Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CABE24983211EFA10E294D762E951A.roa
File: B4CABE24983211EFA10E294D762E951A.roa (raw, json)
Hash identifier: z8MEuMk9r5+dsn6FHjIAG6NwdZlMD818MPznnMHstcM=
Subject key identifier: BE:9E:7F:8C:D9:3F:DF:6E:53:0D:F8:38:AD:60:41:7E:B3:18:DB:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CABE24983211EFA10E294D762E951A.roa
Signing time: Fri 01 Nov 2024 09:21:42 +0000
ROA not before: Fri 01 Nov 2024 09:21:38 +0000
ROA not after: Sun 01 Dec 2024 09:21:38 +0000
asID: 398823
IP address blocks: 45.205.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52077 (0xcb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:21:38 2024 GMT
Not After : Dec 1 09:21:38 2024 GMT
Subject: CN=67249da6-d3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:c9:2b:c8:9f:f6:75:d1:de:1b:d5:5a:1e:
75:59:92:b7:32:d5:c5:e1:52:2c:37:cc:22:e7:aa:
99:04:22:be:61:c8:9e:5c:7f:f2:c7:f5:bf:c0:0f:
2a:2f:cd:10:9d:c0:ea:2c:26:d4:f4:65:5f:59:09:
c7:82:96:8e:84:30:90:e6:cb:33:c8:f4:30:35:e8:
49:88:20:1c:b2:78:fc:10:68:b9:c1:66:91:3d:83:
00:3c:44:05:99:00:0b:39:4d:0d:a3:63:67:ae:7d:
05:13:0b:33:7b:5f:dd:7d:5f:60:53:e4:ac:21:71:
0b:2a:be:c0:d3:f1:c9:1d:af:7d:7a:4c:3e:4f:10:
f8:58:2c:16:da:23:d1:22:47:38:84:3b:5f:79:f6:
41:c3:06:c5:21:9e:aa:4f:25:a0:05:ff:2c:27:43:
b1:83:62:df:be:4d:ea:2b:fa:63:10:56:4c:53:12:
4a:17:dc:57:cc:36:7a:29:be:d8:07:e4:51:0c:57:
36:37:20:42:81:08:4d:ef:5f:fa:cc:dd:fa:5c:f4:
bd:ab:d9:37:08:9c:87:72:77:96:c0:1e:19:c6:2e:
47:1e:9d:0b:5f:29:85:d3:7a:f2:3f:93:df:e3:09:
15:8d:3f:84:e4:64:7b:0a:65:1c:17:37:62:31:50:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9E:7F:8C:D9:3F:DF:6E:53:0D:F8:38:AD:60:41:7E:B3:18:DB:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CABE24983211EFA10E294D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
20:c5:5c:53:04:0e:7f:1d:46:ad:06:05:00:c3:ec:65:89:c7:
1d:eb:06:20:51:a5:65:c1:b8:85:50:39:1c:a0:b3:90:fe:e9:
92:06:2e:65:23:5d:5e:73:e7:79:f4:dd:53:23:3d:ec:cf:ec:
4b:be:80:e8:42:02:96:28:05:9a:58:0d:52:6e:c0:f6:09:3f:
29:4c:ed:ee:3a:2e:8d:33:7b:2b:a7:09:e3:d7:16:2a:b5:ec:
de:d8:7b:41:7b:37:35:87:71:55:7b:72:c3:76:a9:4f:31:a8:
34:89:78:0d:d6:34:59:f3:ca:45:12:1d:7c:d0:11:45:26:61:
03:17:06:59:c3:a0:bf:81:c2:96:e3:4f:83:17:30:d4:c3:df:
c1:2a:8e:15:e4:5f:ac:43:3e:97:02:8f:f9:c8:7c:12:9b:13:
b8:1c:7d:f9:53:26:8a:27:9b:44:35:ac:8f:18:48:24:71:77:
d7:91:e5:4c:0f:c7:7f:41:99:24:86:38:a9:e6:7a:14:7a:a1:
0c:5f:db:95:77:f2:9d:9f:93:98:62:be:06:bb:f2:8c:18:af:
96:d4:e8:53:09:8e:5d:13:52:12:eb:1e:63:07:73:2a:f2:a6:
ce:ea:cf:cc:5f:50:fe:fd:9d:b9:c3:c6:26:c9:0f:c8:40:4f:
5b:38:74:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMttMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTAxMDkyMTM4WhcNMjQxMjAxMDkyMTM4WjAYMRYw
FAYDVQQDEw02NzI0OWRhNi1kM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1gfJK8if9nXR3hvVWh51WZK3MtXF4VIsN8wi56qZBCK+YcieXH/yx/W/
wA8qL80QncDqLCbU9GVfWQnHgpaOhDCQ5sszyPQwNehJiCAcsnj8EGi5wWaRPYMA
PEQFmQALOU0No2Nnrn0FEwsze1/dfV9gU+SsIXELKr7A0/HJHa99ekw+TxD4WCwW
2iPRIkc4hDtfefZBwwbFIZ6qTyWgBf8sJ0Oxg2Lfvk3qK/pjEFZMUxJKF9xXzDZ6
Kb7YB+RRDFc2NyBCgQhN71/6zN36XPS9q9k3CJyHcneWwB4Zxi5HHp0LXymF03ry
P5Pf4wkVjT+E5GR7CmUcFzdiMVAQSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL6e
f4zZP99uUw34OK1gQX6zGNuVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNENBQkUyNDk4MzIxMUVGQTEwRTI5NEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELc2wMA0GCSqGSIb3DQEBCwUA
A4IBAQAgxVxTBA5/HUatBgUAw+xliccd6wYgUaVlwbiFUDkcoLOQ/umSBi5lI11e
c+d59N1TIz3sz+xLvoDoQgKWKAWaWA1SbsD2CT8pTO3uOi6NM3srpwnj1xYqteze
2HtBezc1h3FVe3LDdqlPMag0iXgN1jRZ88pFEh180BFFJmEDFwZZw6C/gcKW40+D
FzDUw9/BKo4V5F+sQz6XAo/5yHwSmxO4HH35UyaKJ5tENayPGEgkcXfXkeVMD8d/
QZkkhjip5noUeqEMX9uVd/Kdn5OYYr4Gu/KMGK+W1OhTCY5dE1IS6x5jB3Mq8qbO
6s/MX1D+/Z25w8YmyQ/IQE9bOHR4
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org