Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/721D00C87EC011EE89F374724AD9E6FC.roa
File: 721D00C87EC011EE89F374724AD9E6FC.roa (raw, json)
Hash identifier: 9r6NT5BqEI1UETTBGdbeK4njPT/NUiXCV1XwtJAJPVk=
Subject key identifier: ED:FC:0A:E1:B9:C0:C3:F6:AF:11:69:2E:56:18:1B:EE:65:2E:E8:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 450D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/721D00C87EC011EE89F374724AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:25:51 +0000
ROA not before: Thu 09 Nov 2023 05:25:47 +0000
ROA not after: Thu 07 Nov 2024 05:25:47 +0000
asID: 133847
IP address blocks: 45.200.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17677 (0x450d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:25:47 2023 GMT
Not After : Nov 7 05:25:47 2024 GMT
Subject: CN=654c6d5f-a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:c1:3a:3c:06:2b:e3:07:e9:fc:e8:71:7b:
7d:77:0b:f3:34:8e:17:ae:df:49:f6:18:45:b7:cf:
d8:6c:db:05:54:78:a9:c0:4b:72:66:d9:96:3b:7c:
03:cf:88:89:3f:bb:63:4e:1b:3e:87:cc:0c:86:f0:
6f:f7:cb:7b:c5:25:2a:24:9a:d6:45:6a:fb:ea:71:
3c:a1:7a:99:e0:82:af:ad:60:74:4d:2b:41:71:f3:
1a:7a:9a:c4:d9:10:cc:70:8c:92:39:73:c0:f7:d5:
88:46:d5:a4:d5:56:8f:0e:56:2c:fb:fa:99:bc:32:
45:eb:ad:0f:a9:4f:85:d2:d7:10:6a:bc:13:87:52:
13:9f:f2:57:ee:80:41:f8:97:22:f6:b0:b2:be:5b:
d4:ff:d9:82:26:64:da:75:df:47:0f:21:c1:2c:40:
71:9f:63:9b:65:fc:d3:c7:62:44:2f:17:a5:73:9d:
dc:b2:c1:80:86:5f:bb:5c:1d:3b:06:19:44:d8:96:
42:6b:ad:5d:bc:d8:c2:96:ea:99:60:f8:0a:4b:fc:
cf:b4:4f:76:bb:ae:32:bf:78:a4:68:7f:bd:42:ba:
cf:25:6a:18:ab:3c:2f:a8:c6:06:fe:2c:88:c6:6a:
0d:a2:b6:d5:0a:45:f8:4c:12:1d:9d:e0:17:e8:f7:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FC:0A:E1:B9:C0:C3:F6:AF:11:69:2E:56:18:1B:EE:65:2E:E8:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/721D00C87EC011EE89F374724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
60:11:67:9d:29:4e:97:f0:58:93:78:1d:a3:fc:fa:a4:5c:d6:
59:bb:7b:9b:0d:78:4c:42:8d:7f:8b:b3:25:ec:df:9f:12:59:
97:f7:ee:19:c9:5c:69:c3:ae:09:b4:9e:64:3b:99:95:46:c9:
80:2c:b6:de:ac:78:7b:a4:63:18:d6:fa:ee:17:ad:27:3b:3d:
68:70:43:27:bc:3f:a6:6f:8e:db:14:6c:1b:75:31:a6:98:06:
0c:1e:8e:e4:cc:8e:53:4c:4e:a2:2a:c3:8a:a5:03:99:14:55:
13:f3:df:2a:b1:1c:8a:1c:6d:e2:1f:4e:38:50:3a:08:34:34:
d8:2d:2a:95:fa:67:f6:36:e1:98:a4:17:c2:f1:a8:69:37:c0:
d9:c9:69:cf:e0:f0:ff:f1:ab:77:e8:50:27:bd:f1:d3:44:4e:
97:5e:60:6c:28:00:99:2b:e4:fa:12:e3:36:35:cc:fb:79:dd:
8b:e9:7e:1a:52:ee:d5:74:7c:e7:00:fd:ed:a2:ef:1b:a1:cb:
c8:b6:dd:20:a6:cd:3f:44:54:24:80:01:5c:e1:f2:d3:26:5c:
b1:80:28:08:e5:14:97:93:ca:77:3e:0d:3b:a1:67:38:45:15:
73:9f:b3:6c:f1:2e:6c:31:4d:80:1e:28:23:b8:8f:eb:ef:9f:
14:7c:7e:fc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRQ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNTI1NDdaFw0yNDExMDcwNTI1NDdaMBgxFjAU
BgNVBAMTDTY1NGM2ZDVmLWE3NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDyV8E6PAYr4wfp/Ohxe313C/M0jheu30n2GEW3z9hs2wVUeKnAS3Jm2ZY7
fAPPiIk/u2NOGz6HzAyG8G/3y3vFJSokmtZFavvqcTyhepnggq+tYHRNK0Fx8xp6
msTZEMxwjJI5c8D31YhG1aTVVo8OViz7+pm8MkXrrQ+pT4XS1xBqvBOHUhOf8lfu
gEH4lyL2sLK+W9T/2YImZNp130cPIcEsQHGfY5tl/NPHYkQvF6VzndyywYCGX7tc
HTsGGUTYlkJrrV282MKW6plg+ApL/M+0T3a7rjK/eKRof71Cus8lahirPC+oxgb+
LIjGag2ittUKRfhMEh2d4Bfo90hpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7fwK
4bnAw/avEWkuVhgb7mUu6BswHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzcyMUQwMEM4N0VDMDExRUU4OUYzNzQ3MjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyE4wDQYJKoZIhvcNAQELBQAD
ggEBAGARZ50pTpfwWJN4HaP8+qRc1lm7e5sNeExCjX+LsyXs358SWZf37hnJXGnD
rgm0nmQ7mZVGyYAstt6seHukYxjW+u4XrSc7PWhwQye8P6ZvjtsUbBt1MaaYBgwe
juTMjlNMTqIqw4qlA5kUVRPz3yqxHIocbeIfTjhQOgg0NNgtKpX6Z/Y24ZikF8Lx
qGk3wNnJac/g8P/xq3foUCe98dNETpdeYGwoAJkr5PoS4zY1zPt53YvpfhpS7tV0
fOcA/e2i7xuhy8i23SCmzT9EVCSAAVzh8tMmXLGAKAjlFJeTync+DTuhZzhFFXOf
s2zxLmwxTYAeKCO4j+vvnxR8fvw=
-----END CERTIFICATE-----
Generated at Tue May 7 01:58:04 2024 by rpki-client on console-fra.rpki-client.org