyyFhcUWhhJjcEYgjfJE6J8I3WHihOqJ0pJBuBCLE73jQ5Tkk
alaTRyman0ktvf3XzkhlvvS5DcHlh8QFv26HDaAuf4ZFc2r/Resxo5v8SqP4Qk86
x83zu5/fEmPfIquDrFysOgLyd9xI
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:36 2024 by rpki-client on console-ams.rpki-client.org