Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81D67B301A3311EE8D92D47A4AD9E6FC.roa
File: 81D67B301A3311EE8D92D47A4AD9E6FC.roa (raw, json)
Hash identifier: dxxQYqUQ717iJtZfGXVONUZS5NMyYo3FEujsCyJRj3w=
Subject key identifier: 21:DC:0D:CD:CA:88:05:7C:2C:0B:B5:96:0E:7F:F3:CD:C8:24:D4:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2E97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81D67B301A3311EE8D92D47A4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 06:25:02 +0000
ROA not before: Wed 27 Dec 2023 06:24:58 +0000
ROA not after: Sun 16 Jun 2024 06:24:58 +0000
asID: 270068
IP address blocks: 45.195.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11927 (0x2e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 27 06:24:58 2023 GMT
Not After : Jun 16 06:24:58 2024 GMT
Subject: CN=64a3bb3e-45bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:3e:bd:cc:1f:dd:dc:0b:5c:82:7f:e8:fa:
a2:4c:aa:70:15:c9:be:0a:33:91:92:24:e6:e5:0f:
4e:03:4c:92:fc:36:c9:62:f8:a1:7c:8e:f4:a5:84:
5b:6d:10:03:61:c4:05:2c:34:59:a3:e1:25:51:d4:
84:37:87:5c:f1:66:b0:cb:2f:d1:58:cd:12:6e:9c:
f4:a4:54:ca:cc:b6:ac:dd:b7:81:e9:ad:42:8c:39:
02:b7:85:e7:f1:cc:a0:06:95:96:95:f3:89:5c:93:
42:26:71:d0:74:75:60:57:29:02:07:29:0c:67:b7:
28:b7:88:8f:ba:8f:f8:b3:97:bc:1f:71:79:67:70:
38:ef:bd:d4:ee:04:ee:9a:27:07:69:da:c8:bd:9e:
f6:90:3f:ce:a9:ab:f4:78:82:8a:d6:9e:73:ef:b1:
dd:14:88:c1:66:77:c7:40:71:62:5a:e3:d8:48:b6:
6c:5a:66:5e:35:61:11:46:73:df:c4:fd:1d:61:c5:
fd:a7:0e:a8:60:a5:18:28:8f:27:4f:ab:90:26:91:
aa:f9:f9:d6:5b:c8:5f:41:28:a8:6d:52:b5:62:69:
f8:de:49:37:dd:99:a1:5a:85:82:ed:33:e5:0c:16:
97:5a:c0:a8:5e:83:1a:99:ca:a3:4f:f1:7a:97:e8:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DC:0D:CD:CA:88:05:7C:2C:0B:B5:96:0E:7F:F3:CD:C8:24:D4:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81D67B301A3311EE8D92D47A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.88.0/24
Signature Algorithm: sha256WithRSAEncryption
af:cd:8e:59:32:f2:dc:32:c9:15:b0:9e:7c:b2:2a:a7:b1:94:
93:9b:c6:cd:9f:1e:79:2d:d8:c4:0b:26:ca:0b:d8:94:c3:3d:
08:8e:16:ed:ce:b2:06:7e:2e:45:94:99:a8:f0:bd:ac:92:a3:
c4:cf:15:3c:2e:1f:b5:f4:eb:6c:3f:f3:af:bd:ff:b0:c5:4b:
ec:fc:16:7b:f0:63:c3:02:9e:7c:9e:e4:76:6e:9d:9b:f3:18:
7a:f3:ca:e7:f6:57:d0:5e:b1:6d:67:b7:bf:76:ec:96:ae:99:
6e:e7:2d:d1:ec:34:bf:68:d0:5b:59:25:4e:a1:be:b8:5c:8f:
f8:ad:fa:51:6c:c7:de:b4:97:21:fe:91:90:43:d1:00:52:9b:
c6:77:09:85:91:99:46:13:d6:e0:a0:c8:7a:a3:10:e2:10:f8:
4a:94:8b:73:7b:90:da:43:c4:29:58:c1:36:91:14:cf:94:0a:
01:ae:4f:63:39:bf:2f:03:4a:54:5a:02:56:15:49:e2:3d:24:
be:2d:a4:47:75:42:bc:63:0f:8d:c0:1f:11:0e:bf:c8:a7:7d:
1b:10:74:89:2d:74:9d:f1:78:28:0d:d5:08:c7:29:28:31:ac:
2f:e1:c6:b2:96:20:3c:22:b2:cc:1b:a5:5f:ab:fe:15:24:6b:
17:4f:cf:fa
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEyMjcwNjI0NThaFw0yNDA2MTYwNjI0NThaMBgxFjAU
BgNVBAMTDTY0YTNiYjNlLTQ1YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDsT69zB/d3Atcgn/o+qJMqnAVyb4KM5GSJOblD04DTJL8Nsli+KF8jvSl
hFttEANhxAUsNFmj4SVR1IQ3h1zxZrDLL9FYzRJunPSkVMrMtqzdt4HprUKMOQK3
hefxzKAGlZaV84lck0ImcdB0dWBXKQIHKQxntyi3iI+6j/izl7wfcXlncDjvvdTu
BO6aJwdp2si9nvaQP86pq/R4gorWnnPvsd0UiMFmd8dAcWJa49hItmxaZl41YRFG
c9/E/R1hxf2nDqhgpRgojydPq5Amkar5+dZbyF9BKKhtUrViafjeSTfdmaFahYLt
M+UMFpdawKhegxqZyqNP8XqX6PC5AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUIdwN
zcqIBXwsC7WWDn/zzcgk1AkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzgxRDY3QjMwMUEzMzExRUU4RDkyRDQ3QTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw1gwDQYJKoZIhvcNAQELBQAD
ggEBAK/Njlky8twyyRWwnnyyKqexlJObxs2fHnkt2MQLJsoL2JTDPQiOFu3OsgZ+
LkWUmajwvaySo8TPFTwuH7X062w/86+9/7DFS+z8FnvwY8MCnnye5HZunZvzGHrz
yuf2V9BesW1nt7927JaumW7nLdHsNL9o0FtZJU6hvrhcj/it+lFsx960lyH+kZBD
0QBSm8Z3CYWRmUYT1uCgyHqjEOIQ+EqUi3N7kNpDxClYwTaRFM+UCgGuT2M5vy8D
SlRaAlYVSeI9JL4tpEd1QrxjD43AHxEOv8infRsQdIktdJ3xeCgN1QjHKSgxrC/h
xrKWIDwisswbpV+r/hUkaxdPz/o=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org