Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A82AA3E8A26211EF991A77A1762E951A.roa
File: A82AA3E8A26211EF991A77A1762E951A.roa (raw, json)
Hash identifier: C+OqWWTq8lOrgXX+YKjbS89WCXOgRY6LuC0QoKRu7wc=
Subject key identifier: FB:0B:3A:07:A6:4B:A6:93:EE:20:9D:5E:35:09:27:3C:62:6C:D1:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A82AA3E8A26211EF991A77A1762E951A.roa
Signing time: Thu 14 Nov 2024 08:30:08 +0000
ROA not before: Thu 14 Nov 2024 08:30:05 +0000
ROA not after: Wed 18 Dec 2024 08:30:05 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53925 (0xd2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 08:30:05 2024 GMT
Not After : Dec 18 08:30:05 2024 GMT
Subject: CN=6735b510-0bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:df:ae:d5:8d:f4:fa:86:50:4c:fa:33:61:
4a:3d:e4:91:a0:4e:41:ec:b2:4f:27:0c:30:59:d7:
52:f2:16:ba:f3:0a:6a:32:4b:5d:79:8a:33:6d:10:
2e:a0:b2:1b:3f:ec:c8:81:89:2f:65:52:be:66:f9:
6d:31:57:da:d1:60:e0:81:80:21:0f:d5:3b:24:30:
19:0f:11:bf:90:d8:7a:dc:6b:4a:eb:71:ce:eb:a8:
dd:aa:02:bc:cc:b6:38:2f:5c:2f:17:fa:a9:5e:55:
0d:ae:ca:56:99:5c:49:37:0c:4b:dd:32:24:99:de:
0a:dd:49:5f:0c:cc:d2:d3:0f:f4:94:ff:2e:cf:83:
74:bf:fb:bc:aa:e4:87:da:b8:91:1f:28:e3:2f:2a:
ed:6a:dc:da:76:43:48:56:fd:70:36:22:37:e1:ae:
f5:7d:8e:33:87:8a:33:63:d5:e6:e7:cd:9f:3b:82:
55:3f:c3:86:ce:52:e2:87:5d:3b:11:c4:ad:cb:a5:
c0:f9:66:ee:80:fe:de:e3:f6:03:b2:73:3d:26:e0:
25:31:1c:1a:fa:d3:f4:e4:8c:a5:ce:e8:ed:1d:e0:
20:54:15:0a:c4:f5:bf:a0:15:5c:d6:cb:73:1d:9b:
54:bc:c3:1d:8d:9c:bf:a9:3c:86:8b:ff:71:80:e2:
95:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:3A:07:A6:4B:A6:93:EE:20:9D:5E:35:09:27:3C:62:6C:D1:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A82AA3E8A26211EF991A77A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:d3:a9:87:e1:de:9a:2d:dd:96:a7:77:5e:e1:c3:81:e6:e1:
9c:b2:5d:6d:7f:59:a1:8c:ab:f4:cf:90:92:25:04:6d:43:a0:
2d:11:86:69:8c:0e:91:5f:e1:a2:de:2b:1a:4f:77:8d:f3:af:
e8:d0:e8:86:77:b7:ac:78:a8:19:44:40:0b:75:0a:66:9e:92:
69:71:2f:38:08:3c:0b:19:ab:67:c0:27:16:e4:99:eb:d2:5a:
94:93:bb:2a:47:cf:8a:c2:18:0c:c8:2b:03:dc:59:71:44:99:
02:7c:68:70:a2:47:b9:47:b2:25:f2:7b:75:e6:ae:e0:f0:c5:
fe:d8:49:42:dc:fa:8c:12:bf:30:5b:f9:58:06:4c:e8:34:8a:
98:d5:89:d3:6c:01:b1:61:7d:5a:8c:63:0d:0e:ad:4e:2b:1d:
8a:ab:42:48:c9:26:8a:c3:b9:5b:91:3c:6d:22:a5:93:00:89:
55:c9:09:44:0b:8c:46:83:41:6f:b2:d1:5f:d5:db:1e:65:65:
8e:34:a5:38:63:4e:dd:43:77:ac:22:df:ad:98:4d:c2:76:14:
dd:07:89:09:44:e9:67:3d:8c:5c:d4:d8:24:b7:c3:5a:b5:ec:
06:ec:1d:cf:2d:a4:bc:67:f4:69:b5:49:f7:ed:f7:f6:a2:c0:
4d:e9:11:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANKlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE0MDgzMDA1WhcNMjQxMjE4MDgzMDA1WjAYMRYw
FAYDVQQDEw02NzM1YjUxMC0wYmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ZDfrtWN9PqGUEz6M2FKPeSRoE5B7LJPJwwwWddS8ha68wpqMktdeYoz
bRAuoLIbP+zIgYkvZVK+ZvltMVfa0WDggYAhD9U7JDAZDxG/kNh63GtK63HO66jd
qgK8zLY4L1wvF/qpXlUNrspWmVxJNwxL3TIkmd4K3UlfDMzS0w/0lP8uz4N0v/u8
quSH2riRHyjjLyrtatzadkNIVv1wNiI34a71fY4zh4ozY9Xm582fO4JVP8OGzlLi
h107EcSty6XA+WbugP7e4/YDsnM9JuAlMRwa+tP05IylzujtHeAgVBUKxPW/oBVc
1stzHZtUvMMdjZy/qTyGi/9xgOKVnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPsL
OgemS6aT7iCdXjUJJzxibNH9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODJBQTNFOEEyNjIxMUVGOTkxQTc3QTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc0QMA0GCSqGSIb3DQEBCwUA
A4IBAQBP06mH4d6aLd2Wp3de4cOB5uGcsl1tf1mhjKv0z5CSJQRtQ6AtEYZpjA6R
X+Gi3isaT3eN86/o0OiGd7eseKgZREALdQpmnpJpcS84CDwLGatnwCcW5Jnr0lqU
k7sqR8+KwhgMyCsD3FlxRJkCfGhwoke5R7Il8nt15q7g8MX+2ElC3PqMEr8wW/lY
BkzoNIqY1YnTbAGxYX1ajGMNDq1OKx2Kq0JIySaKw7lbkTxtIqWTAIlVyQlEC4xG
g0FvstFf1dseZWWONKU4Y07dQ3esIt+tmE3CdhTdB4kJROlnPYxc1Ngkt8NatewG
7B3PLaS8Z/RptUn37ff2osBN6RG+
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:44 2024 by rpki-client on console-ams.rpki-client.org