Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDAE1B274C211EF829CFF81762E951A.roa
File: AEDAE1B274C211EF829CFF81762E951A.roa (raw, json)
Hash identifier: I+rbyF6ZPuYHDHMV112jbScokVdvibh0oLQ+tMxNTM0=
Subject key identifier: DA:2E:0A:89:BC:B6:CC:36:A6:D1:E7:9A:0D:A5:9C:5A:FB:F1:65:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B772
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDAE1B274C211EF829CFF81762E951A.roa
Signing time: Tue 17 Sep 2024 07:01:38 +0000
ROA not before: Tue 17 Sep 2024 07:01:34 +0000
ROA not after: Fri 08 Aug 2025 07:01:34 +0000
asID: 133199
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46962 (0xb772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:01:34 2024 GMT
Not After : Aug 8 07:01:34 2025 GMT
Subject: CN=66e92952-7557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:9b:a9:fc:9f:ac:8d:06:75:b8:14:a5:26:
8c:a5:b9:1d:e1:d7:99:43:f5:ac:03:22:42:b9:99:
85:c7:08:68:0f:6f:f9:60:52:b8:4e:73:60:d5:7b:
56:49:1f:f3:ef:14:fb:85:6a:b2:71:29:b3:1f:84:
55:38:a1:ae:c1:35:ee:0c:64:6d:49:15:7a:30:d9:
a4:d8:04:74:a4:0c:23:80:0c:a6:1e:09:73:81:45:
78:9d:dd:06:bf:a2:e8:29:30:f3:1f:98:5f:ea:fa:
6b:5a:4f:4c:0d:32:8b:6d:77:c8:4f:a4:13:47:d2:
98:8c:8a:55:5d:a7:ef:ea:c3:86:51:b1:d2:b0:5a:
0f:15:be:e5:25:1e:2a:ab:73:68:23:32:2c:3c:7d:
09:20:f1:2f:16:b0:13:b5:95:e1:59:b4:ca:03:54:
a3:f5:50:88:28:b0:5d:1a:47:f3:3f:25:40:9c:9e:
9f:a0:7d:84:2c:ca:29:ce:c9:40:af:ba:4d:0b:47:
15:79:20:c2:35:23:b2:af:1a:1e:c4:7b:00:c4:5d:
65:ab:42:f8:86:e8:31:da:d1:c9:f1:79:49:54:5f:
7e:00:c8:86:50:37:a4:ef:a1:6b:34:10:1f:94:53:
16:09:31:b3:9f:33:ef:11:8e:d9:21:00:f3:3e:06:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:0A:89:BC:B6:CC:36:A6:D1:E7:9A:0D:A5:9C:5A:FB:F1:65:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDAE1B274C211EF829CFF81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:69:7c:f2:bb:8d:55:0c:8d:d8:3e:5b:d1:93:0a:90:28:6b:
46:b3:58:27:0d:5e:93:38:ed:b2:0c:f0:ab:1d:58:80:cc:aa:
61:74:00:0e:65:ab:6c:c5:2b:d4:9e:42:57:97:a0:69:b6:65:
32:a2:ab:47:0f:3d:45:ce:64:8e:a8:c4:94:b7:ec:95:d7:ab:
58:3e:09:13:5a:81:8b:1e:09:db:70:a5:9c:91:0e:f8:5c:c1:
3f:ec:5b:af:33:5c:57:df:c4:ae:ed:ef:88:d7:90:11:7f:a6:
d6:ba:ae:33:33:a7:0a:b0:04:45:50:49:82:d3:8a:0e:47:5a:
c5:50:51:30:b8:4c:73:13:54:a4:e7:72:bf:d2:12:b4:c0:31:
ed:f6:bd:27:fe:ba:97:6b:64:b5:ee:39:21:60:00:8e:fd:75:
65:2a:b6:9b:d2:dd:e4:4b:1e:9c:48:55:1c:0d:fb:48:1c:13:
a7:b7:a7:61:17:75:e7:f5:a1:6f:68:19:63:06:05:fc:03:73:
de:f9:0a:f9:8a:0f:71:7f:ed:5c:43:ad:95:70:01:c6:02:45:
6b:8d:b8:df:60:d7:35:26:a0:20:72:c2:c6:5e:22:ab:60:5a:
dc:a5:97:4d:d2:68:e0:94:f8:b7:a0:de:9f:c7:92:5b:20:6b:
be:8d:10:5f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALdyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE3MDcwMTM0WhcNMjUwODA4MDcwMTM0WjAYMRYw
FAYDVQQDEw02NmU5Mjk1Mi03NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr6ibqfyfrI0GdbgUpSaMpbkd4deZQ/WsAyJCuZmFxwhoD2/5YFK4TnNg
1XtWSR/z7xT7hWqycSmzH4RVOKGuwTXuDGRtSRV6MNmk2AR0pAwjgAymHglzgUV4
nd0Gv6LoKTDzH5hf6vprWk9MDTKLbXfIT6QTR9KYjIpVXafv6sOGUbHSsFoPFb7l
JR4qq3NoIzIsPH0JIPEvFrATtZXhWbTKA1Sj9VCIKLBdGkfzPyVAnJ6foH2ELMop
zslAr7pNC0cVeSDCNSOyrxoexHsAxF1lq0L4hugx2tHJ8XlJVF9+AMiGUDek76Fr
NBAflFMWCTGznzPvEY7ZIQDzPgaaSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNou
Com8tsw2ptHnmg2lnFr78WUXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRURBRTFCMjc0QzIxMUVGODI5Q0ZGODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc86MA0GCSqGSIb3DQEBCwUA
A4IBAQC4aXzyu41VDI3YPlvRkwqQKGtGs1gnDV6TOO2yDPCrHViAzKphdAAOZats
xSvUnkJXl6BptmUyoqtHDz1FzmSOqMSUt+yV16tYPgkTWoGLHgnbcKWckQ74XME/
7FuvM1xX38Su7e+I15ARf6bWuq4zM6cKsARFUEmC04oOR1rFUFEwuExzE1Sk53K/
0hK0wDHt9r0n/rqXa2S17jkhYACO/XVlKrab0t3kSx6cSFUcDftIHBOnt6dhF3Xn
9aFvaBljBgX8A3Pe+Qr5ig9xf+1cQ62VcAHGAkVrjbjfYNc1JqAgcsLGXiKrYFrc
pZdN0mjglPi3oN6fx5JbIGu+jRBf
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:45 2024 by rpki-client on console-ams.rpki-client.org