Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B283DE44344A11EF8E543B7E762E951A.roa
File: B283DE44344A11EF8E543B7E762E951A.roa (raw, json)
Hash identifier: W+0rczuP0Jm09ZJZCZv08YbBLPeB/uu4Jc0HL2a7eII=
Subject key identifier: 8D:F3:C6:A3:A3:33:71:90:D1:3B:B3:E5:21:1D:2A:B5:BF:F8:25:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9598
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B283DE44344A11EF8E543B7E762E951A.roa
Signing time: Thu 27 Jun 2024 06:01:30 +0000
ROA not before: Thu 27 Jun 2024 06:01:26 +0000
ROA not after: Mon 30 Dec 2024 06:01:26 +0000
asID: 984
IP address blocks: 45.204.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38296 (0x9598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 06:01:26 2024 GMT
Not After : Dec 30 06:01:26 2024 GMT
Subject: CN=667d003a-8a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:20:c0:d5:1e:7a:70:50:54:55:5d:f4:f4:
11:2a:c0:8c:68:89:6d:5e:8d:b3:16:a5:b6:f8:1e:
bc:04:86:2e:5d:fd:88:e2:51:ea:41:eb:84:a0:93:
de:74:a3:43:52:ff:85:06:13:40:db:e0:32:68:c9:
df:26:29:fb:eb:94:7a:76:6d:f9:01:4e:25:92:43:
1d:e0:7a:6a:67:d6:68:c6:90:25:b0:9d:34:67:d2:
9c:e2:46:e4:a9:36:95:45:b6:dc:06:8c:c8:73:de:
ae:e5:05:2b:62:7e:4e:21:77:bf:83:69:2e:52:c7:
5e:c4:20:41:8d:74:6d:ea:05:fe:cf:c5:e1:66:18:
b8:cb:6c:c2:02:ab:90:ec:a4:42:8e:aa:60:1d:ec:
83:72:02:dd:64:ee:9a:96:62:80:97:98:3b:24:ea:
36:cd:58:10:5d:17:f8:d4:21:d0:09:20:74:d4:02:
be:6f:7b:d1:58:da:5f:e3:f4:eb:ca:8f:4f:92:60:
ff:26:a4:77:34:ee:2b:6a:1e:45:94:0f:b5:e0:55:
4e:d1:1a:5b:76:e7:bb:0e:0f:cf:26:1e:f3:72:04:
e6:03:c4:f5:0c:93:75:e2:a3:7c:af:c6:97:c9:73:
4c:e1:cc:4c:29:13:0c:11:4a:2a:89:0b:8f:e3:15:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F3:C6:A3:A3:33:71:90:D1:3B:B3:E5:21:1D:2A:B5:BF:F8:25:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B283DE44344A11EF8E543B7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.128.0/17
Signature Algorithm: sha256WithRSAEncryption
70:7f:84:06:4a:08:36:8f:0f:48:b4:87:2b:70:ae:6a:57:9c:
83:15:ae:b9:f4:49:58:b4:78:38:b9:48:3b:0e:0e:d0:00:d3:
02:00:50:5a:69:95:6a:a4:b5:ac:bf:4a:eb:6a:96:eb:23:aa:
8a:b2:bb:cc:84:b9:de:50:d5:1c:e5:47:d5:82:39:55:aa:b6:
e7:39:a0:d1:b6:08:66:b2:23:0c:b8:ef:fc:d3:ad:c7:69:63:
b5:ac:22:72:28:df:88:67:f8:2d:1b:16:e9:42:80:10:53:18:
f6:43:87:00:cf:8f:ac:39:9c:60:dc:5e:c5:de:1d:31:ae:45:
9b:ea:36:5f:b5:80:a4:5f:32:68:e4:70:d8:11:6c:6b:61:4a:
b9:76:c4:af:5c:cd:cc:4f:81:5a:24:97:20:15:28:68:94:1c:
75:56:86:53:96:0f:28:f0:cc:69:a0:bd:f9:77:0c:c5:36:4f:
f4:c4:4e:71:47:d8:d8:cd:43:37:3e:f2:75:ab:7a:25:a1:72:
8c:b7:d8:b0:d3:93:3f:1c:62:e7:62:80:42:89:b6:97:20:68:
a3:39:02:b6:2f:73:10:5b:04:a2:4f:e3:c1:64:7e:00:4e:31:
97:47:ca:63:c1:f2:7a:ce:c7:be:8e:8d:09:53:9e:e8:ea:65:
49:9d:59:4d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJWYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjI3MDYwMTI2WhcNMjQxMjMwMDYwMTI2WjAYMRYw
FAYDVQQDEw02NjdkMDAzYS04YTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0XggwNUeenBQVFVd9PQRKsCMaIltXo2zFqW2+B68BIYuXf2I4lHqQeuE
oJPedKNDUv+FBhNA2+AyaMnfJin765R6dm35AU4lkkMd4HpqZ9ZoxpAlsJ00Z9Kc
4kbkqTaVRbbcBozIc96u5QUrYn5OIXe/g2kuUsdexCBBjXRt6gX+z8XhZhi4y2zC
AquQ7KRCjqpgHeyDcgLdZO6almKAl5g7JOo2zVgQXRf41CHQCSB01AK+b3vRWNpf
4/Tryo9PkmD/JqR3NO4rah5FlA+14FVO0Rpbdue7Dg/PJh7zcgTmA8T1DJN14qN8
r8aXyXNM4cxMKRMMEUoqiQuP4xWeHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI3z
xqOjM3GQ0Tuz5SEdKrW/+CXxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjgzREU0NDM0NEExMUVGOEU1NDNCN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHLcyAMA0GCSqGSIb3DQEBCwUA
A4IBAQBwf4QGSgg2jw9ItIcrcK5qV5yDFa659ElYtHg4uUg7Dg7QANMCAFBaaZVq
pLWsv0rrapbrI6qKsrvMhLneUNUc5UfVgjlVqrbnOaDRtghmsiMMuO/8063HaWO1
rCJyKN+IZ/gtGxbpQoAQUxj2Q4cAz4+sOZxg3F7F3h0xrkWb6jZftYCkXzJo5HDY
EWxrYUq5dsSvXM3MT4FaJJcgFSholBx1VoZTlg8o8MxpoL35dwzFNk/0xE5xR9jY
zUM3PvJ1q3oloXKMt9iw05M/HGLnYoBCibaXIGijOQK2L3MQWwSiT+PBZH4ATjGX
R8pjwfJ6zse+jo0JU57o6mVJnVlN
-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org