Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C928EDA992E11EF92D4747D762E951A.roa
File: 8C928EDA992E11EF92D4747D762E951A.roa (raw, json)
Hash identifier: gMWkdLezdg0s9ORVRHDDjGWjj+9QljRxauuMKyCkBXo=
Subject key identifier: 55:A2:EA:60:02:4A:D2:47:20:01:01:93:3E:64:EB:27:36:49:9B:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CC86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C928EDA992E11EF92D4747D762E951A.roa
Signing time: Sat 02 Nov 2024 15:24:28 +0000
ROA not before: Sat 02 Nov 2024 15:24:24 +0000
ROA not after: Wed 04 Dec 2024 15:24:24 +0000
asID: 147176
IP address blocks: 45.201.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52358 (0xcc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 2 15:24:24 2024 GMT
Not After : Dec 4 15:24:24 2024 GMT
Subject: CN=6726442c-634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:ea:7f:1e:26:f3:ac:6e:08:fb:16:d5:32:
74:56:5b:b8:e3:d9:57:6b:fc:f8:bb:65:72:b1:08:
b1:8f:00:c2:d0:39:c9:d4:39:b3:a7:02:7d:05:f5:
5c:2c:64:31:dd:44:0e:e0:ce:14:9a:94:6b:c5:ef:
67:bf:ac:88:1a:f8:85:1e:8a:e2:85:9d:d0:15:ad:
ae:3c:1c:49:84:0a:83:b5:56:d7:75:dd:a0:ae:36:
92:32:24:37:ed:43:7d:2f:ec:67:f0:f9:ae:a6:51:
b0:bb:ad:04:09:7f:e5:54:5f:59:40:7d:f1:af:0e:
02:87:64:83:81:b2:d5:a0:56:f8:14:ab:e5:89:54:
1d:74:fd:6e:20:92:7d:42:da:83:cf:64:53:dd:b4:
78:03:cf:f3:ea:e6:0e:f2:c0:29:09:a1:57:ff:a5:
13:c8:5e:0f:bd:3c:68:ef:08:18:cf:a8:3f:ff:46:
25:27:78:3f:20:3e:d8:e5:88:d4:a5:21:34:41:1f:
8d:0e:a7:39:bd:2b:ff:81:b9:11:6d:e9:82:bb:24:
46:61:64:de:f5:a0:84:8a:6f:c7:4a:c2:3c:58:03:
dc:a0:ee:02:fb:09:ad:24:8f:34:1b:93:53:27:9c:
5b:b1:91:a2:b1:13:45:dd:6e:4f:d2:c5:d9:d8:20:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A2:EA:60:02:4A:D2:47:20:01:01:93:3E:64:EB:27:36:49:9B:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C928EDA992E11EF92D4747D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d4:4a:71:6d:79:7c:cb:ee:fd:88:6b:fd:a2:96:c8:30:6e:
3d:a0:03:dc:62:40:3c:42:a2:77:9a:30:4d:e3:2b:77:35:2f:
f7:a8:a4:b4:7e:cd:10:1c:90:7b:38:fe:45:91:0d:f0:13:26:
cf:5a:67:71:33:b9:b0:a8:05:8e:d0:26:97:f5:56:fe:fd:3b:
03:d2:a5:cc:75:b9:5e:58:f6:27:c5:9e:3c:8c:1b:22:bd:57:
c6:b9:98:ab:54:c8:9c:58:06:7c:df:90:e4:7c:cc:9e:dc:08:
77:ea:b1:33:2d:12:1a:5d:7b:b7:fa:e7:a6:15:b7:a7:56:a9:
71:6c:8f:2f:41:88:11:14:c2:44:70:90:18:b1:00:0b:07:e2:
32:c2:38:d7:dd:d5:18:a2:2a:4d:4c:30:b6:27:84:7b:57:19:
55:5d:c0:86:2a:78:37:0f:eb:f6:38:c6:ef:9c:4d:78:b4:16:
7e:03:bd:8e:4d:d7:f8:e6:93:85:c2:89:02:22:1f:76:40:1c:
69:ac:7d:42:4f:34:59:e9:0f:7f:56:dc:33:c2:1f:68:34:dc:
60:70:e4:42:ad:89:c5:fa:ee:6f:b3:a4:95:4e:f4:f9:9e:6b:
a8:8b:d8:f0:e1:36:ab:51:77:42:e1:28:02:13:28:f4:90:36:
c5:a8:db:58
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMyGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTAyMTUyNDI0WhcNMjQxMjA0MTUyNDI0WjAYMRYw
FAYDVQQDEw02NzI2NDQyYy02MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9VDqfx4m86xuCPsW1TJ0Vlu449lXa/z4u2VysQixjwDC0DnJ1DmzpwJ9
BfVcLGQx3UQO4M4UmpRrxe9nv6yIGviFHorihZ3QFa2uPBxJhAqDtVbXdd2grjaS
MiQ37UN9L+xn8PmuplGwu60ECX/lVF9ZQH3xrw4Ch2SDgbLVoFb4FKvliVQddP1u
IJJ9QtqDz2RT3bR4A8/z6uYO8sApCaFX/6UTyF4PvTxo7wgYz6g//0YlJ3g/ID7Y
5YjUpSE0QR+NDqc5vSv/gbkRbemCuyRGYWTe9aCEim/HSsI8WAPcoO4C+wmtJI80
G5NTJ5xbsZGisRNF3W5P0sXZ2CCPBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFWi
6mACStJHIAEBkz5k6yc2SZumMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QzkyOEVEQTk5MkUxMUVGOTJENDc0N0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckbMA0GCSqGSIb3DQEBCwUA
A4IBAQA71EpxbXl8y+79iGv9opbIMG49oAPcYkA8QqJ3mjBN4yt3NS/3qKS0fs0Q
HJB7OP5FkQ3wEybPWmdxM7mwqAWO0CaX9Vb+/TsD0qXMdbleWPYnxZ48jBsivVfG
uZirVMicWAZ835DkfMye3Ah36rEzLRIaXXu3+uemFbenVqlxbI8vQYgRFMJEcJAY
sQALB+IywjjX3dUYoipNTDC2J4R7VxlVXcCGKng3D+v2OMbvnE14tBZ+A72OTdf4
5pOFwokCIh92QBxprH1CTzRZ6Q9/Vtwzwh9oNNxgcORCrYnF+u5vs6SVTvT5nmuo
i9jw4TarUXdC4SgCEyj0kDbFqNtY
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org