Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A56DCC56735111EF83AA8E49762E951A.roa
File: A56DCC56735111EF83AA8E49762E951A.roa (raw, json)
Hash identifier: +vBVfH5ezqA3kDB3gpUDqsV44iRj4d3PNnaoO3ZV7NY=
Subject key identifier: F1:C7:B3:03:90:BE:45:9C:CA:C1:7C:CC:16:39:7B:21:5A:11:DB:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B66A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A56DCC56735111EF83AA8E49762E951A.roa
Signing time: Sun 15 Sep 2024 10:59:58 +0000
ROA not before: Sun 15 Sep 2024 10:59:54 +0000
ROA not after: Fri 08 Aug 2025 10:59:54 +0000
asID: 133861
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46698 (0xb66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:59:54 2024 GMT
Not After : Aug 8 10:59:54 2025 GMT
Subject: CN=66e6be2e-252f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:41:cb:a5:11:a2:9a:98:fb:c4:c4:f4:e9:
22:07:7f:33:07:66:a7:01:15:29:2e:69:ee:12:59:
d3:ba:55:df:0d:6b:2a:05:b4:c4:cc:6d:d8:51:87:
95:e4:f0:6b:60:df:68:cf:cc:bb:84:91:0e:5a:03:
73:df:ea:d7:29:bb:4b:9d:8a:d6:0a:b8:40:89:4d:
57:9c:8b:02:6c:03:40:17:31:84:8f:b9:fb:90:6c:
cd:ae:4c:d1:81:2d:5c:e2:5d:23:eb:73:ef:9f:5b:
c4:23:fa:82:08:b6:c8:b7:74:a9:a3:40:1e:14:12:
9e:d5:ed:f1:d0:51:34:44:6d:17:8f:90:8f:55:00:
5a:5a:eb:b1:83:2b:ab:d8:18:16:6d:3e:a3:87:d6:
39:c7:bf:6e:88:32:c3:35:71:07:8d:d5:64:23:2c:
fe:78:4e:25:20:87:c7:7b:f0:a4:bc:df:d4:32:41:
55:41:f9:d9:09:2b:87:65:ae:df:99:9b:5a:4e:0d:
fe:c0:56:5f:3a:cd:8b:dc:4d:39:3a:06:a1:32:07:
8f:3c:ab:45:0e:b8:00:78:ab:e9:10:bb:87:73:a0:
29:a4:5f:cb:52:ca:b1:55:d6:83:9b:30:bc:81:85:
cd:f7:bc:6e:13:83:f0:82:46:c4:f6:9f:3e:39:be:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C7:B3:03:90:BE:45:9C:CA:C1:7C:CC:16:39:7B:21:5A:11:DB:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A56DCC56735111EF83AA8E49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d1:30:21:0f:56:19:d0:b4:40:df:5c:3d:52:87:e4:9a:06:
1a:84:22:28:52:95:f1:cd:98:e7:e9:51:06:bf:d7:f4:d5:60:
b0:a0:b4:51:8b:00:d6:3e:5b:d9:c8:4b:88:2b:91:fd:eb:4f:
7d:0e:1a:a9:ab:c5:bc:b9:f1:41:4b:1e:01:68:21:43:1b:38:
71:d3:9c:1c:61:49:d2:28:d4:e5:e8:67:ba:5e:fa:ab:b6:e0:
2a:d3:72:d3:99:11:5f:b1:60:93:54:9d:73:6f:b4:2d:9a:e9:
b9:57:87:4f:77:ab:cb:9c:9d:75:12:d8:23:2f:30:7d:17:7d:
e5:31:9c:a0:bd:3a:89:1e:52:1d:0e:73:fd:63:16:f1:6c:36:
3f:3d:19:4c:41:98:1c:9c:69:49:a4:12:5d:bb:9c:05:cb:c8:
86:98:66:3a:3f:b7:b1:76:6e:21:d7:27:f0:19:72:d9:7f:0c:
c3:58:88:6b:c1:c1:82:db:1b:af:c9:20:1a:c9:25:50:a0:05:
8c:54:6f:e7:5c:30:c3:26:ec:6c:74:04:a7:4f:15:3a:b7:69:
1c:87:d7:44:7c:7b:3b:99:f9:db:56:bb:df:e8:8e:7c:1f:9f:
82:5a:a4:3e:d3:2f:6f:65:2b:ef:35:49:53:fe:ab:11:53:6e:
b9:7f:38:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALZqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE1MTA1OTU0WhcNMjUwODA4MTA1OTU0WjAYMRYw
FAYDVQQDEw02NmU2YmUyZS0yNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtDBBy6URopqY+8TE9OkiB38zB2anARUpLmnuElnTulXfDWsqBbTEzG3Y
UYeV5PBrYN9oz8y7hJEOWgNz3+rXKbtLnYrWCrhAiU1XnIsCbANAFzGEj7n7kGzN
rkzRgS1c4l0j63Pvn1vEI/qCCLbIt3Spo0AeFBKe1e3x0FE0RG0Xj5CPVQBaWuux
gyur2BgWbT6jh9Y5x79uiDLDNXEHjdVkIyz+eE4lIIfHe/CkvN/UMkFVQfnZCSuH
Za7fmZtaTg3+wFZfOs2L3E05OgahMgePPKtFDrgAeKvpELuHc6AppF/LUsqxVdaD
mzC8gYXN97xuE4PwgkbE9p8+Ob7yOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPHH
swOQvkWcysF8zBY5eyFaEdvOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTZEQ0M1NjczNTExMUVGODNBQThFNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8oMA0GCSqGSIb3DQEBCwUA
A4IBAQAS0TAhD1YZ0LRA31w9UofkmgYahCIoUpXxzZjn6VEGv9f01WCwoLRRiwDW
PlvZyEuIK5H96099Dhqpq8W8ufFBSx4BaCFDGzhx05wcYUnSKNTl6Ge6XvqrtuAq
03LTmRFfsWCTVJ1zb7Qtmum5V4dPd6vLnJ11EtgjLzB9F33lMZygvTqJHlIdDnP9
YxbxbDY/PRlMQZgcnGlJpBJdu5wFy8iGmGY6P7exdm4h1yfwGXLZfwzDWIhrwcGC
2xuvySAaySVQoAWMVG/nXDDDJuxsdASnTxU6t2kch9dEfHs7mfnbVrvf6I58H5+C
WqQ+0y9vZSvvNUlT/qsRU265fzga
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org