Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B61BB7E67EC111EE888C6A764AD9E6FC.roa
File: B61BB7E67EC111EE888C6A764AD9E6FC.roa (raw, json)
Hash identifier: 5v0WrAjubWmeYJQ6ME4x0+VxncF3Lc93/7mM6j62k7Y=
Subject key identifier: CF:3E:96:99:59:BB:D0:D7:0F:72:98:D8:39:47:F6:C2:39:C7:B1:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 451D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B61BB7E67EC111EE888C6A764AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:34:54 +0000
ROA not before: Thu 09 Nov 2023 05:34:51 +0000
ROA not after: Thu 07 Nov 2024 05:34:51 +0000
asID: 133847
IP address blocks: 45.200.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17693 (0x451d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:34:51 2023 GMT
Not After : Nov 7 05:34:51 2024 GMT
Subject: CN=654c6f7e-9d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:56:1a:54:b5:ec:dd:90:22:ae:b7:1b:53:
6d:06:25:6f:9c:a3:c1:78:ea:2d:c8:48:fb:00:96:
8b:31:c7:8e:e6:ba:cd:24:ae:cc:6f:f9:18:f2:57:
ba:d1:a9:4b:8b:54:7d:65:e9:0b:31:d1:c5:cf:14:
ad:20:b5:6d:80:f3:c7:e6:b6:17:09:20:c0:c3:11:
be:77:db:07:c8:b9:2d:f9:7d:6e:40:0f:93:8a:6e:
9e:7e:cf:12:a9:7f:ad:cb:c1:56:6f:77:76:0d:9e:
0b:b8:e8:32:59:f1:b5:de:10:61:01:37:15:cf:25:
50:dc:32:74:a3:9d:e4:35:6a:e9:21:7d:cd:65:b8:
bf:c6:33:9a:f8:c2:59:42:b0:3b:61:d5:4c:d2:d3:
72:c6:60:69:45:a3:ba:f1:b0:6d:56:f5:36:7f:18:
7d:49:9e:7e:a6:ad:5e:00:82:80:53:17:54:34:fa:
e0:9d:9d:29:2f:9b:87:fc:9a:d3:e7:c6:36:cb:18:
5b:28:fb:39:b3:8e:44:7c:25:79:17:a4:e6:7c:e2:
a8:a9:ec:8c:7f:07:59:28:b7:e9:00:04:75:9d:70:
b3:fc:13:ca:bb:3c:83:45:c7:03:2a:0e:fc:c4:d0:
54:b4:2f:39:ce:ff:ad:85:5e:e2:65:20:df:ee:68:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:96:99:59:BB:D0:D7:0F:72:98:D8:39:47:F6:C2:39:C7:B1:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B61BB7E67EC111EE888C6A764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.67.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a1:e3:e6:16:3c:34:c5:0f:e4:b7:2d:32:cf:2a:6f:f9:29:
83:90:44:66:62:f6:92:de:c2:64:8a:51:72:b9:41:dc:65:66:
ca:00:f7:30:b4:7a:b3:9b:2a:49:6e:38:90:16:57:55:93:d2:
cb:5a:bb:9f:69:76:c8:9c:78:8c:62:23:36:66:de:99:cb:41:
d5:3a:78:60:f0:46:7d:06:60:56:81:0f:69:1d:46:cf:cb:81:
a4:cf:09:de:e4:59:f0:96:8e:8a:7d:fb:15:e6:b3:60:25:38:
dd:2f:45:89:6e:7b:f9:95:11:9e:02:0d:03:c5:01:27:7f:89:
2d:03:a0:bc:4c:dc:ee:59:7d:1d:89:d2:2b:43:d1:71:4a:4f:
ed:5f:50:cd:61:06:38:b9:25:ab:29:8d:68:a4:13:64:f5:cb:
bd:b6:49:20:9f:74:3b:67:3c:03:04:9e:10:c6:8c:4f:11:47:
77:81:c8:36:e0:e3:3d:1d:6e:46:21:9d:84:99:a3:85:c9:89:
7e:14:1f:9d:c4:bf:fb:6b:78:7c:8a:83:69:a6:bb:42:e0:38:
97:cc:b7:c5:0a:ed:70:62:8f:77:f6:a0:fd:5d:24:71:cf:89:
be:a5:17:a7:b8:d2:a2:af:aa:f0:43:94:cc:58:88:38:b0:5f:
ca:62:d1:b3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRR0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNTM0NTFaFw0yNDExMDcwNTM0NTFaMBgxFjAU
BgNVBAMTDTY1NGM2ZjdlLTlkMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtYlYaVLXs3ZAirrcbU20GJW+co8F46i3ISPsAlosxx47mus0krsxv+Rjy
V7rRqUuLVH1l6Qsx0cXPFK0gtW2A88fmthcJIMDDEb532wfIuS35fW5AD5OKbp5+
zxKpf63LwVZvd3YNngu46DJZ8bXeEGEBNxXPJVDcMnSjneQ1aukhfc1luL/GM5r4
wllCsDth1UzS03LGYGlFo7rxsG1W9TZ/GH1Jnn6mrV4AgoBTF1Q0+uCdnSkvm4f8
mtPnxjbLGFso+zmzjkR8JXkXpOZ84qip7Ix/B1kot+kABHWdcLP8E8q7PINFxwMq
DvzE0FS0LznO/62FXuJlIN/uaN0DAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzz6W
mVm70NcPcpjYOUf2wjnHscYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0I2MUJCN0U2N0VDMTExRUU4ODhDNkE3NjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyEMwDQYJKoZIhvcNAQELBQAD
ggEBAEWh4+YWPDTFD+S3LTLPKm/5KYOQRGZi9pLewmSKUXK5QdxlZsoA9zC0erOb
KkluOJAWV1WT0stau59pdsiceIxiIzZm3pnLQdU6eGDwRn0GYFaBD2kdRs/LgaTP
Cd7kWfCWjop9+xXms2AlON0vRYlue/mVEZ4CDQPFASd/iS0DoLxM3O5ZfR2J0itD
0XFKT+1fUM1hBji5JaspjWikE2T1y722SSCfdDtnPAMEnhDGjE8RR3eByDbg4z0d
bkYhnYSZo4XJiX4UH53Ev/treHyKg2mmu0LgOJfMt8UK7XBij3f2oP1dJHHPib6l
F6e40qKvqvBDlMxYiDiwX8pi0bM=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org