Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C00EF14719E11EFB4ACC659762E951A.roa
File: 8C00EF14719E11EFB4ACC659762E951A.roa (raw, json)
Hash identifier: WmjU85R3ansud48DgKeRLko8DfkzCXve3ohzu4mAO0g=
Subject key identifier: FA:3A:F2:C4:26:C2:38:7B:1E:E0:84:BA:5A:E6:30:96:E0:90:E7:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B530
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C00EF14719E11EFB4ACC659762E951A.roa
Signing time: Fri 13 Sep 2024 07:05:24 +0000
ROA not before: Fri 13 Sep 2024 07:05:21 +0000
ROA not after: Fri 08 Aug 2025 07:05:21 +0000
asID: 133861
IP address blocks: 45.207.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46384 (0xb530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 13 07:05:21 2024 GMT
Not After : Aug 8 07:05:21 2025 GMT
Subject: CN=66e3e434-590c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:4d:a7:ab:f2:f8:f4:61:de:9a:31:e9:9d:
bd:ad:13:51:2d:3e:51:51:4f:08:83:df:f0:2a:4b:
bd:c3:38:56:5f:b5:5d:bb:9a:ee:2b:43:b6:91:0c:
c4:47:d8:53:20:84:25:d0:a6:d3:87:6d:6c:9d:c1:
b2:60:4c:34:6c:10:1e:0a:4a:91:c2:e0:21:6f:b2:
f5:56:2a:49:48:5d:b8:d4:bc:16:8f:9a:32:cd:de:
ef:aa:58:e4:9b:b7:39:6d:4d:ad:c2:80:19:ce:37:
79:18:9c:38:c5:53:b1:53:a4:7e:f7:a0:85:80:88:
79:33:96:5e:c6:9b:07:fd:9c:84:d5:71:07:81:66:
67:e4:b0:05:54:dc:b5:58:00:d0:e3:2b:eb:bd:a9:
61:dd:8b:36:ce:a5:b5:73:1f:42:4b:f5:f1:8c:fb:
b9:a0:3e:80:4d:07:f7:88:63:c0:8f:ff:96:81:91:
50:5a:26:f9:7c:e0:f2:cf:6c:17:6b:cb:bd:8e:33:
c3:69:a1:95:43:e2:cb:d5:4b:c6:10:8f:99:68:0d:
41:25:cc:d8:84:7e:06:67:71:b3:c5:a2:b3:04:8c:
e5:f3:b9:33:85:6b:40:c3:e8:4c:a2:2d:c4:8d:f0:
55:57:5c:98:35:ca:30:d5:71:63:a5:9a:a6:9e:3e:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:F2:C4:26:C2:38:7B:1E:E0:84:BA:5A:E6:30:96:E0:90:E7:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C00EF14719E11EFB4ACC659762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/23
Signature Algorithm: sha256WithRSAEncryption
35:7c:db:31:5f:6e:f0:ea:e2:46:e6:a7:c1:94:4f:3c:1a:8e:
ee:d1:bd:9c:ff:20:85:e0:b7:f7:c8:6e:33:11:39:92:77:5e:
2c:55:fc:6c:2c:ae:1f:e4:d9:d0:c7:7b:ac:aa:9c:28:7e:41:
c1:41:32:a9:85:2b:f6:ca:db:6d:7c:04:cb:e6:0b:e8:f5:4e:
28:b1:d0:d2:cf:2c:ea:07:06:58:7c:36:37:ce:5d:d2:39:09:
82:f9:a3:40:b7:eb:eb:f3:14:a8:8a:cd:87:af:3e:a9:b0:b8:
a3:8f:e0:a3:b5:18:8d:9e:ea:3f:be:05:17:6c:19:f4:0b:dc:
e7:32:5d:28:aa:26:28:7f:dd:11:6c:6f:b4:34:0e:67:ef:a5:
e3:0a:ba:cb:b9:4b:d1:ba:ab:4b:cf:78:fd:28:35:8c:8e:d0:
78:19:b6:f6:4b:c6:4b:c4:78:1a:59:57:6e:68:a6:6a:73:d9:
ae:01:13:4f:26:72:43:46:5a:f9:7e:6a:47:a3:b5:36:8e:5e:
ed:3c:5c:28:b5:9e:0c:d6:b0:aa:02:89:2e:84:16:c1:7e:e7:
b7:23:ce:a8:da:56:31:80:65:07:19:60:3e:ec:34:c8:82:a9:
82:9e:3d:b1:8a:fe:3d:8c:c6:23:f3:33:bc:e5:5f:98:8a:d7:
67:f9:ff:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALUwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTEzMDcwNTIxWhcNMjUwODA4MDcwNTIxWjAYMRYw
FAYDVQQDEw02NmUzZTQzNC01OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4lZNp6vy+PRh3pox6Z29rRNRLT5RUU8Ig9/wKku9wzhWX7Vdu5ruK0O2
kQzER9hTIIQl0KbTh21sncGyYEw0bBAeCkqRwuAhb7L1VipJSF241LwWj5oyzd7v
qljkm7c5bU2twoAZzjd5GJw4xVOxU6R+96CFgIh5M5ZexpsH/ZyE1XEHgWZn5LAF
VNy1WADQ4yvrvalh3Ys2zqW1cx9CS/XxjPu5oD6ATQf3iGPAj/+WgZFQWib5fODy
z2wXa8u9jjPDaaGVQ+LL1UvGEI+ZaA1BJczYhH4GZ3GzxaKzBIzl87kzhWtAw+hM
oi3EjfBVV1yYNcow1XFjpZqmnj6MnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPo6
8sQmwjh7HuCEulrmMJbgkOcOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QzAwRUYxNDcxOUUxMUVGQjRBQ0M2NTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc8iMA0GCSqGSIb3DQEBCwUA
A4IBAQA1fNsxX27w6uJG5qfBlE88Go7u0b2c/yCF4Lf3yG4zETmSd14sVfxsLK4f
5NnQx3usqpwofkHBQTKphSv2ytttfATL5gvo9U4osdDSzyzqBwZYfDY3zl3SOQmC
+aNAt+vr8xSois2Hrz6psLijj+CjtRiNnuo/vgUXbBn0C9znMl0oqiYof90RbG+0
NA5n76XjCrrLuUvRuqtLz3j9KDWMjtB4Gbb2S8ZLxHgaWVduaKZqc9muARNPJnJD
Rlr5fmpHo7U2jl7tPFwotZ4M1rCqAokuhBbBfue3I86o2lYxgGUHGWA+7DTIgqmC
nj2xiv49jMYj8zO85V+Yitdn+f9H
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org