Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A868F704A64711EFBA9FE4A6762E951A.roa
File: A868F704A64711EFBA9FE4A6762E951A.roa (raw, json)
Hash identifier: lJSJODgw/HYfkGuUI0tklOKlPaEyjxXcCQS1LbF4wSU=
Subject key identifier: FE:18:69:4F:1C:F0:60:76:12:55:03:EB:DA:09:95:DD:21:61:A6:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D548
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A868F704A64711EFBA9FE4A6762E951A.roa
Signing time: Tue 19 Nov 2024 07:26:57 +0000
ROA not before: Tue 19 Nov 2024 07:26:53 +0000
ROA not after: Fri 21 Nov 2025 07:26:53 +0000
asID: 152920
IP address blocks: 45.203.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54600 (0xd548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:26:53 2024 GMT
Not After : Nov 21 07:26:53 2025 GMT
Subject: CN=673c3dc1-8521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:82:77:bf:17:8f:57:80:5c:e9:77:de:d8:
b1:07:74:11:24:0e:02:85:08:fd:cb:90:0a:11:fc:
83:63:a4:c9:8f:31:0c:b7:71:23:e3:42:9b:d3:32:
26:f6:91:91:8b:e1:52:b0:70:01:ac:bb:23:c2:34:
9f:fe:c7:5e:a8:8f:a9:88:f2:f5:34:d2:49:e5:30:
e4:da:b6:a1:86:45:3f:fb:e4:16:57:13:2d:02:03:
d3:56:4a:88:6c:5a:f0:79:c7:44:24:35:0b:ab:6d:
bc:48:ef:1e:74:94:e3:7a:63:73:1a:09:69:cc:9e:
09:4a:69:b4:78:69:52:fd:5c:f4:80:17:53:17:9d:
fe:33:9c:05:97:29:58:14:5f:5b:20:08:3c:2e:09:
24:07:82:9b:c8:be:1a:17:c0:1d:7c:8e:47:1e:4b:
e4:b1:06:58:27:74:b8:f8:26:52:cd:a1:a4:13:f1:
c4:aa:15:7d:49:71:86:f9:ae:17:a5:c0:8e:0a:78:
06:5f:05:cc:a1:08:33:60:ed:7e:9e:44:6e:95:53:
d9:7e:73:72:01:94:c7:b0:1b:29:9a:ab:f8:0c:a6:
46:60:52:7d:1a:7f:0d:df:dc:25:41:8c:70:c5:5c:
30:02:d3:79:d7:ad:e3:ef:21:86:bd:6e:96:87:bb:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:69:4F:1C:F0:60:76:12:55:03:EB:DA:09:95:DD:21:61:A6:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A868F704A64711EFBA9FE4A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.130.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9c:b2:52:71:2e:8b:a6:c0:51:a1:e3:e1:92:14:9f:bb:27:
54:04:c6:d1:c4:47:77:e4:d7:0a:12:a6:d0:52:50:a9:86:77:
71:40:19:9e:33:9d:cd:ce:26:cd:f6:15:28:cf:b0:09:2c:33:
ba:01:18:60:0e:22:a8:f5:98:00:3e:41:c1:55:8b:24:13:60:
26:da:6a:eb:cd:9b:1d:b5:5e:f5:21:91:54:e9:b8:b4:8f:9b:
cc:49:6e:4d:80:f1:d0:af:29:bb:e1:c1:f4:07:e8:eb:ef:80:
3c:99:9f:fb:71:64:f6:2c:8c:32:05:22:a4:2e:9c:4a:54:d4:
16:09:fe:c5:68:70:4b:45:33:3f:ce:27:5b:dd:bc:6f:3f:e7:
14:e0:69:02:32:91:7b:aa:95:cd:02:7e:be:2b:dd:ff:c9:3c:
cc:2a:de:49:51:21:7a:66:15:b9:27:5e:69:6e:b1:b6:9b:af:
ee:d8:f7:3c:0d:64:b9:85:2b:3e:28:67:09:97:ed:d3:78:29:
0d:5c:7c:14:ec:1c:d1:a2:b5:fb:a1:06:ee:c4:ff:72:26:4e:
a7:83:50:3c:09:2b:a2:d6:95:01:4a:4f:10:a5:5c:ab:15:78:
c7:43:b9:a1:94:da:b0:f3:bf:5e:70:a2:92:0e:c9:52:f8:43:
19:70:8d:43
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANVIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE5MDcyNjUzWhcNMjUxMTIxMDcyNjUzWjAYMRYw
FAYDVQQDEw02NzNjM2RjMS04NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA17GCd78Xj1eAXOl33tixB3QRJA4ChQj9y5AKEfyDY6TJjzEMt3Ej40Kb
0zIm9pGRi+FSsHABrLsjwjSf/sdeqI+piPL1NNJJ5TDk2rahhkU/++QWVxMtAgPT
VkqIbFrwecdEJDULq228SO8edJTjemNzGglpzJ4JSmm0eGlS/Vz0gBdTF53+M5wF
lylYFF9bIAg8LgkkB4KbyL4aF8AdfI5HHkvksQZYJ3S4+CZSzaGkE/HEqhV9SXGG
+a4XpcCOCngGXwXMoQgzYO1+nkRulVPZfnNyAZTHsBspmqv4DKZGYFJ9Gn8N39wl
QYxwxVwwAtN5163j7yGGvW6Wh7vbawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP4Y
aU8c8GB2ElUD69oJld0hYaZZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODY4RjcwNEE2NDcxMUVGQkE5RkU0QTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcuCMA0GCSqGSIb3DQEBCwUA
A4IBAQBTnLJScS6LpsBRoePhkhSfuydUBMbRxEd35NcKEqbQUlCphndxQBmeM53N
zibN9hUoz7AJLDO6ARhgDiKo9ZgAPkHBVYskE2Am2mrrzZsdtV71IZFU6bi0j5vM
SW5NgPHQrym74cH0B+jr74A8mZ/7cWT2LIwyBSKkLpxKVNQWCf7FaHBLRTM/zidb
3bxvP+cU4GkCMpF7qpXNAn6+K93/yTzMKt5JUSF6ZhW5J15pbrG2m6/u2Pc8DWS5
hSs+KGcJl+3TeCkNXHwU7BzRorX7oQbuxP9yJk6ng1A8CSui1pUBSk8QpVyrFXjH
Q7mhlNqw879ecKKSDslS+EMZcI1D
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:44 2024 by rpki-client on console-ams.rpki-client.org