Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A685F5A65EF611EF9D90E9B6762E951A.roa
File: A685F5A65EF611EF9D90E9B6762E951A.roa (raw, json)
Hash identifier: O5NhCn78oMU6J2HFFxTnfLJFDflALbwHl5yN4/WTirM=
Subject key identifier: A9:37:F9:F2:86:35:C4:6D:5C:1E:E8:E1:04:5C:E5:6D:51:8E:6D:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A685F5A65EF611EF9D90E9B6762E951A.roa
Signing time: Tue 20 Aug 2024 13:18:12 +0000
ROA not before: Tue 20 Aug 2024 13:18:09 +0000
ROA not after: Fri 29 Aug 2025 13:18:09 +0000
asID: 18233
IP address blocks: 45.195.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43558 (0xaa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:18:09 2024 GMT
Not After : Aug 29 13:18:09 2025 GMT
Subject: CN=66c49794-1289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:0c:db:78:c3:9d:eb:bc:f1:61:76:4b:90:
4d:46:b7:70:12:55:cc:f6:3a:af:01:2f:7f:b2:96:
27:27:9f:ed:d6:5f:88:69:d1:c6:7e:db:30:a2:7a:
a8:20:ac:b4:91:96:b0:ed:ec:8f:2f:70:66:ce:3d:
71:a3:0c:85:da:7e:db:cf:c2:a4:34:a0:86:4e:46:
f1:42:dd:57:8d:b0:e4:95:48:2e:77:40:67:c7:4d:
f4:da:cd:b9:c2:6d:d4:b1:56:15:91:30:32:ba:4a:
c0:74:33:a5:66:a8:c5:21:ef:e5:7c:65:71:ee:2f:
66:43:ec:11:0a:63:27:a2:f3:15:03:d5:c5:90:f0:
25:aa:56:38:6b:93:b5:08:b8:ee:a1:74:82:71:4d:
51:d7:eb:1a:2b:01:57:82:3a:b9:f0:43:b3:c4:af:
74:6f:9f:53:87:a8:30:52:35:c0:c2:1c:ae:b0:20:
87:9f:15:12:d9:5d:d3:d4:46:c5:36:72:52:cb:d5:
e6:c5:8e:d4:8d:eb:75:f6:90:e6:c0:83:2e:07:68:
28:ba:91:13:d3:f8:74:91:50:57:e0:88:71:b8:15:
00:b8:57:e5:cc:22:af:6b:ee:be:4f:c6:93:9c:63:
a1:66:7a:3b:a1:84:7e:9e:28:24:b3:dc:cb:dd:16:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:37:F9:F2:86:35:C4:6D:5C:1E:E8:E1:04:5C:E5:6D:51:8E:6D:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A685F5A65EF611EF9D90E9B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:2b:3a:ff:fb:e4:15:8c:9d:a0:79:0b:43:7d:fe:4f:f8:08:
5b:8b:02:a5:7c:5e:e4:48:8e:5e:61:3e:1d:65:23:3f:96:0b:
58:c6:cf:85:88:0f:9e:62:42:9d:1e:51:6c:1b:d1:03:28:4d:
94:b8:18:c2:84:42:7f:30:a9:e5:ac:60:24:26:c6:67:d9:85:
c5:da:d1:ec:d0:ff:96:68:eb:9f:1b:8c:19:a8:fa:69:5f:a6:
1c:c9:86:7c:67:3e:7d:d0:a6:22:1d:7f:04:f8:d7:0f:0f:47:
2a:e9:20:29:f9:3b:10:74:63:57:5c:5a:3f:df:71:a8:7d:62:
83:9c:5f:ee:db:e0:ed:f5:d8:4b:a2:96:37:48:d9:01:08:ad:
66:13:23:46:e3:7b:bc:93:5e:9b:8e:e0:ab:26:66:19:48:84:
47:28:92:ec:af:16:34:d2:9a:1a:73:93:e5:9e:5e:d9:69:50:
4c:3f:84:9a:13:b1:1e:b0:2e:48:d6:6b:bf:a9:36:f3:7a:c3:
69:e1:93:5c:94:76:83:1b:6e:18:4b:60:71:9d:ad:58:ba:ad:
ec:0f:00:92:8b:a6:12:5a:20:f9:18:fd:a3:64:05:32:1a:3d:
e0:51:00:04:bf:bb:4e:b6:a6:34:90:2a:2b:85:25:d5:fc:00:
e3:31:1d:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKomMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTMxODA5WhcNMjUwODI5MTMxODA5WjAYMRYw
FAYDVQQDEw02NmM0OTc5NC0xMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsZgM23jDneu88WF2S5BNRrdwElXM9jqvAS9/spYnJ5/t1l+IadHGftsw
onqoIKy0kZaw7eyPL3Bmzj1xowyF2n7bz8KkNKCGTkbxQt1XjbDklUgud0Bnx030
2s25wm3UsVYVkTAyukrAdDOlZqjFIe/lfGVx7i9mQ+wRCmMnovMVA9XFkPAlqlY4
a5O1CLjuoXSCcU1R1+saKwFXgjq58EOzxK90b59Th6gwUjXAwhyusCCHnxUS2V3T
1EbFNnJSy9XmxY7Ujet19pDmwIMuB2goupET0/h0kVBX4IhxuBUAuFflzCKva+6+
T8aTnGOhZno7oYR+nigks9zL3RZ2CQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKk3
+fKGNcRtXB7o4QRc5W1Rjm2eMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNjg1RjVBNjVFRjYxMUVGOUQ5MEU5QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcMcMA0GCSqGSIb3DQEBCwUA
A4IBAQCnKzr/++QVjJ2geQtDff5P+AhbiwKlfF7kSI5eYT4dZSM/lgtYxs+FiA+e
YkKdHlFsG9EDKE2UuBjChEJ/MKnlrGAkJsZn2YXF2tHs0P+WaOufG4wZqPppX6Yc
yYZ8Zz590KYiHX8E+NcPD0cq6SAp+TsQdGNXXFo/33GofWKDnF/u2+Dt9dhLopY3
SNkBCK1mEyNG43u8k16bjuCrJmYZSIRHKJLsrxY00poac5Plnl7ZaVBMP4SaE7Ee
sC5I1mu/qTbzesNp4ZNclHaDG24YS2Bxna1Yuq3sDwCSi6YSWiD5GP2jZAUyGj3g
UQAEv7tOtqY0kCorhSXV/ADjMR0P
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org