Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95268C8667CF11EEA05847264AD9E6FC.roa
File: 95268C8667CF11EEA05847264AD9E6FC.roa (raw, json)
Hash identifier: A3Gjq7iolaKuoq4nEPXhRBf/Bzz5LlAC3i7i6wmLfCI=
Subject key identifier: 89:BB:AA:3A:1A:61:4B:EF:55:05:1B:9E:10:29:74:40:2B:8D:6A:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3E34
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95268C8667CF11EEA05847264AD9E6FC.roa
Signing time: Wed 11 Oct 2023 00:46:15 +0000
ROA not before: Wed 11 Oct 2023 00:00:12 +0000
ROA not after: Tue 02 Jul 2024 00:00:12 +0000
asID: 139805
IP address blocks: 45.195.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15924 (0x3e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 00:00:12 2023 GMT
Not After : Jul 2 00:00:12 2024 GMT
Subject: CN=6525f057-8741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:32:75:8b:8e:32:fd:6c:54:d5:df:55:ef:
34:9e:20:ad:83:a3:56:f5:17:40:a5:f5:f2:ea:a2:
60:07:02:02:03:92:f4:33:3c:b4:cd:b9:c9:71:37:
24:fa:72:24:a0:1e:9d:6f:0d:75:eb:e5:d6:49:e4:
d1:08:a8:fe:49:37:e2:e8:5e:af:9b:54:02:a9:c7:
b9:1f:01:16:41:6d:5e:b3:33:d4:ee:0a:bf:1c:13:
77:31:4f:d1:22:ab:27:60:e8:3f:ed:5b:d3:36:cb:
be:bb:20:38:15:cb:8a:da:59:e0:2f:bf:a9:2e:f8:
38:d3:96:aa:66:97:05:65:38:3e:40:c1:bd:2a:ca:
0f:d6:81:93:30:fc:b0:ca:70:f5:9d:e6:1e:01:b3:
06:c4:09:ab:43:b2:a4:35:dc:05:a1:11:5d:29:cb:
92:c1:de:dd:6d:ab:9e:ed:4d:8a:10:51:86:e6:8c:
71:01:55:dd:ac:1f:52:e2:d5:95:d8:dc:a7:db:d1:
d5:0b:3f:06:5b:e6:d7:32:5c:de:7b:4c:4f:67:f5:
04:9f:f9:4e:3c:48:cf:b4:83:d6:5b:85:b4:4d:a6:
82:28:2b:e9:7d:6c:48:b1:87:07:87:da:f5:4b:f0:
c2:7d:c6:66:d2:86:5c:26:a2:5e:73:e2:96:65:4c:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:AA:3A:1A:61:4B:EF:55:05:1B:9E:10:29:74:40:2B:8D:6A:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95268C8667CF11EEA05847264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.84.0/24
Signature Algorithm: sha256WithRSAEncryption
48:23:08:f3:08:34:90:22:91:84:c6:63:99:0a:66:24:8c:58:
8d:02:e7:05:59:e7:b8:18:fb:4c:7e:31:7d:ae:0e:2a:8f:33:
3e:61:d7:1d:7f:43:83:2f:17:68:cf:38:47:b9:ac:88:8a:2a:
c4:fe:e6:cb:56:84:b7:ee:6a:12:3e:44:fc:b9:90:e4:73:15:
fd:c5:86:26:31:e3:62:86:34:8d:b1:66:02:d1:0a:de:09:52:
aa:d7:3c:2e:9e:d3:37:85:89:f8:50:c6:7b:73:09:52:7a:3b:
1e:6b:aa:94:43:70:7f:d0:19:e3:e3:ba:f6:62:15:e1:47:4c:
7f:a6:82:f5:22:a7:9a:96:45:53:ae:22:37:c1:ac:e1:e1:bb:
65:58:f2:75:6a:b0:ba:1e:5f:b3:d0:14:a4:ec:83:d1:ab:f3:
d1:44:72:81:21:3d:59:6a:e5:7b:8f:98:29:b7:5b:41:30:f3:
1f:b6:67:b4:1e:fa:fe:d6:bc:b2:cf:ad:7b:53:2f:1e:ae:1e:
96:38:68:ee:ed:47:26:63:cb:86:93:90:1e:34:23:2c:81:c7:
c1:6d:f9:75:03:b7:d7:c0:77:61:65:93:88:c4:58:57:83:a6:
e4:6c:3b:fa:10:ca:a8:c2:a5:a2:dd:44:b1:8f:63:a4:94:1d:
57:5a:30:a2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICPjQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEwMTEwMDAwMTJaFw0yNDA3MDIwMDAwMTJaMBgxFjAU
BgNVBAMTDTY1MjVmMDU3LTg3NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpbzJ1i44y/WxU1d9V7zSeIK2Do1b1F0Cl9fLqomAHAgIDkvQzPLTNuclx
NyT6ciSgHp1vDXXr5dZJ5NEIqP5JN+LoXq+bVAKpx7kfARZBbV6zM9TuCr8cE3cx
T9Eiqydg6D/tW9M2y767IDgVy4raWeAvv6ku+DjTlqpmlwVlOD5Awb0qyg/WgZMw
/LDKcPWd5h4BswbECatDsqQ13AWhEV0py5LB3t1tq57tTYoQUYbmjHEBVd2sH1Li
1ZXY3Kfb0dULPwZb5tcyXN57TE9n9QSf+U48SM+0g9ZbhbRNpoIoK+l9bEixhweH
2vVL8MJ9xmbShlwmol5z4pZlTFUzAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUibuq
OhphS+9VBRueECl0QCuNagEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzk1MjY4Qzg2NjdDRjExRUVBMDU4NDcyNjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw1QwDQYJKoZIhvcNAQELBQAD
ggEBAEgjCPMINJAikYTGY5kKZiSMWI0C5wVZ57gY+0x+MX2uDiqPMz5h1x1/Q4Mv
F2jPOEe5rIiKKsT+5stWhLfuahI+RPy5kORzFf3FhiYx42KGNI2xZgLRCt4JUqrX
PC6e0zeFifhQxntzCVJ6Ox5rqpRDcH/QGePjuvZiFeFHTH+mgvUip5qWRVOuIjfB
rOHhu2VY8nVqsLoeX7PQFKTsg9Gr89FEcoEhPVlq5XuPmCm3W0Ew8x+2Z7Qe+v7W
vLLPrXtTLx6uHpY4aO7tRyZjy4aTkB40IyyBx8Ft+XUDt9fAd2Flk4jEWFeDpuRs
O/oQyqjCpaLdRLGPY6SUHVdaMKI=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org