Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0FC86E73F611EF9DF80C84762E951A.roa
File: 9F0FC86E73F611EF9DF80C84762E951A.roa (raw, json)
Hash identifier: rlyMHj2PFNwYm4Ie11h6Lxjaq0itBqpBU9ArXoIBr0E=
Subject key identifier: F9:21:F1:22:5E:36:C4:14:64:BD:7E:1C:78:1B:53:8E:34:ED:DD:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B725
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0FC86E73F611EF9DF80C84762E951A.roa
Signing time: Mon 16 Sep 2024 06:40:54 +0000
ROA not before: Mon 16 Sep 2024 06:40:51 +0000
ROA not after: Fri 08 Aug 2025 06:40:51 +0000
asID: 133861
IP address blocks: 45.207.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46885 (0xb725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 06:40:51 2024 GMT
Not After : Aug 8 06:40:51 2025 GMT
Subject: CN=66e7d2f6-55c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:fe:a0:e9:1a:ce:92:3b:86:9f:8b:d0:89:
9e:04:20:33:90:f9:0e:79:95:c8:18:05:e0:2b:59:
59:91:ee:cd:a2:83:fd:1b:9f:04:ca:3a:c0:96:16:
14:92:da:54:26:8b:90:cd:33:7f:09:e5:f0:50:82:
81:d0:67:6d:d6:2e:3d:cb:fe:3a:41:8e:53:cc:0c:
a0:16:df:6b:84:97:5c:d8:56:52:92:74:2a:d6:0b:
88:94:e7:2c:a0:17:cb:d5:15:14:af:24:64:78:d5:
71:98:1d:52:4d:2f:dd:f9:cf:ad:76:36:e1:22:04:
c7:ee:24:39:28:61:a0:b0:b6:cd:6f:51:b3:5f:7c:
c3:1a:49:e3:e2:1c:41:91:d5:22:04:07:f5:4e:71:
30:0c:f9:11:89:81:77:be:92:29:c4:3d:1a:dc:9a:
78:3d:79:f2:0a:6d:aa:3e:55:7d:67:57:dc:70:ef:
2f:99:91:51:41:54:2f:2a:1b:9c:80:e6:0b:89:e4:
13:92:a9:4e:61:12:f6:9e:eb:bf:18:0b:c6:aa:9f:
a1:31:24:6f:23:47:1e:5f:cc:5b:c5:ab:6f:7b:98:
52:c2:6e:cd:4b:d8:71:ab:13:44:b4:dc:18:07:a3:
58:04:cc:34:50:ee:68:df:57:fb:cb:ed:67:2a:7c:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:F1:22:5E:36:C4:14:64:BD:7E:1C:78:1B:53:8E:34:ED:DD:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0FC86E73F611EF9DF80C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.43.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b5:2a:b1:0b:23:41:0e:41:ab:2a:4d:07:62:b0:ce:bc:c4:
25:88:54:53:d2:ce:68:37:5a:a6:29:7b:fd:b4:08:17:94:2d:
b3:4e:8b:cf:1c:a7:e6:f6:dd:5a:85:78:57:30:11:f5:b2:09:
a5:75:aa:91:0e:d8:9c:9d:f8:6a:ff:e1:63:41:8d:11:ee:11:
69:c8:ca:e3:48:15:59:e1:91:34:31:74:0c:9a:4a:5b:2d:94:
2a:b6:df:4b:dc:19:76:17:00:c8:97:e7:80:bb:51:0c:e7:b9:
db:6b:6e:8a:ec:5e:00:02:eb:7a:22:a9:ff:cc:d1:d3:43:ae:
7c:57:a5:07:75:cc:ae:60:34:6f:b0:c3:8e:53:c7:f6:65:b9:
8e:a0:99:48:49:11:59:38:20:20:dd:b0:6c:12:b0:41:5b:28:
c0:9c:c6:c9:83:da:cf:81:42:64:88:3a:20:0b:bc:af:0f:20:
e0:79:1f:f7:75:17:e8:71:aa:92:7e:32:d8:82:b9:24:f7:93:
43:72:b1:77:90:e7:9b:82:65:06:2e:7d:91:83:32:75:18:8a:
7f:85:98:3e:bc:95:5a:e0:34:cf:25:ff:10:f4:73:78:fc:cf:
56:fa:71:67:16:30:0f:24:4d:f8:ee:e5:6b:e7:f2:fc:ad:40:
65:0f:b3:f2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALclMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE2MDY0MDUxWhcNMjUwODA4MDY0MDUxWjAYMRYw
FAYDVQQDEw02NmU3ZDJmNi01NWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArMP+oOkazpI7hp+L0ImeBCAzkPkOeZXIGAXgK1lZke7NooP9G58EyjrA
lhYUktpUJouQzTN/CeXwUIKB0Gdt1i49y/46QY5TzAygFt9rhJdc2FZSknQq1guI
lOcsoBfL1RUUryRkeNVxmB1STS/d+c+tdjbhIgTH7iQ5KGGgsLbNb1GzX3zDGknj
4hxBkdUiBAf1TnEwDPkRiYF3vpIpxD0a3Jp4PXnyCm2qPlV9Z1fccO8vmZFRQVQv
KhucgOYLieQTkqlOYRL2nuu/GAvGqp+hMSRvI0ceX8xbxatve5hSwm7NS9hxqxNE
tNwYB6NYBMw0UO5o31f7y+1nKnwNnwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPkh
8SJeNsQUZL1+HHgbU4407d1MMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjBGQzg2RTczRjYxMUVGOURGODBDODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8rMA0GCSqGSIb3DQEBCwUA
A4IBAQBGtSqxCyNBDkGrKk0HYrDOvMQliFRT0s5oN1qmKXv9tAgXlC2zTovPHKfm
9t1ahXhXMBH1sgmldaqRDticnfhq/+FjQY0R7hFpyMrjSBVZ4ZE0MXQMmkpbLZQq
tt9L3Bl2FwDIl+eAu1EM57nba26K7F4AAut6Iqn/zNHTQ658V6UHdcyuYDRvsMOO
U8f2ZbmOoJlISRFZOCAg3bBsErBBWyjAnMbJg9rPgUJkiDogC7yvDyDgeR/3dRfo
caqSfjLYgrkk95NDcrF3kOebgmUGLn2RgzJ1GIp/hZg+vJVa4DTPJf8Q9HN4/M9W
+nFnFjAPJE347uVr5/L8rUBlD7Py
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org