Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D3B748208EC11EEB466A20D4AD9E6FC.roa
File: 9D3B748208EC11EEB466A20D4AD9E6FC.roa (raw, json)
Hash identifier: A1n9VKHxh4johIOsGnPjL3rIhimSsQrwBxR/Jfb3F9s=
Subject key identifier: 47:67:C5:D5:69:BA:3D:76:2F:D7:45:FD:9C:4E:23:09:DA:43:80:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D3B748208EC11EEB466A20D4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 06:44:44 +0000
ROA not before: Mon 12 Jun 2023 06:44:40 +0000
ROA not after: Sat 25 May 2024 06:44:40 +0000
asID: 131178
IP address blocks: 45.201.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10903 (0x2a97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 06:44:40 2023 GMT
Not After : May 25 06:44:40 2024 GMT
Subject: CN=6486bedc-766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e9:1c:45:fd:5b:a7:86:ba:36:d4:53:45:4a:
14:0a:51:f1:53:77:5d:93:08:11:3c:2f:56:28:9d:
92:c5:5f:09:11:9d:b8:ce:08:40:2b:37:77:bb:2e:
7c:6a:13:53:06:41:af:d4:6d:ff:7a:19:b1:2b:3c:
0a:f8:cf:72:43:4c:c3:03:9b:93:fa:93:9b:71:ea:
3f:d3:da:eb:fd:f8:5f:5e:b9:c3:d9:c8:d0:31:13:
7e:b6:1b:d8:9f:26:34:27:25:5e:d8:ed:a9:2d:a3:
87:9b:f4:c4:9c:ef:d9:f0:e0:07:03:7f:c3:f9:45:
98:d6:ae:a6:f8:dc:c3:dc:8b:65:e5:16:f0:d2:d6:
2d:a6:7a:f3:5d:be:c0:b5:d0:4c:95:2e:60:d0:30:
f0:92:f5:60:46:e6:62:f0:f7:2a:4a:1b:3d:5f:e8:
85:68:39:46:49:14:6d:28:2b:97:8b:8c:39:d7:e9:
8f:d2:ff:e8:11:3c:6b:6d:54:c5:f5:bb:e7:e5:c1:
9d:56:3d:0a:d3:e9:e4:f0:52:98:60:7f:e4:f9:7e:
d9:d2:79:6b:81:12:3d:0e:10:e7:0f:d3:ed:f5:85:
36:05:4c:3f:f0:be:01:7c:a3:90:8a:5b:f8:03:df:
86:99:0f:9f:c6:6b:96:55:57:90:c3:5e:ef:1e:60:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:C5:D5:69:BA:3D:76:2F:D7:45:FD:9C:4E:23:09:DA:43:80:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D3B748208EC11EEB466A20D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:aa:dc:a3:14:5d:68:8b:5c:84:9d:ce:28:6a:a6:f5:d1:c2:
b6:dc:94:b7:6a:9b:7c:72:b8:8f:11:44:1f:13:4f:d7:0f:8d:
d4:35:91:0c:f5:bd:a6:14:c6:8f:d9:92:ff:94:03:84:3b:d2:
34:c2:2e:dc:ae:b1:69:61:5a:ca:c9:3a:e0:e3:33:39:cd:ab:
2f:e0:64:49:9a:43:9a:56:a5:c6:68:b2:ad:0e:d4:53:6e:cc:
95:aa:ed:40:2d:52:d8:8c:09:6f:19:5e:c2:f9:77:06:e6:65:
6c:d0:a9:05:4e:02:b8:19:76:93:7b:46:4e:e1:66:d9:d6:be:
1d:b2:9d:a9:f1:a7:dd:c6:a9:73:aa:55:0b:31:89:50:58:a1:
ad:14:95:f9:af:14:1e:67:2b:5a:d6:c3:c9:35:74:59:59:c0:
82:f1:b7:bf:34:1c:e5:17:3a:ee:c1:c0:e5:06:c2:55:4b:7e:
fa:71:e7:7a:82:af:1b:b5:06:c9:03:88:34:c1:c6:9d:44:68:
d0:9b:e6:66:c1:5a:92:63:5d:eb:ad:6c:2b:c4:7b:dd:b8:e3:
50:c6:d0:72:59:b5:b5:6e:de:f8:b5:45:e7:fb:2b:92:33:7d:
87:9c:19:34:9e:cb:68:30:8f:f8:2a:a2:1c:eb:f7:c5:f5:59:
7c:84:f9:a4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICKpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTIwNjQ0NDBaFw0yNDA1MjUwNjQ0NDBaMBgxFjAU
BgNVBAMTDTY0ODZiZWRjLTc2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDm6RxF/Vunhro21FNFShQKUfFTd12TCBE8L1YonZLFXwkRnbjOCEArN3e7
LnxqE1MGQa/Ubf96GbErPAr4z3JDTMMDm5P6k5tx6j/T2uv9+F9eucPZyNAxE362
G9ifJjQnJV7Y7akto4eb9MSc79nw4AcDf8P5RZjWrqb43MPci2XlFvDS1i2mevNd
vsC10EyVLmDQMPCS9WBG5mLw9ypKGz1f6IVoOUZJFG0oK5eLjDnX6Y/S/+gRPGtt
VMX1u+flwZ1WPQrT6eTwUphgf+T5ftnSeWuBEj0OEOcP0+31hTYFTD/wvgF8o5CK
W/gD34aZD5/Ga5ZVV5DDXu8eYJyxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUR2fF
1Wm6PXYv10X9nE4jCdpDgJUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzlEM0I3NDgyMDhFQzExRUVCNDY2QTIwRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtyYAwDQYJKoZIhvcNAQELBQAD
ggEBAGuq3KMUXWiLXISdzihqpvXRwrbclLdqm3xyuI8RRB8TT9cPjdQ1kQz1vaYU
xo/Zkv+UA4Q70jTCLtyusWlhWsrJOuDjMznNqy/gZEmaQ5pWpcZosq0O1FNuzJWq
7UAtUtiMCW8ZXsL5dwbmZWzQqQVOArgZdpN7Rk7hZtnWvh2ynanxp93GqXOqVQsx
iVBYoa0UlfmvFB5nK1rWw8k1dFlZwILxt780HOUXOu7BwOUGwlVLfvpx53qCrxu1
BskDiDTBxp1EaNCb5mbBWpJjXeutbCvEe92441DG0HJZtbVu3vi1Ref7K5IzfYec
GTSey2gwj/gqohzr98X1WXyE+aQ=
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:37 2024 by rpki-client on console-ams.rpki-client.org