Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A67B41C608EC11EE8168B40D4AD9E6FC.roa
File: A67B41C608EC11EE8168B40D4AD9E6FC.roa (raw, json)
Hash identifier: CeMZsjagm9DG3gPP2W6oNPvMB8pAe6zgwSJvtjLYBps=
Subject key identifier: BA:6C:21:F0:94:45:84:59:68:47:EB:55:6C:F0:6C:64:41:D3:10:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A67B41C608EC11EE8168B40D4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 06:44:59 +0000
ROA not before: Mon 12 Jun 2023 06:44:56 +0000
ROA not after: Sat 25 May 2024 06:44:56 +0000
asID: 131178
IP address blocks: 45.201.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10905 (0x2a99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 06:44:56 2023 GMT
Not After : May 25 06:44:56 2024 GMT
Subject: CN=6486beeb-54d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:f7:5b:0b:3d:ea:b0:46:53:84:d1:81:72:
13:61:2b:fb:b4:71:30:97:a5:bd:48:3c:b3:00:e2:
6e:b7:bd:7f:e5:8f:33:11:60:cb:bd:0c:cc:75:3a:
0f:4e:b4:7c:ee:3a:8d:c1:cf:90:99:c2:9e:4e:4b:
e5:6b:51:e8:46:1a:83:aa:34:b3:6c:21:76:8b:ab:
3a:4c:ad:86:7c:89:8a:d7:4d:d3:5b:08:64:b3:98:
68:70:58:2f:c7:52:68:79:24:59:5e:7f:e5:ee:15:
97:60:93:25:64:72:1d:83:39:f2:17:ff:2e:84:ec:
5a:c9:c6:79:4e:4f:8b:bd:d1:b0:ae:6d:42:37:0a:
c4:18:42:ab:c1:2f:d8:e1:da:de:d7:e7:0e:a1:b5:
65:76:34:f9:51:4c:78:c5:20:e1:a5:f5:3c:e8:4b:
99:ca:0c:86:42:6a:57:fe:28:58:d5:ec:40:e9:60:
bf:1b:68:a1:a5:ea:6c:b1:a5:48:52:4a:11:ab:7a:
4a:d4:b9:7f:ea:8d:c8:2a:59:7c:53:a2:7b:1e:d2:
c7:d2:65:57:79:a4:77:15:52:b7:d5:0c:38:59:45:
6f:0c:4a:ae:05:5f:c0:30:a8:10:ef:f1:f2:65:58:
fe:b2:9b:55:dc:37:91:48:58:86:52:48:4a:dd:10:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6C:21:F0:94:45:84:59:68:47:EB:55:6C:F0:6C:64:41:D3:10:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A67B41C608EC11EE8168B40D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.128.0/23
Signature Algorithm: sha256WithRSAEncryption
40:59:fc:94:59:ea:74:ac:91:5a:3d:5f:26:14:e6:2b:eb:91:
11:3d:01:cd:15:6e:ed:5b:98:83:b6:b1:a3:16:54:16:4c:df:
b4:f7:ed:27:cd:80:65:a7:2f:d6:65:b4:ef:b7:06:c2:fa:2f:
e9:b5:1a:e6:22:db:8f:5c:2f:86:21:34:39:b8:c5:9b:80:ac:
7d:90:96:30:5b:3a:6f:a5:f8:bd:9f:b3:ed:68:f9:6d:92:c2:
52:bc:e0:81:d6:6d:32:d8:56:03:e9:ea:b4:c8:1e:42:b5:bc:
a2:b2:70:25:56:d0:7d:11:2a:b3:d9:e7:89:f2:10:22:65:2d:
6c:19:a6:1f:94:f4:22:30:03:5c:00:41:45:db:48:a9:f2:42:
05:2a:1e:59:61:f9:a9:6c:5c:43:b3:46:f6:c0:f3:bb:cf:b3:
12:4c:97:47:71:fa:09:a2:35:b0:75:f7:3e:1f:96:0c:6d:3c:
b3:5e:8a:8d:84:e1:e7:5e:74:40:f9:d7:fa:db:2a:f7:88:6f:
41:ac:f4:48:48:b5:d4:67:3f:f0:4d:28:2b:3e:8d:e2:01:17:
56:e3:98:4f:f1:79:cb:ad:e7:b4:bc:8c:f4:57:08:77:33:20:
50:d1:c8:03:a8:2d:41:9d:a8:99:f2:34:cb:5c:df:2e:1d:b7:
45:fd:91:50
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICKpkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTIwNjQ0NTZaFw0yNDA1MjUwNjQ0NTZaMBgxFjAU
BgNVBAMTDTY0ODZiZWViLTU0ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5RvdbCz3qsEZThNGBchNhK/u0cTCXpb1IPLMA4m63vX/ljzMRYMu9DMx1
Og9OtHzuOo3Bz5CZwp5OS+VrUehGGoOqNLNsIXaLqzpMrYZ8iYrXTdNbCGSzmGhw
WC/HUmh5JFlef+XuFZdgkyVkch2DOfIX/y6E7FrJxnlOT4u90bCubUI3CsQYQqvB
L9jh2t7X5w6htWV2NPlRTHjFIOGl9TzoS5nKDIZCalf+KFjV7EDpYL8baKGl6myx
pUhSShGrekrUuX/qjcgqWXxTonse0sfSZVd5pHcVUrfVDDhZRW8MSq4FX8AwqBDv
8fJlWP6ym1XcN5FIWIZSSErdEPHjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUumwh
8JRFhFloR+tVbPBsZEHTEJ0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0E2N0I0MUM2MDhFQzExRUU4MTY4QjQwRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtyYAwDQYJKoZIhvcNAQELBQAD
ggEBAEBZ/JRZ6nSskVo9XyYU5ivrkRE9Ac0Vbu1bmIO2saMWVBZM37T37SfNgGWn
L9ZltO+3BsL6L+m1GuYi249cL4YhNDm4xZuArH2QljBbOm+l+L2fs+1o+W2SwlK8
4IHWbTLYVgPp6rTIHkK1vKKycCVW0H0RKrPZ54nyECJlLWwZph+U9CIwA1wAQUXb
SKnyQgUqHllh+alsXEOzRvbA87vPsxJMl0dx+gmiNbB19z4flgxtPLNeio2E4ede
dED51/rbKveIb0Gs9EhItdRnP/BNKCs+jeIBF1bjmE/xecut57S8jPRXCHczIFDR
yAOoLUGdqJnyNMtc3y4dt0X9kVA=
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:57 2024 by rpki-client on console-fra.rpki-client.org