Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/920EDEF09F7C11EFA9ECF4B9762E951A.roa
File: 920EDEF09F7C11EFA9ECF4B9762E951A.roa (raw, json)
Hash identifier: l9j810x6dNYJcRzWdctEwYxIyPyjJOUVTfeP4atrCu0=
Subject key identifier: 64:AA:24:A1:1B:1E:5D:B1:3E:C9:0F:8D:B7:87:27:22:C2:B8:56:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D0F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/920EDEF09F7C11EFA9ECF4B9762E951A.roa
Signing time: Sun 10 Nov 2024 15:58:05 +0000
ROA not before: Sun 10 Nov 2024 15:58:01 +0000
ROA not after: Tue 13 May 2025 15:58:01 +0000
asID: 26617
IP address blocks: 45.195.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53494 (0xd0f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 15:58:01 2024 GMT
Not After : May 13 15:58:01 2025 GMT
Subject: CN=6730d80d-d12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:05:56:b3:68:12:c9:6a:07:ee:7f:b5:b6:
5e:7e:89:ef:77:c1:36:b9:4b:da:7f:e4:61:ad:ce:
cf:31:3c:6f:e1:24:d4:55:06:55:dc:ff:14:95:34:
6c:41:01:f7:35:61:ed:4c:69:77:0f:bd:a2:ba:83:
ea:04:ae:8d:8c:2f:76:14:27:9e:23:da:08:ad:18:
57:d7:76:4b:11:1b:31:95:85:0c:58:96:fa:5a:e5:
c7:d4:62:ec:08:2d:3f:27:d4:27:10:96:6d:ff:0f:
e7:4e:bc:83:52:e3:41:c3:90:65:7e:2f:7a:c0:ed:
df:55:81:4b:5c:39:39:df:a9:ec:5b:a4:da:86:74:
59:1f:64:12:11:18:50:d7:77:f0:e3:01:a4:db:2f:
44:18:be:2d:85:e9:5e:91:a6:02:53:8e:61:9f:31:
d3:59:b3:ac:ed:e9:40:07:97:41:be:23:bc:38:8b:
08:d9:47:fa:8b:41:f7:fb:64:f7:97:d6:3f:bb:27:
2a:0b:5d:ae:b9:46:6a:ae:07:56:2d:56:cb:95:d8:
10:0e:9a:be:73:1a:dc:94:3a:aa:95:85:2e:71:66:
18:cb:ee:c8:84:55:8f:31:74:a7:bd:5c:99:51:a7:
1f:e3:40:c6:d5:81:ff:5f:e2:1a:6d:63:ff:c2:b7:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:24:A1:1B:1E:5D:B1:3E:C9:0F:8D:B7:87:27:22:C2:B8:56:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/920EDEF09F7C11EFA9ECF4B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bd:42:23:11:bf:e6:31:19:35:fe:d6:8d:77:3e:26:4b:a7:
96:2a:80:1a:e0:22:81:10:b5:57:df:c6:16:1e:41:0a:e4:58:
e0:83:f4:ac:27:ac:26:85:f7:ff:ae:86:1b:99:a3:38:69:69:
2e:f3:8a:3c:c8:90:92:21:4c:db:53:ce:d3:67:e8:c9:d7:16:
fb:58:12:46:27:c1:a8:ad:ad:42:fb:cb:c5:59:bb:cc:d1:b0:
6a:49:b4:33:dd:1e:79:cd:39:6d:d0:85:9b:1b:39:38:ff:ab:
ad:0f:f4:f3:08:03:d2:14:6a:29:05:e1:95:4b:4d:cf:77:17:
a3:ea:2f:da:13:ae:75:7f:f6:19:75:0f:65:1f:12:a1:4a:70:
6a:eb:32:0b:0e:3e:3a:f3:c6:f8:37:ea:53:4c:f7:c4:8c:cf:
ab:8b:27:ab:53:06:c9:08:bc:04:2f:33:0f:89:06:e5:69:c6:
f0:7b:17:d7:b1:c0:d0:05:9a:db:e8:6c:46:f7:9d:ea:36:29:
e3:50:4f:1e:9f:8b:6f:21:1c:3c:0a:2c:98:a8:5e:70:70:1d:
17:ad:d3:4d:01:37:87:31:c0:90:93:27:13:c1:f8:8b:c3:1b:
aa:72:c4:09:71:19:ab:09:0f:99:d0:a4:32:f7:a4:a2:52:0e:
6a:5f:9e:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAND2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEwMTU1ODAxWhcNMjUwNTEzMTU1ODAxWjAYMRYw
FAYDVQQDEw02NzMwZDgwZC1kMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxm0FVrNoEslqB+5/tbZefonvd8E2uUvaf+Rhrc7PMTxv4STUVQZV3P8U
lTRsQQH3NWHtTGl3D72iuoPqBK6NjC92FCeeI9oIrRhX13ZLERsxlYUMWJb6WuXH
1GLsCC0/J9QnEJZt/w/nTryDUuNBw5Blfi96wO3fVYFLXDk536nsW6TahnRZH2QS
ERhQ13fw4wGk2y9EGL4thelekaYCU45hnzHTWbOs7elAB5dBviO8OIsI2Uf6i0H3
+2T3l9Y/uycqC12uuUZqrgdWLVbLldgQDpq+cxrclDqqlYUucWYYy+7IhFWPMXSn
vVyZUacf40DG1YH/X+IabWP/wrf5RQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGSq
JKEbHl2xPskPjbeHJyLCuFZzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjBFREVGMDlGN0MxMUVGQTlFQ0Y0Qjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPPMA0GCSqGSIb3DQEBCwUA
A4IBAQBavUIjEb/mMRk1/taNdz4mS6eWKoAa4CKBELVX38YWHkEK5Fjgg/SsJ6wm
hff/roYbmaM4aWku84o8yJCSIUzbU87TZ+jJ1xb7WBJGJ8Gora1C+8vFWbvM0bBq
SbQz3R55zTlt0IWbGzk4/6utD/TzCAPSFGopBeGVS03Pdxej6i/aE651f/YZdQ9l
HxKhSnBq6zILDj4688b4N+pTTPfEjM+riyerUwbJCLwELzMPiQblacbwexfXscDQ
BZrb6GxG953qNinjUE8en4tvIRw8CiyYqF5wcB0XrdNNATeHMcCQkycTwfiLwxuq
csQJcRmrCQ+Z0KQy96SiUg5qX577
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org