Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC544DDAA32D11EF8E0759AF762E951A.roa
File: BC544DDAA32D11EF8E0759AF762E951A.roa (raw, json)
Hash identifier: 3Hkh2oOvMT8M4Doh3ZYJYOmjJ2+LPIzvW4rvNj4f3hA=
Subject key identifier: CF:00:4B:CF:E3:7F:C5:08:6D:78:B8:B6:7C:7D:D2:8B:43:FA:61:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC544DDAA32D11EF8E0759AF762E951A.roa
Signing time: Fri 15 Nov 2024 08:43:50 +0000
ROA not before: Fri 15 Nov 2024 08:43:46 +0000
ROA not after: Thu 19 Dec 2024 08:43:46 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53983 (0xd2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 08:43:46 2024 GMT
Not After : Dec 19 08:43:46 2024 GMT
Subject: CN=673709c6-60c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:52:ab:79:79:1c:7b:ee:a5:14:56:12:e9:6b:
1e:2c:32:1f:b1:a8:54:38:5b:42:d9:a1:63:a2:2d:
3c:12:2b:14:23:32:cd:45:f1:aa:44:fd:de:0c:86:
c4:34:df:87:35:d0:41:5d:0b:94:d6:b1:9c:b4:47:
70:09:d1:88:a6:75:6b:09:89:cf:2b:ae:30:b5:44:
a6:69:5b:0b:8f:71:e7:3d:e7:bc:3c:7e:97:4e:16:
88:f4:2f:29:6a:3e:96:71:d1:f6:f5:e0:e1:dc:84:
14:f4:7d:74:cb:7d:92:0e:15:0c:b4:f1:ed:1b:ad:
f8:fa:af:2d:e8:bf:57:f6:fa:fa:40:9f:cb:4c:19:
80:54:ba:cd:1b:c1:25:5d:31:ae:bb:9b:c3:f6:8c:
d2:2b:e2:a5:42:fe:26:fa:2a:e0:2f:73:ed:f1:c7:
21:89:2b:57:5f:21:0d:21:03:50:77:15:d9:a1:7d:
7d:4d:5e:4d:d6:e5:a6:af:1d:7f:16:e4:3a:80:ce:
24:c9:78:8f:1d:d7:cf:0a:41:a7:55:92:b1:e6:e7:
39:cc:e3:c1:88:f4:a2:c6:29:0c:71:98:7a:9f:8e:
03:d9:7a:ca:a2:b6:66:fd:e5:7d:38:1b:d7:f9:eb:
66:7c:cb:c7:a7:e3:0a:5f:5b:2c:f7:9d:ad:0c:a4:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:4B:CF:E3:7F:C5:08:6D:78:B8:B6:7C:7D:D2:8B:43:FA:61:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC544DDAA32D11EF8E0759AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
75:12:1a:2e:9f:46:7d:54:e9:ed:8e:89:41:98:84:c7:f0:15:
e1:1f:2b:fd:53:e5:d2:da:dc:2c:5b:25:d4:7f:ba:a8:56:53:
a1:f2:ea:de:c4:c2:e0:eb:34:53:c7:19:db:55:47:31:4f:d6:
d0:5b:1a:3a:21:58:02:d4:71:fd:4a:44:10:bc:26:4b:a5:3a:
f8:e9:f7:fa:68:1e:47:ed:d8:9c:f6:04:da:64:70:3e:e5:6a:
95:e9:aa:ce:fc:6a:71:ad:4e:12:d8:24:9f:b8:62:53:c2:a6:
7b:03:ff:7e:a1:80:34:d5:31:2a:d7:49:17:37:aa:b5:f0:9e:
52:45:92:55:20:cc:a5:93:44:22:67:9e:11:66:60:b8:a1:58:
98:fb:16:f5:64:57:e1:dc:b6:c1:48:7e:a3:fa:8b:36:16:11:
31:30:e7:fd:5f:1b:be:b1:51:74:99:b0:5e:ee:54:5e:4f:77:
a2:b4:37:b1:3a:98:3b:a0:b5:69:6e:7b:7d:1b:8c:03:53:61:
ce:1c:5a:eb:a9:70:bc:fe:30:70:1b:6f:41:29:8e:9c:f3:02:
cf:f1:45:9b:13:28:ed:89:75:ce:85:9e:ac:d2:93:34:86:44:
f7:76:bc:6a:67:5e:ef:74:76:1b:68:29:94:c2:53:a7:09:56:
12:80:fc:0b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANLfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE1MDg0MzQ2WhcNMjQxMjE5MDg0MzQ2WjAYMRYw
FAYDVQQDEw02NzM3MDljNi02MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9FKreXkce+6lFFYS6WseLDIfsahUOFtC2aFjoi08EisUIzLNRfGqRP3e
DIbENN+HNdBBXQuU1rGctEdwCdGIpnVrCYnPK64wtUSmaVsLj3HnPee8PH6XThaI
9C8paj6WcdH29eDh3IQU9H10y32SDhUMtPHtG634+q8t6L9X9vr6QJ/LTBmAVLrN
G8ElXTGuu5vD9ozSK+KlQv4m+irgL3Pt8cchiStXXyENIQNQdxXZoX19TV5N1uWm
rx1/FuQ6gM4kyXiPHdfPCkGnVZKx5uc5zOPBiPSixikMcZh6n44D2XrKorZm/eV9
OBvX+etmfMvHp+MKX1ss952tDKQQiQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM8A
S8/jf8UIbXi4tnx90otD+mHzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzU0NEREQUEzMkQxMUVGOEUwNzU5QUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOGMA0GCSqGSIb3DQEBCwUA
A4IBAQB1Ehoun0Z9VOntjolBmITH8BXhHyv9U+XS2twsWyXUf7qoVlOh8urexMLg
6zRTxxnbVUcxT9bQWxo6IVgC1HH9SkQQvCZLpTr46ff6aB5H7dic9gTaZHA+5WqV
6arO/GpxrU4S2CSfuGJTwqZ7A/9+oYA01TEq10kXN6q18J5SRZJVIMylk0QiZ54R
ZmC4oViY+xb1ZFfh3LbBSH6j+os2FhExMOf9Xxu+sVF0mbBe7lReT3eitDexOpg7
oLVpbnt9G4wDU2HOHFrrqXC8/jBwG29BKY6c8wLP8UWbEyjtiXXOhZ6s0pM0hkT3
drxqZ17vdHYbaCmUwlOnCVYSgPwL
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:45 2024 by rpki-client on console-fra.rpki-client.org