Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/792B4516911911EFA80EBF90762E951A.roa
File: 792B4516911911EFA80EBF90762E951A.roa (raw, json)
Hash identifier: ycNZmF6jZfRbSfHcTzoHCi0VcDCgZDZqB71nxWCqUUc=
Subject key identifier: AE:B9:3F:86:8A:ED:FA:57:D1:F2:3D:32:FC:A2:D0:92:65:E2:9F:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/792B4516911911EFA80EBF90762E951A.roa
Signing time: Wed 23 Oct 2024 08:33:26 +0000
ROA not before: Wed 23 Oct 2024 08:33:23 +0000
ROA not after: Sun 24 Nov 2024 08:33:23 +0000
asID: 214690
IP address blocks: 45.198.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51127 (0xc7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 08:33:23 2024 GMT
Not After : Nov 24 08:33:23 2024 GMT
Subject: CN=6718b4d6-0951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dc:96:06:7f:f1:9b:09:85:5f:8a:1d:96:b2:
aa:d7:d6:0a:51:9f:55:47:1d:5b:b5:6b:ff:45:b6:
70:5d:86:f5:34:ac:11:42:54:c4:5f:41:c8:5e:53:
4d:8e:a5:8e:a9:11:90:39:ea:cf:f1:58:3e:b3:e5:
0e:73:5b:f9:05:76:3a:30:55:95:19:12:b0:77:b1:
4d:7f:4a:1d:3d:05:36:af:1c:f6:ac:ad:82:ab:9e:
9d:92:5d:80:5e:04:7f:ee:f5:91:bc:68:36:25:b9:
ef:19:ae:4b:d9:28:42:fa:eb:d1:19:81:94:3a:a0:
da:86:8a:37:d4:fc:3f:74:55:d7:03:8b:cc:18:34:
2c:57:12:41:e0:f8:60:36:b1:1f:5a:75:4f:45:54:
9a:30:c6:8a:94:69:c7:a7:9b:bf:b6:5b:3b:3c:ec:
70:ae:06:09:22:86:a8:d7:04:0f:4a:28:56:e6:ad:
57:2f:4a:3a:17:26:42:ae:53:79:9c:25:30:89:e9:
ce:fa:03:0f:17:c6:df:95:b7:4a:1f:b3:05:2b:7d:
62:94:d6:a0:7f:3b:d8:01:72:f7:a8:02:3d:a3:53:
4e:82:18:db:61:23:1b:09:5d:88:62:cf:43:16:f9:
66:c1:44:f3:bf:41:cb:9d:d7:2d:07:41:aa:8c:e3:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:3F:86:8A:ED:FA:57:D1:F2:3D:32:FC:A2:D0:92:65:E2:9F:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/792B4516911911EFA80EBF90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.4.0/24
Signature Algorithm: sha256WithRSAEncryption
96:17:94:5a:e0:f7:e5:13:10:ea:4d:a5:6f:42:0e:ea:a2:43:
88:18:2b:96:3f:a2:3e:f7:ff:59:19:bc:cc:f7:59:22:6b:74:
95:37:55:82:41:0b:dc:36:25:53:31:c6:69:71:59:53:bf:15:
bd:1e:fe:b2:8e:d5:39:c9:b0:80:41:50:b0:07:42:30:0a:dd:
68:12:32:e5:ba:06:d3:63:98:dd:c2:05:70:38:f1:82:8f:0d:
ef:e4:fa:95:fd:6a:a8:42:20:40:67:5d:49:0f:94:4c:36:9a:
11:87:c5:ed:b4:d2:fb:ad:5a:da:fe:18:f5:dd:b9:07:c2:08:
a6:68:9a:ba:b2:2f:db:ed:c6:fe:d4:08:81:64:e7:13:f8:28:
be:30:78:a7:cc:88:fe:20:c0:20:16:4f:a3:21:1a:8a:21:00:
b5:ca:7a:50:0a:68:34:f6:02:a7:9d:21:40:22:2e:94:0c:98:
b2:87:e3:0d:51:ef:40:fd:4e:e6:eb:29:de:55:0a:83:cc:38:
f2:35:ee:fc:e2:bb:83:35:25:73:3b:9e:9e:4e:91:c5:fe:9f:
13:64:e1:1a:e7:d5:72:97:98:63:1c:7b:59:95:9b:64:95:0c:
d2:09:36:61:b3:b8:88:88:04:0d:bd:ae:ee:03:43:15:43:95:
77:f6:e5:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMe3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDIzMDgzMzIzWhcNMjQxMTI0MDgzMzIzWjAYMRYw
FAYDVQQDEw02NzE4YjRkNi0wOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA59yWBn/xmwmFX4odlrKq19YKUZ9VRx1btWv/RbZwXYb1NKwRQlTEX0HI
XlNNjqWOqRGQOerP8Vg+s+UOc1v5BXY6MFWVGRKwd7FNf0odPQU2rxz2rK2Cq56d
kl2AXgR/7vWRvGg2JbnvGa5L2ShC+uvRGYGUOqDahoo31Pw/dFXXA4vMGDQsVxJB
4PhgNrEfWnVPRVSaMMaKlGnHp5u/tls7POxwrgYJIoao1wQPSihW5q1XL0o6FyZC
rlN5nCUwienO+gMPF8bflbdKH7MFK31ilNagfzvYAXL3qAI9o1NOghjbYSMbCV2I
Ys9DFvlmwUTzv0HLndctB0GqjOO1vQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK65
P4aK7fpX0fI9Mvyi0JJl4p/jMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OTJCNDUxNjkxMTkxMUVGQTgwRUJGOTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcYEMA0GCSqGSIb3DQEBCwUA
A4IBAQCWF5Ra4PflExDqTaVvQg7qokOIGCuWP6I+9/9ZGbzM91kia3SVN1WCQQvc
NiVTMcZpcVlTvxW9Hv6yjtU5ybCAQVCwB0IwCt1oEjLlugbTY5jdwgVwOPGCjw3v
5PqV/WqoQiBAZ11JD5RMNpoRh8XttNL7rVra/hj13bkHwgimaJq6si/b7cb+1AiB
ZOcT+Ci+MHinzIj+IMAgFk+jIRqKIQC1ynpQCmg09gKnnSFAIi6UDJiyh+MNUe9A
/U7m6yneVQqDzDjyNe784ruDNSVzO56eTpHF/p8TZOEa59Vyl5hjHHtZlZtklQzS
CTZhs7iIiAQNva7uA0MVQ5V39uWm
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org