Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28AB630734F11EF8E8347BC762E951A.roa
File: B28AB630734F11EF8E8347BC762E951A.roa (raw, json)
Hash identifier: SOcmb3yIIdG2dF/lTak+9SChNqt7C7Zpi5PbTOL3F1E=
Subject key identifier: A1:A8:48:46:12:43:F9:A3:AD:14:1D:7F:25:C0:EE:09:82:8A:53:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B65E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28AB630734F11EF8E8347BC762E951A.roa
Signing time: Sun 15 Sep 2024 10:46:01 +0000
ROA not before: Sun 15 Sep 2024 10:45:57 +0000
ROA not after: Fri 08 Aug 2025 10:45:57 +0000
asID: 133861
IP address blocks: 45.207.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46686 (0xb65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:45:57 2024 GMT
Not After : Aug 8 10:45:57 2025 GMT
Subject: CN=66e6bae9-7f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:59:11:86:6a:9b:05:0b:0e:3e:8d:84:57:
68:39:18:1a:35:f7:82:40:8f:d3:f9:31:8c:bb:bd:
ae:46:8d:1d:4e:41:d7:83:1f:fb:1d:04:bc:55:18:
6e:8a:2e:f6:0f:7c:7f:04:5e:35:d9:45:71:00:45:
00:20:80:a8:88:ac:71:4d:93:b8:94:e8:76:85:00:
3d:1a:0a:65:2b:17:f0:cb:91:29:9c:20:89:d7:07:
57:31:4a:98:92:a9:e8:8c:0a:37:e4:d9:4e:1b:79:
36:a9:e2:08:9f:55:2c:8b:ee:29:7b:67:1d:32:84:
41:39:04:c9:a3:37:4a:88:3f:5c:8f:98:b0:a4:f3:
cb:b6:d0:a5:9f:2c:4f:74:45:c7:9f:a9:f6:63:ab:
c1:d9:06:c1:d6:b0:bc:29:80:17:c4:08:cd:0a:d9:
9f:d9:75:18:37:77:34:79:c4:d7:df:e4:76:bc:a8:
9d:11:4c:f2:5c:a1:a2:c8:b9:e1:22:84:ab:3d:88:
68:32:65:09:a1:eb:3e:d8:f0:3b:dd:e7:1a:2c:ed:
16:be:6c:1d:de:76:86:36:5b:56:ea:7c:49:e1:39:
d6:32:7c:90:ee:16:7f:28:57:65:44:25:46:41:ba:
70:4e:bf:aa:18:00:be:9a:51:47:e7:17:3f:bf:e2:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:48:46:12:43:F9:A3:AD:14:1D:7F:25:C0:EE:09:82:8A:53:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B28AB630734F11EF8E8347BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.43.0/24
Signature Algorithm: sha256WithRSAEncryption
12:00:0a:c8:58:ea:67:2b:46:42:ab:35:e7:49:0e:7f:98:df:
30:44:0a:d5:4e:ac:e9:af:e0:4e:1b:8e:bd:14:4d:a6:2e:d6:
72:20:15:db:09:e7:59:eb:dc:03:01:42:6a:e9:f9:c0:fd:6a:
8b:6e:78:2e:b1:8c:a0:0d:50:87:54:c4:53:18:75:4a:5c:5e:
ab:0c:cd:33:ab:ee:ea:3a:c8:d2:db:2d:91:3b:90:9d:e2:12:
db:a1:93:65:78:d0:38:75:7f:5b:a6:78:5a:c9:f4:fd:a1:bf:
99:a0:9c:be:92:67:dd:fa:13:98:f1:34:88:28:e8:19:98:43:
19:9e:3a:c1:55:fc:88:6b:77:d5:8b:96:e4:39:59:7b:a3:b3:
4a:24:ec:e4:3e:dd:6e:2b:a2:77:6c:6d:7b:5e:19:cf:f5:2a:
37:f9:2b:e3:44:00:c0:9b:aa:a3:8f:9d:24:3e:4b:fd:99:b3:
e9:b6:a9:c2:aa:90:85:2a:36:5e:73:49:f9:df:f0:c0:b2:02:
76:13:31:91:bd:6b:86:d3:a8:de:e3:07:45:a0:a8:9b:ea:b8:
48:1b:99:64:2f:09:9d:73:75:98:87:ef:0a:18:69:26:a9:83:
f7:0e:9a:b3:fc:14:f0:21:5c:00:3c:fd:c2:b0:24:fc:a7:bd:
85:0e:a6:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALZeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE1MTA0NTU3WhcNMjUwODA4MTA0NTU3WjAYMRYw
FAYDVQQDEw02NmU2YmFlOS03Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArR1ZEYZqmwULDj6NhFdoORgaNfeCQI/T+TGMu72uRo0dTkHXgx/7HQS8
VRhuii72D3x/BF412UVxAEUAIICoiKxxTZO4lOh2hQA9GgplKxfwy5EpnCCJ1wdX
MUqYkqnojAo35NlOG3k2qeIIn1Usi+4pe2cdMoRBOQTJozdKiD9cj5iwpPPLttCl
nyxPdEXHn6n2Y6vB2QbB1rC8KYAXxAjNCtmf2XUYN3c0ecTX3+R2vKidEUzyXKGi
yLnhIoSrPYhoMmUJoes+2PA73ecaLO0Wvmwd3naGNltW6nxJ4TnWMnyQ7hZ/KFdl
RCVGQbpwTr+qGAC+mlFH5xc/v+IWWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKGo
SEYSQ/mjrRQdfyXA7gmCilMLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjhBQjYzMDczNEYxMUVGOEU4MzQ3QkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8rMA0GCSqGSIb3DQEBCwUA
A4IBAQASAArIWOpnK0ZCqzXnSQ5/mN8wRArVTqzpr+BOG469FE2mLtZyIBXbCedZ
69wDAUJq6fnA/WqLbngusYygDVCHVMRTGHVKXF6rDM0zq+7qOsjS2y2RO5Cd4hLb
oZNleNA4dX9bpnhayfT9ob+ZoJy+kmfd+hOY8TSIKOgZmEMZnjrBVfyIa3fVi5bk
OVl7o7NKJOzkPt1uK6J3bG17XhnP9So3+SvjRADAm6qjj50kPkv9mbPptqnCqpCF
KjZec0n53/DAsgJ2EzGRvWuG06je4wdFoKib6rhIG5lkLwmdc3WYh+8KGGkmqYP3
Dpqz/BTwIVwAPP3CsCT8p72FDqY4
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org