Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D963F0808F111EE992E7B1C4AD9E6FC.roa
File: 8D963F0808F111EE992E7B1C4AD9E6FC.roa (raw, json)
Hash identifier: 4Vrce8isSRbDipPnoouW8sjLAuoLCMIPB7hxa2CODxA=
Subject key identifier: 52:C3:81:90:1B:8B:0F:16:F7:A9:AB:79:DD:1C:25:C4:5C:D1:BF:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2AE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D963F0808F111EE992E7B1C4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 07:20:05 +0000
ROA not before: Mon 12 Jun 2023 07:20:01 +0000
ROA not after: Sat 25 May 2024 07:20:01 +0000
asID: 131178
IP address blocks: 45.201.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10977 (0x2ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 07:20:01 2023 GMT
Not After : May 25 07:20:01 2024 GMT
Subject: CN=6486c725-4f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:ff:88:50:e8:7e:d4:fa:40:bf:91:60:fc:
43:fb:49:74:be:4a:c1:53:a4:91:27:e6:08:d3:33:
03:9a:d5:37:af:23:de:14:75:41:2b:43:1d:4a:79:
10:42:83:ee:42:c4:92:f0:90:29:98:57:32:fa:53:
c4:1e:cf:22:7d:fc:1d:e0:a6:b5:6c:26:82:65:dd:
62:64:de:04:97:76:50:80:d0:0c:e3:c5:16:64:51:
c4:df:72:d9:69:bb:e2:03:10:57:03:ef:3c:c4:0a:
36:36:db:7e:76:ea:91:9c:6e:82:c2:d9:cb:2e:b7:
6d:f5:39:ce:c6:04:08:84:dc:12:ac:78:07:61:0f:
85:95:84:2d:4a:62:f6:16:15:07:c3:aa:67:8f:ca:
f6:1d:76:59:71:cb:c0:cf:3b:32:03:ce:d0:04:aa:
44:10:49:34:76:f4:74:79:90:a0:5c:e7:17:47:86:
4a:3d:21:20:59:68:c2:22:63:94:c8:d5:ba:08:6d:
f6:b6:a0:9b:0a:04:b4:48:69:fa:04:5b:02:bf:7b:
65:ff:06:96:cc:4d:57:e2:58:78:e1:23:25:c4:d4:
d8:b6:7b:8e:9e:d3:dd:5e:4b:97:da:f4:14:8a:a2:
6e:ab:f7:9b:a6:4a:b2:b5:21:59:e0:d4:40:6f:b2:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:81:90:1B:8B:0F:16:F7:A9:AB:79:DD:1C:25:C4:5C:D1:BF:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D963F0808F111EE992E7B1C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:47:76:97:b3:31:ca:fd:73:48:40:9f:a4:2f:28:86:8c:3c:
aa:7d:1b:9c:71:1c:0e:0f:75:21:3d:13:93:6c:80:94:b2:de:
07:8b:7a:aa:50:ef:4e:fc:8a:af:46:42:10:13:16:e6:29:72:
95:24:f9:6f:93:26:88:31:93:ff:3d:27:72:e2:96:fc:bb:7e:
db:35:45:a0:b9:d1:b6:44:05:d3:ed:a3:51:7f:dc:61:be:cb:
4c:4d:c4:22:09:c8:11:0a:30:41:21:80:a6:44:ec:53:84:74:
8a:53:1f:9d:7f:9a:bf:e3:69:81:ea:63:88:9a:8b:b6:b7:28:
ea:b2:92:d0:5b:9f:e3:d5:24:56:ed:07:44:75:ac:6c:40:2b:
44:4c:a3:64:fa:e5:24:4a:7e:97:dd:cd:94:54:f4:41:f9:19:
97:fd:de:5d:f8:3b:fe:3b:57:f9:eb:89:06:ca:c4:90:5a:11:
ed:28:12:bd:db:44:8e:cb:c3:31:c6:09:22:55:2b:2d:5c:8d:
d1:15:41:9c:7e:6a:19:ba:9d:cd:b4:79:c7:8d:92:23:c0:72:
60:c1:7a:ef:3d:2b:e3:a5:b5:cc:52:4f:2f:83:85:80:0e:40:
c2:2e:4c:14:35:2d:8f:f0:ec:c0:e3:b8:44:df:d9:b4:40:c1:
49:69:69:c9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICKuEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTIwNzIwMDFaFw0yNDA1MjUwNzIwMDFaMBgxFjAU
BgNVBAMTDTY0ODZjNzI1LTRmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcs/+IUOh+1PpAv5Fg/EP7SXS+SsFTpJEn5gjTMwOa1TevI94UdUErQx1K
eRBCg+5CxJLwkCmYVzL6U8QezyJ9/B3gprVsJoJl3WJk3gSXdlCA0AzjxRZkUcTf
ctlpu+IDEFcD7zzECjY223526pGcboLC2csut231Oc7GBAiE3BKseAdhD4WVhC1K
YvYWFQfDqmePyvYddllxy8DPOzIDztAEqkQQSTR29HR5kKBc5xdHhko9ISBZaMIi
Y5TI1boIbfa2oJsKBLRIafoEWwK/e2X/BpbMTVfiWHjhIyXE1Ni2e46e091eS5fa
9BSKom6r95umSrK1IVng1EBvstZ3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUUsOB
kBuLDxb3qat53RwlxFzRvwwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzhEOTYzRjA4MDhGMTExRUU5OTJFN0IxQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyZcwDQYJKoZIhvcNAQELBQAD
ggEBAF5HdpezMcr9c0hAn6QvKIaMPKp9G5xxHA4PdSE9E5NsgJSy3geLeqpQ7078
iq9GQhATFuYpcpUk+W+TJogxk/89J3Lilvy7fts1RaC50bZEBdPto1F/3GG+y0xN
xCIJyBEKMEEhgKZE7FOEdIpTH51/mr/jaYHqY4iai7a3KOqyktBbn+PVJFbtB0R1
rGxAK0RMo2T65SRKfpfdzZRU9EH5GZf93l34O/47V/nriQbKxJBaEe0oEr3bRI7L
wzHGCSJVKy1cjdEVQZx+ahm6nc20eceNkiPAcmDBeu89K+OltcxSTy+DhYAOQMIu
TBQ1LY/w7MDjuETf2bRAwUlpack=
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:55 2024 by rpki-client on console-fra.rpki-client.org