Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/992CA44CA74211EF90265F4C762E951A.roa
File: 992CA44CA74211EF90265F4C762E951A.roa (raw, json)
Hash identifier: /HmYeP43lXS+YkhCVd6vzjif77qCKErY4jkSXN8uznM=
Subject key identifier: 84:D6:BC:1B:6D:4A:2B:F0:E9:26:CA:B3:45:27:F7:FE:CF:56:39:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D64B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/992CA44CA74211EF90265F4C762E951A.roa
Signing time: Wed 20 Nov 2024 13:23:15 +0000
ROA not before: Wed 20 Nov 2024 13:23:11 +0000
ROA not after: Sat 30 Nov 2024 13:23:11 +0000
asID: 202656
IP address blocks: 45.192.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54859 (0xd64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:23:11 2024 GMT
Not After : Nov 30 13:23:11 2024 GMT
Subject: CN=673de2c3-76bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:f1:60:05:ab:3d:16:dd:c7:ea:ba:21:e2:
56:7d:89:1b:0e:06:c6:ee:59:45:93:dd:38:ad:13:
c4:53:14:4d:47:49:b0:92:88:11:ba:1c:58:f9:df:
a9:cb:4f:72:0f:0a:31:44:c5:e7:18:e7:24:33:d0:
c4:8d:d8:7a:60:0a:28:21:1a:8c:94:62:a8:78:5c:
90:b4:88:ec:8e:22:97:b3:50:c1:25:dd:0a:78:98:
4d:8c:1a:cc:c8:11:28:5d:d4:82:22:bc:99:ab:84:
b2:4d:1a:79:4d:08:e3:22:61:3e:51:ca:50:b0:3f:
12:98:be:c3:1a:47:fd:db:6d:f1:36:66:0d:5a:90:
69:92:11:69:9c:0c:a1:65:06:8e:20:c0:aa:91:65:
9d:6b:47:91:cc:55:79:bf:9d:9e:ea:92:bc:12:68:
f5:95:b3:d9:4d:c5:6e:1e:30:ed:f9:3e:d4:55:19:
97:00:90:ba:7f:69:d5:88:be:71:30:63:07:6a:a8:
ca:b8:a6:c0:84:a6:3f:7a:85:c5:82:9c:5c:69:63:
54:fc:80:5b:83:48:06:d9:44:f7:19:aa:f8:2e:4b:
db:08:ea:2e:d3:21:dc:e4:b8:9b:91:71:4b:19:6e:
cb:9b:92:9b:d8:20:c5:b3:9e:33:4e:c4:82:8b:3b:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:BC:1B:6D:4A:2B:F0:E9:26:CA:B3:45:27:F7:FE:CF:56:39:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/992CA44CA74211EF90265F4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.54.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:21:7b:e4:e6:c8:7a:a7:d9:37:cf:8d:f7:23:c6:1c:b8:3a:
0f:a1:2c:76:0b:a5:37:09:c0:57:6c:c5:fc:a7:27:8a:b9:df:
e5:10:72:7c:11:d5:0a:42:ab:f6:f6:21:c4:ed:64:a3:c0:93:
6a:37:70:5a:8f:65:4f:69:ce:d2:4f:f5:27:cc:19:5d:a0:de:
62:e9:a6:55:c5:a5:df:70:d8:11:27:cd:71:97:71:a6:cb:41:
ba:77:e3:7b:04:9f:86:12:e1:8d:e2:cb:33:0d:2c:b8:6e:bb:
eb:c4:82:bb:f0:54:ee:16:9c:c8:fa:8a:6d:0f:ac:63:bb:46:
e5:f9:0c:f6:a4:2b:6e:e1:5f:80:df:eb:ce:61:ea:bd:17:30:
71:a2:a5:2e:23:97:41:7a:52:7b:19:5b:b7:4f:f2:c7:b9:94:
82:04:09:ea:d8:e0:68:22:72:26:55:d9:6d:7e:c6:89:3f:1b:
f7:2c:1d:8b:db:00:82:a8:93:e6:94:85:5c:12:fe:d9:d8:44:
cd:35:f0:e2:67:00:3e:66:74:7f:75:40:38:e2:e0:66:1a:a1:
47:6b:5e:f8:0d:dc:72:d6:7d:3c:cc:8e:3c:54:2b:30:e9:eb:
e7:d3:dd:a1:1c:6c:63:bd:bd:92:62:a4:82:e9:e7:68:ac:4e:
9c:03:13:b0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANZLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMTMyMzExWhcNMjQxMTMwMTMyMzExWjAYMRYw
FAYDVQQDEw02NzNkZTJjMy03NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAysnxYAWrPRbdx+q6IeJWfYkbDgbG7llFk904rRPEUxRNR0mwkogRuhxY
+d+py09yDwoxRMXnGOckM9DEjdh6YAooIRqMlGKoeFyQtIjsjiKXs1DBJd0KeJhN
jBrMyBEoXdSCIryZq4SyTRp5TQjjImE+UcpQsD8SmL7DGkf9223xNmYNWpBpkhFp
nAyhZQaOIMCqkWWda0eRzFV5v52e6pK8Emj1lbPZTcVuHjDt+T7UVRmXAJC6f2nV
iL5xMGMHaqjKuKbAhKY/eoXFgpxcaWNU/IBbg0gG2UT3Gar4LkvbCOou0yHc5Lib
kXFLGW7Lm5Kb2CDFs54zTsSCizsqBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFITW
vBttSivw6SbKs0Un9/7PVjl0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTJDQTQ0Q0E3NDIxMUVGOTAyNjVGNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcA2MA0GCSqGSIb3DQEBCwUA
A4IBAQCnIXvk5sh6p9k3z433I8YcuDoPoSx2C6U3CcBXbMX8pyeKud/lEHJ8EdUK
Qqv29iHE7WSjwJNqN3Baj2VPac7ST/UnzBldoN5i6aZVxaXfcNgRJ81xl3Gmy0G6
d+N7BJ+GEuGN4sszDSy4brvrxIK78FTuFpzI+optD6xju0bl+Qz2pCtu4V+A3+vO
Yeq9FzBxoqUuI5dBelJ7GVu3T/LHuZSCBAnq2OBoInImVdltfsaJPxv3LB2L2wCC
qJPmlIVcEv7Z2ETNNfDiZwA+ZnR/dUA44uBmGqFHa174Ddxy1n08zI48VCsw6evn
092hHGxjvb2SYqSC6edorE6cAxOw
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org