Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CBD973EF90F11ED889C487F4AD9E6FC.roa
File: 9CBD973EF90F11ED889C487F4AD9E6FC.roa (raw, json)
Hash identifier: 7a33NBqh5dHo60shHCTUkN8oU7b/CJeWe5dt9JbC1f0=
Subject key identifier: 1E:17:DC:AA:E5:6D:FF:DC:7C:68:63:D4:47:5A:71:05:E7:0F:67:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2666
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CBD973EF90F11ED889C487F4AD9E6FC.roa
Signing time: Tue 23 May 2023 02:14:57 +0000
ROA not before: Tue 23 May 2023 02:14:53 +0000
ROA not after: Tue 25 Jun 2024 02:14:53 +0000
asID: 135607
IP address blocks: 45.202.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9830 (0x2666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 02:14:53 2023 GMT
Not After : Jun 25 02:14:53 2024 GMT
Subject: CN=646c21a1-4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:dd:aa:f7:62:04:ae:39:4e:5b:cf:a5:df:
6b:5e:ba:eb:ea:b7:64:67:dc:f2:4a:64:a0:23:78:
00:55:dc:5b:bb:82:d4:c8:1d:40:9b:7e:9f:13:ed:
3a:7c:55:05:6c:dd:0d:90:b6:dc:d1:3b:d7:a6:58:
3e:97:45:bc:59:9e:07:b3:b7:f8:96:00:33:6d:b5:
f1:7a:46:84:f2:df:45:8c:df:42:82:6e:0c:ef:91:
69:5e:81:a3:6a:2b:71:ad:8d:b0:76:26:fb:d4:34:
21:f9:b9:f6:30:84:b9:fc:26:eb:dd:eb:c8:8f:d4:
e1:5a:a2:e7:81:98:1d:2d:b8:bd:73:28:e5:5f:b6:
0f:20:a8:02:65:90:ed:f2:e3:68:b7:ed:13:f1:1a:
c4:c7:d8:7e:f6:b8:dd:3e:fa:6d:85:33:97:e2:4f:
fd:22:9a:83:92:68:a7:39:40:9f:4b:9d:a0:ad:27:
63:e1:a5:d8:bc:c0:61:ef:ba:72:d6:ae:ae:93:67:
b2:72:41:5a:4f:a0:36:64:d9:80:4d:3a:b2:ae:11:
a5:37:50:99:92:f9:c1:18:ea:82:60:67:b5:f5:d5:
1f:37:9c:06:43:9c:b5:23:7e:0a:75:30:28:97:84:
d8:93:03:a6:16:89:39:09:e2:77:57:23:13:b2:5e:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:17:DC:AA:E5:6D:FF:DC:7C:68:63:D4:47:5A:71:05:E7:0F:67:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CBD973EF90F11ED889C487F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.20.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c7:99:30:69:fc:1e:58:6e:71:20:84:b9:e5:69:67:36:90:
70:42:22:39:fb:de:b6:60:7b:54:fe:cc:d0:ef:d2:6b:03:e5:
9d:20:7f:6c:cc:88:6a:6e:a7:03:3c:cf:ac:41:bb:3f:2d:27:
6f:91:71:ff:fd:05:75:e6:e2:80:91:ab:8f:e4:b3:73:5d:41:
f9:6d:c6:3e:4d:b2:64:3b:fd:71:0f:77:7b:4a:09:53:86:84:
9a:fd:68:17:d8:f5:db:fa:cc:0f:12:34:40:3e:53:6a:ac:7a:
95:37:8a:b3:82:3a:d2:e1:31:87:21:83:ad:fb:f6:93:0d:51:
ad:9d:de:a5:8a:a7:fe:05:dd:9b:db:ad:fd:10:14:bf:cd:4d:
b8:cb:96:a1:c4:aa:08:0c:6f:81:45:9e:33:e3:58:58:c9:75:
c0:ca:5d:46:63:e8:48:7d:86:b0:f1:dd:21:5d:58:50:af:74:
13:87:80:2d:27:2b:bb:f4:af:fa:0e:d5:f7:f2:d3:46:20:6c:
2d:bb:21:01:7f:57:c8:45:b0:c2:24:06:ff:d8:8a:93:32:54:
72:d1:73:50:0f:ba:bf:b1:6f:73:60:11:d6:25:6c:30:94:13:
2f:4c:2d:48:25:76:cd:32:17:84:e4:c2:1b:3f:a4:80:7a:50:
15:85:47:d2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJmYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjMwMjE0NTNaFw0yNDA2MjUwMjE0NTNaMBgxFjAU
BgNVBAMTDTY0NmMyMWExLTRmMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDItd2q92IErjlOW8+l32teuuvqt2Rn3PJKZKAjeABV3Fu7gtTIHUCbfp8T
7Tp8VQVs3Q2QttzRO9emWD6XRbxZngezt/iWADNttfF6RoTy30WM30KCbgzvkWle
gaNqK3GtjbB2JvvUNCH5ufYwhLn8Juvd68iP1OFaoueBmB0tuL1zKOVftg8gqAJl
kO3y42i37RPxGsTH2H72uN0++m2FM5fiT/0imoOSaKc5QJ9LnaCtJ2Phpdi8wGHv
unLWrq6TZ7JyQVpPoDZk2YBNOrKuEaU3UJmS+cEY6oJgZ7X11R83nAZDnLUjfgp1
MCiXhNiTA6YWiTkJ4ndXIxOyXp1hAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUHhfc
quVt/9x8aGPUR1pxBecPZ7UwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlDQkQ5NzNFRjkwRjExRUQ4ODlDNDg3RjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyhQwDQYJKoZIhvcNAQELBQAD
ggEBALbHmTBp/B5YbnEghLnlaWc2kHBCIjn73rZge1T+zNDv0msD5Z0gf2zMiGpu
pwM8z6xBuz8tJ2+Rcf/9BXXm4oCRq4/ks3NdQfltxj5NsmQ7/XEPd3tKCVOGhJr9
aBfY9dv6zA8SNEA+U2qsepU3irOCOtLhMYchg6379pMNUa2d3qWKp/4F3Zvbrf0Q
FL/NTbjLlqHEqggMb4FFnjPjWFjJdcDKXUZj6Eh9hrDx3SFdWFCvdBOHgC0nK7v0
r/oO1ffy00YgbC27IQF/V8hFsMIkBv/YipMyVHLRc1APur+xb3NgEdYlbDCUEy9M
LUglds0yF4Tkwhs/pIB6UBWFR9I=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org