Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA753D407FED11EE8780DC354AD9E6FC.roa
File: AA753D407FED11EE8780DC354AD9E6FC.roa (raw, json)
Hash identifier: g5DTuj/MjCFKXH8zVge1vghcJ2v4eWWNPJyrIcTe+bk=
Subject key identifier: 33:BC:0F:A9:0A:12:65:14:7E:7F:A8:4D:E0:F2:E4:A2:21:52:F1:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4654
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA753D407FED11EE8780DC354AD9E6FC.roa
Signing time: Fri 10 Nov 2023 17:22:04 +0000
ROA not before: Fri 10 Nov 2023 17:22:01 +0000
ROA not after: Tue 04 Jun 2024 17:22:01 +0000
asID: 137577
IP address blocks: 45.195.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18004 (0x4654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 17:22:01 2023 GMT
Not After : Jun 4 17:22:01 2024 GMT
Subject: CN=654e66bc-b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:71:4b:eb:db:57:32:4a:de:4c:3d:d7:eb:
63:fe:02:78:45:14:c1:30:e3:db:8c:6e:d5:b1:ac:
68:4b:a2:45:63:6d:82:a7:7f:50:1c:05:42:a2:ef:
cf:81:17:c6:94:e6:3e:49:7d:1e:6d:76:5d:68:f3:
e6:6d:78:4d:87:5c:68:76:e8:10:42:0c:3e:93:4a:
eb:68:c7:c5:cd:6e:a9:4f:21:d9:1a:f6:a1:ab:9c:
82:ce:d5:72:11:f3:4f:19:2d:02:5b:05:8c:08:9d:
76:67:b2:25:d0:a6:7e:8a:c2:c0:79:4e:ae:c2:d3:
a2:e7:d1:e1:ef:3d:6c:08:90:a6:40:f2:7d:cf:e6:
64:64:7b:cc:98:07:32:46:9b:fb:0d:23:cd:d6:42:
c7:5e:0c:fa:c9:ab:86:27:cc:2e:c4:42:9f:67:03:
c7:bb:69:f6:40:1f:49:1a:bb:d7:44:03:1b:dc:34:
e9:44:70:71:35:6a:bc:f2:d2:4e:53:00:82:48:c9:
fa:c0:db:93:a3:c0:7c:da:0b:81:71:d7:31:1a:f8:
f3:ef:8b:c2:40:4f:2e:40:c7:47:91:b0:b0:03:47:
99:46:b3:62:a1:e9:26:86:cd:04:03:14:1d:c4:0d:
01:23:3c:d7:22:af:6b:0f:f2:66:b0:74:d5:8c:01:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:0F:A9:0A:12:65:14:7E:7F:A8:4D:E0:F2:E4:A2:21:52:F1:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA753D407FED11EE8780DC354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:91:97:2c:08:03:01:e5:5a:6e:05:59:d6:85:a7:8b:0e:f8:
b0:29:c7:e5:d6:99:2b:e8:dd:bc:b6:97:e6:c9:33:09:18:5e:
93:3c:5f:73:59:7d:e9:32:1d:91:51:86:a4:c4:10:7a:cb:80:
d4:2a:00:66:b2:e8:e7:01:b3:00:3c:cf:d1:6f:d0:bd:d0:6c:
e8:7d:14:7c:4d:7f:55:76:89:61:b4:cc:1b:da:7a:92:b3:18:
65:fd:0a:e0:00:8f:3f:77:87:7a:98:5d:f2:9d:51:09:d5:5b:
13:80:7d:b5:8f:f5:ab:2b:ab:42:c2:39:f2:c6:75:1d:1a:64:
3f:dc:98:f8:ea:5f:76:de:10:db:fd:52:e3:a6:ce:93:17:7e:
ae:e7:85:84:fb:f1:4c:b5:88:e3:3b:61:4f:25:70:9d:d7:45:
d9:0a:8a:e8:b1:f3:31:58:e7:5b:f4:23:16:ed:4e:04:2b:1c:
e3:82:96:80:0f:32:b9:74:85:d2:f2:55:3f:f3:db:90:97:63:
2b:81:df:e4:5b:55:9f:97:75:bc:45:50:0d:fe:96:33:f6:87:
f1:0f:99:14:82:ba:ec:47:73:2f:88:47:83:90:70:c2:bb:bc:
65:c7:72:60:70:4b:b4:66:c4:49:32:b4:59:eb:b4:ad:94:88:
9c:08:67:27
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRlQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMTAxNzIyMDFaFw0yNDA2MDQxNzIyMDFaMBgxFjAU
BgNVBAMTDTY1NGU2NmJjLWI4ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/g3FL69tXMkreTD3X62P+AnhFFMEw49uMbtWxrGhLokVjbYKnf1AcBUKi
78+BF8aU5j5JfR5tdl1o8+ZteE2HXGh26BBCDD6TSutox8XNbqlPIdka9qGrnILO
1XIR808ZLQJbBYwInXZnsiXQpn6KwsB5Tq7C06Ln0eHvPWwIkKZA8n3P5mRke8yY
BzJGm/sNI83WQsdeDPrJq4YnzC7EQp9nA8e7afZAH0kau9dEAxvcNOlEcHE1arzy
0k5TAIJIyfrA25OjwHzaC4Fx1zEa+PPvi8JATy5Ax0eRsLADR5lGs2Kh6SaGzQQD
FB3EDQEjPNcir2sP8mawdNWMAapfAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUM7wP
qQoSZRR+f6hN4PLkoiFS8YwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0FBNzUzRDQwN0ZFRDExRUU4NzgwREMzNTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwyUwDQYJKoZIhvcNAQELBQAD
ggEBAB6RlywIAwHlWm4FWdaFp4sO+LApx+XWmSvo3by2l+bJMwkYXpM8X3NZfeky
HZFRhqTEEHrLgNQqAGay6OcBswA8z9Fv0L3QbOh9FHxNf1V2iWG0zBvaepKzGGX9
CuAAjz93h3qYXfKdUQnVWxOAfbWP9asrq0LCOfLGdR0aZD/cmPjqX3beENv9UuOm
zpMXfq7nhYT78Uy1iOM7YU8lcJ3XRdkKiuix8zFY51v0IxbtTgQrHOOCloAPMrl0
hdLyVT/z25CXYyuB3+RbVZ+XdbxFUA3+ljP2h/EPmRSCuuxHcy+IR4OQcMK7vGXH
cmBwS7RmxEkytFnrtK2UiJwIZyc=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org