Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F985420FDF11EEA529E12A4AD9E6FC.roa
File: 82F985420FDF11EEA529E12A4AD9E6FC.roa (raw, json)
Hash identifier: 9EeInBPQQjODiEHRBPASl7O0gLKt5uwup0Ktx89lLPE=
Subject key identifier: B9:51:51:F7:A1:B5:1A:7F:AC:3B:28:76:56:31:57:97:1C:CB:73:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2CBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F985420FDF11EEA529E12A4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 02:58:34 +0000
ROA not before: Wed 21 Jun 2023 02:58:31 +0000
ROA not after: Wed 22 May 2024 02:58:31 +0000
asID: 209242
IP address blocks: 45.205.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11455 (0x2cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 02:58:31 2023 GMT
Not After : May 22 02:58:31 2024 GMT
Subject: CN=6492675a-5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:99:55:37:f6:45:fe:34:21:7b:55:b3:7e:
57:7d:db:fa:21:c5:7f:2d:21:2e:44:d1:51:5e:47:
07:7f:98:e8:48:cb:db:f6:1e:1f:65:da:ce:d4:92:
e9:17:d1:c5:95:0a:01:3b:29:9e:e3:1d:64:d7:53:
ba:c3:db:0b:7b:09:af:d3:f6:d0:48:fb:99:62:12:
9b:9d:9b:82:64:fb:86:f6:b3:c4:fc:4c:53:29:fb:
fd:15:0c:59:43:a4:84:68:c7:61:3e:a2:34:6d:9d:
b5:79:65:2b:90:fb:3d:f0:8a:1f:d5:69:40:6b:19:
09:a1:d2:62:82:e8:ee:3f:71:39:d6:f4:a3:d0:fc:
6d:09:85:8a:5b:65:9e:d0:87:d6:51:e0:1c:e9:81:
0a:cf:2c:ff:3f:83:23:9e:47:14:ad:56:92:71:8a:
4d:d6:4d:1d:e9:3a:72:c4:13:77:43:e9:64:59:03:
5e:14:f2:8e:cd:31:ad:7f:40:a0:3c:45:34:99:49:
80:1c:3e:70:df:15:2d:86:4a:ed:d5:9a:b7:d8:96:
8b:91:e6:4d:e3:d0:fc:f4:d5:60:94:23:2b:21:0c:
80:3e:5c:30:cd:d9:51:ae:ca:86:05:85:77:48:fc:
24:3d:51:46:a9:df:9f:62:52:c3:d9:1a:96:76:d6:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:51:F7:A1:B5:1A:7F:AC:3B:28:76:56:31:57:97:1C:CB:73:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82F985420FDF11EEA529E12A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:c8:06:7f:6b:59:47:60:5b:65:38:54:2f:c0:6c:3f:de:
da:59:28:75:2c:1a:25:fb:88:d0:82:83:c9:7f:01:ac:e6:b5:
48:07:c0:61:6c:40:d9:ec:9e:42:1c:33:48:9a:15:cb:c5:15:
0f:46:f9:43:9d:8d:f3:e0:61:4d:69:47:70:a0:62:d7:c3:13:
27:4a:71:0d:11:fc:83:57:36:f5:0a:4b:d2:e1:18:07:e7:f3:
4d:98:76:de:47:a3:a1:a3:d7:24:47:8c:c8:4c:5d:51:fa:23:
4b:64:fb:16:3b:9a:2e:14:ca:83:91:5f:74:6f:02:fa:92:49:
7a:fa:cc:07:e9:bb:b4:fe:13:04:00:f4:c7:4f:07:3a:33:85:
64:03:95:8c:22:c2:14:de:a4:9d:57:70:df:7e:dc:57:12:df:
d0:8b:8c:1a:68:92:2c:7a:c9:a3:ee:07:47:be:24:8d:ca:74:
6d:05:f1:3f:a2:0a:a5:86:11:34:2f:7d:4d:50:70:0b:03:d1:
34:f7:b0:9a:e8:b7:4b:d6:e7:a7:ae:a9:cc:d9:c2:cb:51:76:
99:23:aa:99:e0:d5:9a:22:9e:0a:45:b8:84:2f:2a:43:32:c3:
06:e5:4f:07:19:f2:9e:87:ad:b8:a6:9f:7f:e9:52:de:20:a3:
39:7b:81:33
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLL8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MjEwMjU4MzFaFw0yNDA1MjIwMjU4MzFaMBgxFjAU
BgNVBAMTDTY0OTI2NzVhLTVkMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsN5lVN/ZF/jQhe1Wzfld92/ohxX8tIS5E0VFeRwd/mOhIy9v2Hh9l2s7U
kukX0cWVCgE7KZ7jHWTXU7rD2wt7Ca/T9tBI+5liEpudm4Jk+4b2s8T8TFMp+/0V
DFlDpIRox2E+ojRtnbV5ZSuQ+z3wih/VaUBrGQmh0mKC6O4/cTnW9KPQ/G0JhYpb
ZZ7Qh9ZR4BzpgQrPLP8/gyOeRxStVpJxik3WTR3pOnLEE3dD6WRZA14U8o7NMa1/
QKA8RTSZSYAcPnDfFS2GSu3VmrfYlouR5k3j0Pz01WCUIyshDIA+XDDN2VGuyoYF
hXdI/CQ9UUap359iUsPZGpZ21qp3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUuVFR
96G1Gn+sOyh2VjFXlxzLc6IwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzgyRjk4NTQyMEZERjExRUVBNTI5RTEyQTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzQAwDQYJKoZIhvcNAQELBQAD
ggEBAC4TyAZ/a1lHYFtlOFQvwGw/3tpZKHUsGiX7iNCCg8l/AazmtUgHwGFsQNns
nkIcM0iaFcvFFQ9G+UOdjfPgYU1pR3CgYtfDEydKcQ0R/INXNvUKS9LhGAfn802Y
dt5Ho6Gj1yRHjMhMXVH6I0tk+xY7mi4UyoORX3RvAvqSSXr6zAfpu7T+EwQA9MdP
BzozhWQDlYwiwhTepJ1XcN9+3FcS39CLjBpokix6yaPuB0e+JI3KdG0F8T+iCqWG
ETQvfU1QcAsD0TT3sJrot0vW56euqczZwstRdpkjqpng1ZoingpFuIQvKkMywwbl
TwcZ8p6Hrbimn3/pUt4gozl7gTM=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org