Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EC56667EC811EE923DC18B4AD9E6FC.roa
File: A1EC56667EC811EE923DC18B4AD9E6FC.roa (raw, json)
Hash identifier: 2Zg3n7KhfSdy5FZtVHnCM9nS4/tLNJeRQvpSQ0+Zbqs=
Subject key identifier: 4A:0B:7F:76:8D:72:3E:5E:88:BE:C9:85:34:14:0A:CD:94:0C:46:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4533
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EC56667EC811EE923DC18B4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:24:27 +0000
ROA not before: Thu 09 Nov 2023 06:24:24 +0000
ROA not after: Thu 07 Nov 2024 06:24:24 +0000
asID: 133847
IP address blocks: 45.200.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17715 (0x4533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:24:24 2023 GMT
Not After : Nov 7 06:24:24 2024 GMT
Subject: CN=654c7b1b-0fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:5d:c7:db:0d:f3:70:bc:a5:f8:38:9d:56:
01:fc:ae:68:a1:1f:9a:68:99:24:1a:5b:33:bb:f3:
ea:bc:f5:72:f1:ba:9b:31:8e:3a:3a:40:ff:df:eb:
d4:81:2c:e2:da:0d:54:e7:5b:ce:53:11:5c:9d:ef:
17:95:a9:e2:ab:50:16:4f:27:b6:3f:b2:62:28:5a:
93:10:a2:f0:fe:71:11:0b:5e:aa:2c:83:44:66:fb:
0d:f0:5a:dd:3c:55:5a:33:ff:9b:23:d9:82:bc:99:
47:34:20:77:3b:24:08:d7:e6:38:cf:7e:de:98:f9:
35:45:20:da:03:36:4c:75:98:2a:87:57:56:7a:6a:
3d:c6:29:43:5d:6c:2c:5a:4b:ec:f1:2f:91:6f:7c:
4b:94:9d:24:a7:86:74:5b:af:a8:1e:0c:70:a2:c6:
98:f0:08:6f:9f:69:27:27:77:17:be:90:fa:60:50:
64:b5:c0:80:38:53:ac:a1:ee:60:4a:79:b6:a9:a9:
95:43:13:d7:57:c9:b6:cb:54:ea:85:c1:3b:49:8f:
80:d7:54:c7:f5:5c:c6:72:02:99:04:2f:a2:90:d2:
b0:ff:0e:43:f8:bf:95:5e:52:3e:65:6d:fb:a6:c8:
0d:49:7a:25:82:31:dc:45:84:77:3a:76:bf:bf:f0:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:7F:76:8D:72:3E:5E:88:BE:C9:85:34:14:0A:CD:94:0C:46:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1EC56667EC811EE923DC18B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.64.0/20
Signature Algorithm: sha256WithRSAEncryption
41:a9:b8:c1:c9:18:2e:5b:83:6b:2c:06:0b:d7:cc:b4:09:ce:
f4:23:96:01:be:6a:9c:33:dd:f5:9c:97:38:68:29:63:9b:94:
85:45:15:03:5f:9b:20:cb:94:7f:19:83:14:68:05:2b:64:3b:
cd:c0:47:e5:c4:6d:a8:ff:0a:61:a7:01:e3:9e:af:45:2c:c0:
5b:45:e3:a3:33:44:4d:2c:5e:e1:ac:97:51:00:66:82:b2:12:
bb:a9:11:ac:b3:03:95:7e:9b:fb:98:db:9e:35:01:ae:84:7c:
d6:5e:e7:99:99:01:16:34:47:a0:e9:0c:44:9e:84:5f:13:95:
9c:fb:6c:7a:6e:83:ee:44:62:e3:ca:97:60:c2:b3:83:db:a4:
78:94:55:8c:05:41:f3:5d:10:a0:3f:d0:15:13:e0:2f:4f:95:
cf:b1:09:69:35:55:d5:ae:7f:cb:2a:9e:db:f1:7a:45:36:68:
00:5e:c9:c5:0a:24:0e:66:95:d9:50:1e:9d:e7:8e:c3:c4:dd:
77:68:16:6c:69:37:29:c3:1a:3f:d7:b7:46:2d:1a:ab:70:6d:
d4:be:78:95:e4:67:b4:06:31:46:82:36:ed:0c:20:bf:d4:96:
a5:0e:a8:a2:1e:8f:83:9c:ac:6e:df:4c:f6:7c:fe:8c:d5:66:
b7:c6:d4:0e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRTMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNjI0MjRaFw0yNDExMDcwNjI0MjRaMBgxFjAU
BgNVBAMTDTY1NGM3YjFiLTBmYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyTV3H2w3zcLyl+DidVgH8rmihH5pomSQaWzO78+q89XLxupsxjjo6QP/f
69SBLOLaDVTnW85TEVyd7xeVqeKrUBZPJ7Y/smIoWpMQovD+cRELXqosg0Rm+w3w
Wt08VVoz/5sj2YK8mUc0IHc7JAjX5jjPft6Y+TVFINoDNkx1mCqHV1Z6aj3GKUNd
bCxaS+zxL5FvfEuUnSSnhnRbr6geDHCixpjwCG+faScndxe+kPpgUGS1wIA4U6yh
7mBKebapqZVDE9dXybbLVOqFwTtJj4DXVMf1XMZyApkEL6KQ0rD/DkP4v5VeUj5l
bfumyA1JeiWCMdxFhHc6dr+/8OVHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUSgt/
do1yPl6IvsmFNBQKzZQMRr0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ExRUM1NjY2N0VDODExRUU5MjNEQzE4QjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQtyEAwDQYJKoZIhvcNAQELBQAD
ggEBAEGpuMHJGC5bg2ssBgvXzLQJzvQjlgG+apwz3fWclzhoKWOblIVFFQNfmyDL
lH8ZgxRoBStkO83AR+XEbaj/CmGnAeOer0UswFtF46MzRE0sXuGsl1EAZoKyErup
EayzA5V+m/uY2541Aa6EfNZe55mZARY0R6DpDESehF8TlZz7bHpug+5EYuPKl2DC
s4PbpHiUVYwFQfNdEKA/0BUT4C9Plc+xCWk1VdWuf8sqntvxekU2aABeycUKJA5m
ldlQHp3njsPE3XdoFmxpNynDGj/Xt0YtGqtwbdS+eJXkZ7QGMUaCNu0MIL/UlqUO
qKIej4OcrG7fTPZ8/ozVZrfG1A4=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org