Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47D1BE00DC811EF8ABBA139017001B1.roa
File: C47D1BE00DC811EF8ABBA139017001B1.roa (raw, json)
Hash identifier: r2inQFkpxg9Gm3pp+yvfamPIh2v8R9AbugzEFe/zacc=
Subject key identifier: FE:04:2A:15:75:87:F0:30:7F:E3:4D:D1:81:77:02:BA:FD:8E:E3:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 88EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47D1BE00DC811EF8ABBA139017001B1.roa
Signing time: Thu 09 May 2024 05:55:41 +0000
ROA not before: Thu 09 May 2024 05:55:38 +0000
ROA not after: Thu 29 May 2025 05:55:38 +0000
asID: 140227
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35051 (0x88eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 05:55:38 2024 GMT
Not After : May 29 05:55:38 2025 GMT
Subject: CN=663c655d-ef40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:48:b0:db:83:61:6e:aa:9b:fb:b0:6b:3a:
8e:62:be:05:80:88:57:25:b8:2b:5d:48:b0:47:f6:
d1:c8:02:d3:f7:6e:9a:91:7e:65:89:c0:39:25:33:
90:65:85:11:14:a0:0d:39:88:03:ab:06:b3:ed:6f:
79:38:38:e3:c8:0c:b6:da:3d:59:08:bc:e7:38:b9:
cd:cb:0f:f1:b9:fa:f5:af:ce:d9:50:e0:94:82:fa:
3c:4a:52:e0:11:de:4f:11:24:bf:f3:9a:28:a6:a2:
4a:ad:ef:6e:54:8d:92:12:0d:61:f4:f9:8f:6e:e7:
bb:e2:71:17:ab:1a:45:c9:b1:aa:fd:01:47:21:58:
8e:fe:48:4f:3d:76:e0:3b:7e:fb:29:17:7b:37:b3:
b6:08:bf:e0:e9:71:58:ab:38:53:71:7f:5b:a3:aa:
95:34:c2:69:ec:5b:d9:c4:6a:ab:54:95:1c:06:b7:
2c:50:53:71:68:b7:a1:81:69:40:04:fe:f9:81:cb:
93:96:36:03:9d:c2:e9:fb:21:54:3e:d0:38:58:7f:
67:31:39:00:de:d0:56:9c:86:c6:5a:f0:2e:ca:01:
62:46:3a:16:94:d4:4a:60:0b:53:60:78:02:f2:38:
24:77:30:ec:d1:66:bc:02:58:7e:a8:cc:2b:5a:64:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:2A:15:75:87:F0:30:7F:E3:4D:D1:81:77:02:BA:FD:8E:E3:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47D1BE00DC811EF8ABBA139017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ba:be:27:ba:bb:6b:2b:58:b8:58:c7:fe:47:93:35:43:9f:84:
5a:5c:de:51:b2:34:36:fb:f4:da:37:34:f1:78:6f:66:1b:2a:
23:9f:f2:43:f1:04:99:64:04:15:4d:ba:c2:84:5b:e2:0d:d1:
ba:34:39:97:84:3d:cc:a1:ff:0c:a3:56:a2:8b:aa:cf:c0:80:
9f:85:e3:35:23:0f:a9:30:44:0e:9e:95:e5:67:c8:2a:c2:87:
f6:5b:60:44:10:87:ad:40:a2:25:5e:d9:b5:8d:bd:2f:51:f8:
a3:c5:cd:40:b7:b5:c1:43:95:11:ca:b0:c1:83:70:3f:70:b3:
91:66:8e:6e:93:4a:9f:6e:f3:7c:8b:14:33:7d:1e:a7:5c:53:
02:ef:ca:5e:57:03:65:db:87:44:0f:60:b0:dc:ce:4f:7a:52:
d2:2a:8a:c3:4b:a4:6b:d6:14:bd:94:7f:da:be:f8:80:32:e1:
1c:32:5b:db:35:67:42:74:93:27:6d:41:55:77:e4:9a:5d:db:
55:10:00:75:5c:3b:36:e7:cf:b1:c9:1e:84:25:2b:42:23:d0:
77:17:fa:12:c8:30:ee:94:6a:7f:63:6c:60:18:ac:d7:b0:31:
b2:00:35:39:4c:88:16:ab:94:05:63:32:d4:a9:bf:ad:1d:ec:
35:81:8e:84
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIjrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTA5MDU1NTM4WhcNMjUwNTI5MDU1NTM4WjAYMRYw
FAYDVQQDEw02NjNjNjU1ZC1lZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqo1IsNuDYW6qm/uwazqOYr4FgIhXJbgrXUiwR/bRyALT926akX5licA5
JTOQZYURFKANOYgDqwaz7W95ODjjyAy22j1ZCLznOLnNyw/xufr1r87ZUOCUgvo8
SlLgEd5PESS/85oopqJKre9uVI2SEg1h9PmPbue74nEXqxpFybGq/QFHIViO/khP
PXbgO377KRd7N7O2CL/g6XFYqzhTcX9bo6qVNMJp7FvZxGqrVJUcBrcsUFNxaLeh
gWlABP75gcuTljYDncLp+yFUPtA4WH9nMTkA3tBWnIbGWvAuygFiRjoWlNRKYAtT
YHgC8jgkdzDs0Wa8Alh+qMwrWmSwiQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP4E
KhV1h/Awf+NN0YF3Arr9juPTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNDdEMUJFMDBEQzgxMUVGOEFCQkExMzkwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcIQMA0GCSqGSIb3DQEBCwUA
A4IBAQC6vie6u2srWLhYx/5HkzVDn4RaXN5RsjQ2+/TaNzTxeG9mGyojn/JD8QSZ
ZAQVTbrChFviDdG6NDmXhD3Mof8Mo1aii6rPwICfheM1Iw+pMEQOnpXlZ8gqwof2
W2BEEIetQKIlXtm1jb0vUfijxc1At7XBQ5URyrDBg3A/cLORZo5uk0qfbvN8ixQz
fR6nXFMC78peVwNl24dED2Cw3M5PelLSKorDS6Rr1hS9lH/avviAMuEcMlvbNWdC
dJMnbUFVd+SaXdtVEAB1XDs258+xyR6EJStCI9B3F/oSyDDulGp/Y2xgGKzXsDGy
ADU5TIgWq5QFYzLUqb+tHew1gY6E
-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org