Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A932F768390811EFA1D96247762E951A.roa
File: A932F768390811EFA1D96247762E951A.roa (raw, json)
Hash identifier: Rc0G19W2qiGCa4+KJtSPhbLoxDBxOlv43E4qzgmAIZM=
Subject key identifier: 96:33:9A:2B:40:95:33:86:84:DD:3C:19:D0:11:55:97:5A:05:B9:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 97AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A932F768390811EFA1D96247762E951A.roa
Signing time: Wed 03 Jul 2024 06:51:23 +0000
ROA not before: Wed 03 Jul 2024 06:51:20 +0000
ROA not after: Sat 21 Sep 2024 06:51:20 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38828 (0x97ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 06:51:20 2024 GMT
Not After : Sep 21 06:51:20 2024 GMT
Subject: CN=6684f4eb-1664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:ce:a7:9c:f7:ed:1c:78:78:97:f1:e5:7f:
48:9c:60:2c:59:94:d0:fb:9c:56:84:72:a5:ad:1d:
d0:7d:43:93:b3:36:21:7a:c0:d8:c4:bb:d2:1d:3c:
5e:9e:91:e9:5c:01:3c:58:3d:b2:ed:45:c6:d5:12:
28:d3:42:37:69:7f:b4:94:f1:63:2e:c1:31:80:70:
65:b6:7a:3d:d9:12:f4:d0:49:22:e8:6e:4b:9f:53:
a3:dc:dc:61:8d:76:a5:93:0e:8c:d8:5d:6b:6f:16:
37:e9:91:61:a3:3b:b9:e7:07:c7:b6:b0:b7:49:60:
b2:8d:60:28:ae:4e:19:ed:4f:12:d2:f5:64:22:b6:
4b:06:b6:fa:22:c0:dc:01:e6:0a:13:bf:01:0b:7c:
90:52:cd:86:55:aa:ec:75:2e:c0:86:75:99:db:d0:
23:88:10:cb:44:7d:8b:67:ad:af:a4:e8:0f:f0:8c:
d3:19:9a:94:c4:c4:2d:3b:91:bb:49:02:2f:a3:01:
6a:c5:b7:54:2c:7b:e7:30:d0:e4:76:9e:df:f1:d3:
60:07:93:01:10:9e:c0:dc:79:66:28:a3:77:dc:5c:
7b:f0:34:2d:ff:b8:4b:b2:ee:44:5d:90:0b:70:ad:
fe:ec:8e:d7:77:de:c7:12:19:7f:4b:b7:9e:7e:ab:
b1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:9A:2B:40:95:33:86:84:DD:3C:19:D0:11:55:97:5A:05:B9:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A932F768390811EFA1D96247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:f5:ff:d6:37:1c:11:ab:b4:8e:67:34:ee:00:3b:c6:33:e0:
a0:af:b0:f6:40:b6:45:32:b2:e8:1b:81:cb:73:49:ae:6d:2d:
dd:4a:fe:d8:20:00:0d:88:30:e8:03:22:54:18:5b:be:cf:70:
6d:f1:37:17:97:f9:fa:b0:eb:1c:51:44:50:16:29:b0:d4:d0:
ee:f7:55:f3:9e:f7:af:8f:b4:0e:89:ab:0d:7e:dc:a9:10:d5:
c0:30:07:49:66:63:bd:26:44:f5:1c:a4:a1:aa:1f:02:22:69:
e0:6d:29:05:78:d4:8c:a8:c6:93:02:05:b6:71:03:a2:7f:4e:
7b:28:f5:c8:c7:76:43:ae:48:34:5a:87:6c:39:e5:ae:8b:99:
4b:fa:a7:1c:c3:91:59:92:94:c7:b5:51:64:ab:30:3c:6b:ff:
7e:5f:58:7e:13:73:1b:24:6e:dc:a8:30:7d:9e:9c:96:50:7c:
7a:6e:93:d1:1b:25:4b:36:9c:8f:a1:b1:a1:26:0c:5f:dd:af:
b2:12:ea:47:bd:23:ae:a2:77:70:7f:e4:3d:c2:9d:e3:c6:1a:
a4:61:7b:ae:8d:62:cf:17:ce:61:22:91:13:b8:80:c2:d5:f5:
c9:63:0e:a1:28:e0:66:ab:77:4f:99:c2:cd:94:0d:b6:0c:e7:
6d:75:04:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJesMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzAzMDY1MTIwWhcNMjQwOTIxMDY1MTIwWjAYMRYw
FAYDVQQDEw02Njg0ZjRlYi0xNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzMfOp5z37Rx4eJfx5X9InGAsWZTQ+5xWhHKlrR3QfUOTszYhesDYxLvS
HTxenpHpXAE8WD2y7UXG1RIo00I3aX+0lPFjLsExgHBltno92RL00Eki6G5Ln1Oj
3NxhjXalkw6M2F1rbxY36ZFhozu55wfHtrC3SWCyjWAork4Z7U8S0vVkIrZLBrb6
IsDcAeYKE78BC3yQUs2GVarsdS7AhnWZ29AjiBDLRH2LZ62vpOgP8IzTGZqUxMQt
O5G7SQIvowFqxbdULHvnMNDkdp7f8dNgB5MBEJ7A3HlmKKN33Fx78DQt/7hLsu5E
XZALcK3+7I7Xd97HEhl/S7eefquxBwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJYz
mitAlTOGhN08GdARVZdaBblnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOTMyRjc2ODM5MDgxMUVGQTFEOTYyNDc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLc9AMA0GCSqGSIb3DQEBCwUA
A4IBAQCP9f/WNxwRq7SOZzTuADvGM+Cgr7D2QLZFMrLoG4HLc0mubS3dSv7YIAAN
iDDoAyJUGFu+z3Bt8TcXl/n6sOscUURQFimw1NDu91Xznvevj7QOiasNftypENXA
MAdJZmO9JkT1HKShqh8CImngbSkFeNSMqMaTAgW2cQOif057KPXIx3ZDrkg0Wods
OeWui5lL+qccw5FZkpTHtVFkqzA8a/9+X1h+E3MbJG7cqDB9npyWUHx6bpPRGyVL
NpyPobGhJgxf3a+yEupHvSOuondwf+Q9wp3jxhqkYXuujWLPF85hIpETuIDC1fXJ
Yw6hKOBmq3dPmcLNlA22DOdtdQRR
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:09 2024 by rpki-client on console-ams.rpki-client.org