Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8213396EA00E11EFBA23CF55762E951A.roa
File: 8213396EA00E11EFBA23CF55762E951A.roa (raw, json)
Hash identifier: 9E89KSJILoozh22AekTKEI87NIvPXZOUCpHIvtzfMl0=
Subject key identifier: 6A:6F:82:A0:4F:80:62:CE:3C:E3:11:3A:37:F4:3F:B5:EA:F2:85:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D14B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8213396EA00E11EFBA23CF55762E951A.roa
Signing time: Mon 11 Nov 2024 09:22:44 +0000
ROA not before: Mon 11 Nov 2024 09:22:41 +0000
ROA not after: Fri 22 Nov 2024 09:22:41 +0000
asID: 215208
IP address blocks: 45.202.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 09:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53579 (0xd14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 11 09:22:41 2024 GMT
Not After : Nov 22 09:22:41 2024 GMT
Subject: CN=6731cce4-09b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:8a:b7:f1:13:d2:1f:ec:77:4b:f5:41:bb:
91:85:db:83:e1:ea:e5:0e:23:1a:fc:ef:0e:00:98:
1b:b5:71:0d:8f:fa:ac:87:cd:21:6d:e7:c3:4b:d8:
b2:73:4d:8c:f5:91:9b:ad:2c:e3:63:c8:70:a6:f9:
8c:bb:67:78:09:86:f9:00:67:90:96:d3:be:c5:a5:
b6:8f:5f:06:1e:8f:60:29:3b:b2:87:fc:a3:a9:24:
42:c4:76:dc:e9:73:66:7f:14:62:b6:d1:62:aa:28:
db:98:4b:05:48:00:aa:c8:fb:8b:10:1e:54:87:6c:
30:a1:de:86:df:b8:8f:5e:66:e6:5f:19:3b:54:ba:
60:a6:6b:2d:75:0f:99:bd:05:40:0c:3a:c5:12:88:
4f:8d:34:c5:03:b9:c7:a2:5b:ea:83:96:fd:e5:7c:
70:e5:25:5f:1b:03:7c:a9:d1:0d:12:44:c3:34:26:
a3:f2:7c:b8:e2:5c:fa:e5:62:69:f7:c5:23:0b:1f:
84:fe:6f:86:83:42:ef:79:91:b8:c6:ec:88:30:f5:
8b:be:99:64:b9:87:e2:6d:3c:09:a1:16:9a:48:b2:
c1:57:89:2b:d0:c1:8a:45:b5:54:94:45:cf:d0:06:
cb:0e:98:71:e8:17:84:25:b5:81:02:86:d0:2c:2c:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:82:A0:4F:80:62:CE:3C:E3:11:3A:37:F4:3F:B5:EA:F2:85:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8213396EA00E11EFBA23CF55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.32.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f3:e8:d4:e0:01:73:b3:4b:c4:fe:67:18:e8:77:c4:3f:24:
92:c1:ac:57:d2:ea:5f:15:e5:0f:25:56:9c:83:af:53:f8:90:
7a:1d:3a:d0:78:2c:c9:9d:ef:d9:8f:76:f2:c3:c9:00:62:7d:
5e:22:ad:be:47:08:ad:57:49:85:2f:dd:71:ac:86:b0:21:63:
fe:31:19:87:e9:64:fc:64:42:3d:6a:6e:ab:60:26:ef:c5:0d:
7a:37:0b:44:a0:5a:34:11:4f:79:6d:15:6f:03:be:cd:db:1b:
a3:71:11:be:f5:86:05:5f:c6:56:05:76:06:0a:f5:ef:4e:90:
2f:d4:d9:08:40:85:df:51:5f:00:3a:ee:3c:26:3c:fe:55:2c:
4a:c6:d0:25:88:81:ec:19:d7:4a:a7:33:73:89:84:f9:6c:1b:
74:b0:e0:30:5a:a4:72:2f:8d:50:ca:f2:12:b2:da:28:8b:d0:
15:35:90:4e:8e:2e:c1:4e:fd:fa:22:e9:1e:94:e0:54:01:4c:
10:d3:99:a3:d4:7b:a2:d7:cb:3b:80:ec:4b:91:80:e9:84:99:
f8:94:23:73:ea:ce:39:fa:d4:e2:e6:58:76:59:53:f1:33:3c:
22:ce:74:f9:50:22:0d:9e:f4:c8:52:81:48:44:f7:44:eb:6f:
65:a9:73:d5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANFLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTExMDkyMjQxWhcNMjQxMTIyMDkyMjQxWjAYMRYw
FAYDVQQDEw02NzMxY2NlNC0wOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyYqKt/ET0h/sd0v1QbuRhduD4erlDiMa/O8OAJgbtXENj/qsh80hbefD
S9iyc02M9ZGbrSzjY8hwpvmMu2d4CYb5AGeQltO+xaW2j18GHo9gKTuyh/yjqSRC
xHbc6XNmfxRittFiqijbmEsFSACqyPuLEB5Uh2wwod6G37iPXmbmXxk7VLpgpmst
dQ+ZvQVADDrFEohPjTTFA7nHolvqg5b95Xxw5SVfGwN8qdENEkTDNCaj8ny44lz6
5WJp98UjCx+E/m+Gg0LveZG4xuyIMPWLvplkuYfibTwJoRaaSLLBV4kr0MGKRbVU
lEXP0AbLDphx6BeEJbWBAobQLCyiQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGpv
gqBPgGLOPOMROjf0P7Xq8oVmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjEzMzk2RUEwMEUxMUVGQkEyM0NGNTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcogMA0GCSqGSIb3DQEBCwUA
A4IBAQCI8+jU4AFzs0vE/mcY6HfEPySSwaxX0upfFeUPJVacg69T+JB6HTrQeCzJ
ne/Zj3byw8kAYn1eIq2+RwitV0mFL91xrIawIWP+MRmH6WT8ZEI9am6rYCbvxQ16
NwtEoFo0EU95bRVvA77N2xujcRG+9YYFX8ZWBXYGCvXvTpAv1NkIQIXfUV8AOu48
Jjz+VSxKxtAliIHsGddKpzNziYT5bBt0sOAwWqRyL41QyvISstooi9AVNZBOji7B
Tv36IukelOBUAUwQ05mj1Hui18s7gOxLkYDphJn4lCNz6s45+tTi5lh2WVPxMzwi
znT5UCINnvTIUoFIRPdE629lqXPV
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org