Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/810CA2F223A011EFB1FF92027DDC24C2.roa
File: 810CA2F223A011EFB1FF92027DDC24C2.roa (raw, json)
Hash identifier: jC3JBoaKHkOKk/5lUfFXEonaCIYhjQ0wEwDIsU8WfQ8=
Subject key identifier: F3:BB:FC:E5:D8:77:FB:38:D0:5F:9C:5C:C4:7A:87:3F:CE:0D:EE:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8F6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/810CA2F223A011EFB1FF92027DDC24C2.roa
Signing time: Thu 06 Jun 2024 01:02:54 +0000
ROA not before: Thu 06 Jun 2024 01:02:51 +0000
ROA not after: Sat 03 May 2025 01:02:51 +0000
asID: 4809
IP address blocks: 45.195.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36718 (0x8f6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 01:02:51 2024 GMT
Not After : May 3 01:02:51 2025 GMT
Subject: CN=66610abe-5b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:1a:c1:48:8f:b6:95:9e:66:59:4e:2a:31:
5e:8f:e9:bf:de:7d:e1:12:80:4a:c5:d9:cf:c2:d8:
a8:d6:8e:50:ae:70:50:8f:35:a8:4d:34:4e:06:12:
e8:86:d2:d8:b8:26:ff:d3:d8:bb:65:54:b5:a3:e7:
ce:04:e9:4c:56:51:f6:0e:d0:6e:80:27:b5:4f:a5:
ca:ad:2b:b5:9b:9b:90:fd:4d:1e:10:f0:b5:69:b1:
7b:67:08:18:a2:af:66:2b:51:65:25:de:5d:cd:dd:
82:f3:6b:b1:c4:f3:2b:55:39:48:5c:54:89:e1:6a:
a2:0c:b7:f3:3f:f2:fc:a5:bd:0f:cb:d1:d3:53:13:
34:ee:57:fb:c3:0a:0f:ab:36:02:52:16:31:8a:29:
d7:05:24:4b:e6:dd:29:bc:55:7c:8b:17:67:57:ff:
06:e1:46:de:42:11:99:33:b1:9a:71:19:7d:de:30:
a5:19:d2:cd:9b:b5:7b:4a:49:58:c6:df:01:75:07:
2f:3e:75:70:c5:63:05:0c:38:39:b2:89:73:9a:c1:
50:4d:a5:19:a0:8f:74:40:99:77:13:76:ee:81:b2:
cf:be:43:d5:39:33:08:e3:04:ad:5e:51:a7:ee:54:
df:3d:d9:1f:2a:53:ae:fe:36:7a:fb:22:f4:bc:fe:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:FC:E5:D8:77:FB:38:D0:5F:9C:5C:C4:7A:87:3F:CE:0D:EE:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/810CA2F223A011EFB1FF92027DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.6.0/24
Signature Algorithm: sha256WithRSAEncryption
75:13:58:fc:20:fc:1b:38:17:bb:6e:e3:40:ac:3f:66:2f:2f:
47:69:9e:27:56:c7:dd:fb:69:c7:6b:ce:a0:0f:2e:ed:fe:03:
ee:0d:62:ff:0c:43:6f:e3:4c:00:a1:4a:a1:d3:12:99:b9:5f:
2f:0f:8e:36:7f:1e:ae:3e:3e:36:e3:09:f0:1a:8d:f7:a4:9a:
d8:df:88:a9:fd:ef:30:67:e2:29:c3:4f:76:00:2f:17:ed:15:
af:c4:f8:4b:46:2e:9a:85:bf:42:6c:b3:50:19:10:eb:6d:ed:
c9:51:e8:5f:c6:85:32:49:9b:8b:3c:45:72:51:70:9b:ea:d0:
23:80:f8:90:64:d8:b6:08:8f:65:70:91:7b:e5:39:12:ac:e0:
c2:16:86:02:e0:98:5f:18:4b:bd:e2:49:00:52:88:45:55:30:
96:3d:31:58:a6:21:96:48:97:be:66:cf:01:5b:9a:16:83:f4:
09:ad:0e:31:ff:40:59:5e:92:96:84:88:c9:fc:d4:d5:6b:14:
63:4a:7c:0a:9f:4a:84:9e:04:37:c6:ed:bd:86:2f:85:d5:5c:
da:87:ca:01:d1:d8:af:a2:c0:d9:c5:5b:e8:9f:79:14:de:fa:
0d:b4:67:50:0b:5b:d4:07:cf:00:82:9f:30:0a:c4:8c:d7:68:
39:81:22:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAI9uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjA2MDEwMjUxWhcNMjUwNTAzMDEwMjUxWjAYMRYw
FAYDVQQDEw02NjYxMGFiZS01YjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA148awUiPtpWeZllOKjFej+m/3n3hEoBKxdnPwtio1o5QrnBQjzWoTTRO
BhLohtLYuCb/09i7ZVS1o+fOBOlMVlH2DtBugCe1T6XKrSu1m5uQ/U0eEPC1abF7
ZwgYoq9mK1FlJd5dzd2C82uxxPMrVTlIXFSJ4WqiDLfzP/L8pb0Py9HTUxM07lf7
wwoPqzYCUhYxiinXBSRL5t0pvFV8ixdnV/8G4UbeQhGZM7GacRl93jClGdLNm7V7
SklYxt8BdQcvPnVwxWMFDDg5solzmsFQTaUZoI90QJl3E3bugbLPvkPVOTMI4wSt
XlGn7lTfPdkfKlOu/jZ6+yL0vP5V6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPO7
/OXYd/s40F+cXMR6hz/ODe7zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTBDQTJGMjIzQTAxMUVGQjFGRjkyMDI3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcMGMA0GCSqGSIb3DQEBCwUA
A4IBAQB1E1j8IPwbOBe7buNArD9mLy9HaZ4nVsfd+2nHa86gDy7t/gPuDWL/DENv
40wAoUqh0xKZuV8vD442fx6uPj424wnwGo33pJrY34ip/e8wZ+Ipw092AC8X7RWv
xPhLRi6ahb9CbLNQGRDrbe3JUehfxoUySZuLPEVyUXCb6tAjgPiQZNi2CI9lcJF7
5TkSrODCFoYC4JhfGEu94kkAUohFVTCWPTFYpiGWSJe+Zs8BW5oWg/QJrQ4x/0BZ
XpKWhIjJ/NTVaxRjSnwKn0qEngQ3xu29hi+F1Vzah8oB0divosDZxVvon3kU3voN
tGdQC1vUB88Agp8wCsSM12g5gSJP
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org