Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/869244BC43EE11EE91FCA15F4AD9E6FC.roa
File: 869244BC43EE11EE91FCA15F4AD9E6FC.roa (raw, json)
Hash identifier: z1loBy6vBxO96wn+QxYDXV0/hWU5ON7HjGt6SBusKV8=
Subject key identifier: 65:F5:35:C9:9D:4D:95:8B:CC:AF:4E:C4:91:DE:2D:14:3C:01:5C:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3702
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/869244BC43EE11EE91FCA15F4AD9E6FC.roa
Signing time: Sat 26 Aug 2023 08:57:04 +0000
ROA not before: Sat 26 Aug 2023 08:57:00 +0000
ROA not after: Wed 21 Aug 2024 08:57:00 +0000
asID: 138995
IP address blocks: 45.207.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14082 (0x3702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 08:57:00 2023 GMT
Not After : Aug 21 08:57:00 2024 GMT
Subject: CN=64e9be5f-3407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:89:eb:88:13:14:b4:a2:b5:d6:5a:1f:47:
c2:3d:3b:3a:37:c8:ab:0f:c4:3d:12:24:ec:c2:85:
bc:92:04:92:4c:62:c8:45:f4:b4:fb:f0:76:3b:3b:
66:08:c7:fd:55:37:16:af:70:2a:e6:b1:fa:e9:d4:
88:d9:14:2d:e6:06:95:2e:5b:50:98:e7:8c:74:1d:
e1:d8:f3:75:73:22:b2:b2:3a:6c:a5:6a:cb:6b:48:
f4:94:c3:95:e2:a8:b8:aa:63:08:02:c1:f7:7f:d0:
ce:b2:2c:2e:34:1f:dc:7d:9d:ae:9e:72:96:8e:10:
12:2e:6e:6a:d4:9a:4b:33:b8:2f:4d:9c:8b:3e:c2:
8e:53:a6:af:44:b9:11:fb:17:96:01:9c:b4:3a:4e:
87:a6:77:93:d5:61:3c:8c:b4:6e:5d:70:fd:64:2a:
d2:67:e4:fa:cb:3c:27:17:73:ff:82:8c:0a:59:88:
38:94:9a:bc:8d:bc:b7:b0:ba:a5:e5:18:5f:e7:ac:
11:eb:93:ab:da:db:58:3f:67:3c:4a:09:4f:e6:aa:
a4:b4:0b:c3:c3:b4:1b:6f:99:b7:4f:b0:ca:50:2c:
e9:c7:b6:f4:dd:ba:11:ec:a5:76:fb:de:91:87:12:
f7:ac:33:4f:1b:65:c9:6e:f9:e1:bb:16:83:a1:21:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:35:C9:9D:4D:95:8B:CC:AF:4E:C4:91:DE:2D:14:3C:01:5C:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/869244BC43EE11EE91FCA15F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a5:5a:09:0d:e6:c2:89:de:0f:eb:73:67:55:78:f1:e2:5c:
44:49:c7:e4:68:df:1c:65:bf:f5:38:ab:a0:2d:75:3f:6c:66:
6b:dc:f2:36:14:41:f4:f5:b4:7c:2e:63:34:1e:5d:9d:ba:c7:
48:78:09:dc:ba:08:1c:fc:1e:6f:36:ce:9e:60:95:da:0c:8b:
ee:c6:56:ff:c9:12:ed:50:28:09:8c:e4:0c:cb:5d:c9:6c:4e:
43:a7:04:fc:ee:4b:b9:a8:57:66:2d:9d:c5:bc:a8:17:8c:ea:
3d:66:02:0c:08:de:28:8a:74:53:d7:4e:99:49:09:e4:27:f6:
86:d2:f9:c0:fe:56:3a:49:bb:9b:66:1b:66:76:05:6a:df:52:
57:d2:64:4e:b1:4d:9c:c8:51:16:25:ab:1e:cc:ac:b7:94:c9:
3d:95:7a:57:0a:cd:74:81:4f:95:f3:78:84:dd:ea:13:e1:1c:
91:b6:da:55:70:a0:12:90:b0:ab:58:1e:9c:ad:9c:98:f6:3f:
f9:1a:6e:00:f0:51:91:40:c9:c4:c2:7b:fe:3c:8d:25:45:37:
dd:d3:1d:fb:f0:79:c6:fa:ab:27:ae:b4:7d:da:03:bb:9a:6d:
cc:77:a2:d3:a1:73:8c:e4:7f:b5:0b:95:a8:f6:12:b8:2f:1f:
62:47:25:94
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNwIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MjYwODU3MDBaFw0yNDA4MjEwODU3MDBaMBgxFjAU
BgNVBAMTDTY0ZTliZTVmLTM0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEsonriBMUtKK11lofR8I9Ozo3yKsPxD0SJOzChbySBJJMYshF9LT78HY7
O2YIx/1VNxavcCrmsfrp1IjZFC3mBpUuW1CY54x0HeHY83VzIrKyOmylastrSPSU
w5XiqLiqYwgCwfd/0M6yLC40H9x9na6ecpaOEBIubmrUmkszuC9NnIs+wo5Tpq9E
uRH7F5YBnLQ6Toemd5PVYTyMtG5dcP1kKtJn5PrLPCcXc/+CjApZiDiUmryNvLew
uqXlGF/nrBHrk6va21g/ZzxKCU/mqqS0C8PDtBtvmbdPsMpQLOnHtvTduhHspXb7
3pGHEvesM08bZclu+eG7FoOhIelhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUZfU1
yZ1NlYvMr07Ekd4tFDwBXAgwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg2OTI0NEJDNDNFRTExRUU5MUZDQTE1RjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtzwUwDQYJKoZIhvcNAQELBQAD
ggEBAIqlWgkN5sKJ3g/rc2dVePHiXERJx+Ro3xxlv/U4q6AtdT9sZmvc8jYUQfT1
tHwuYzQeXZ26x0h4Cdy6CBz8Hm82zp5gldoMi+7GVv/JEu1QKAmM5AzLXclsTkOn
BPzuS7moV2YtncW8qBeM6j1mAgwI3iiKdFPXTplJCeQn9obS+cD+VjpJu5tmG2Z2
BWrfUlfSZE6xTZzIURYlqx7MrLeUyT2VelcKzXSBT5XzeITd6hPhHJG22lVwoBKQ
sKtYHpytnJj2P/kabgDwUZFAycTCe/48jSVFN93THfvwecb6qyeutH3aA7uabcx3
otOhc4zkf7ULlaj2ErgvH2JHJZQ=
-----END CERTIFICATE-----
Generated at Mon May 6 03:08:41 2024 by rpki-client on console-fra.rpki-client.org