Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C566D2827E3711EFAD41B588762E951A.roa
File: C566D2827E3711EFAD41B588762E951A.roa (raw, json)
Hash identifier: 2lOhAJg6aQOcnWkKiXbON+6U/k/9n7a9OE+sqpM5BRQ=
Subject key identifier: EA:EA:0E:0C:D3:98:B4:DE:0F:FA:0B:1D:8F:72:49:98:7D:A4:39:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C566D2827E3711EFAD41B588762E951A.roa
Signing time: Sun 29 Sep 2024 07:52:27 +0000
ROA not before: Sun 29 Sep 2024 07:52:24 +0000
ROA not after: Mon 30 Dec 2024 07:52:24 +0000
asID: 17561
IP address blocks: 45.200.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48205 (0xbc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 07:52:24 2024 GMT
Not After : Dec 30 07:52:24 2024 GMT
Subject: CN=66f9073b-ef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:3a:d2:da:99:8b:e8:f1:4f:5b:98:52:34:
13:1d:18:ca:1b:ee:25:03:31:fb:42:2e:6c:09:5c:
06:86:fd:e0:c4:aa:26:16:34:62:b1:4c:03:17:f2:
21:b2:f0:d0:08:d9:2c:0e:e9:cf:71:16:ee:58:15:
2b:83:f0:81:f1:e8:06:35:49:27:4b:0e:02:ee:ba:
80:db:59:59:70:4a:82:7f:0d:6b:f3:39:84:00:89:
8f:a3:f3:4c:cf:3b:3f:44:34:03:5e:7f:f0:1a:0c:
f0:51:b0:52:5e:1b:53:07:ae:27:49:9f:0f:ef:42:
a6:c4:31:9f:ce:fe:7d:b4:9b:c9:4d:89:99:d7:27:
7c:b8:63:8e:ea:d1:30:73:b1:5e:b8:3c:f7:3a:f5:
6b:90:6d:8f:54:90:0f:4d:22:13:a7:13:66:9f:34:
0c:79:9a:19:e9:4b:22:ff:60:45:22:56:89:d2:40:
fa:84:8a:30:77:87:5f:fa:d9:f7:96:8b:d4:82:9d:
cd:b1:17:e7:bb:eb:66:2d:93:49:f4:89:1a:a5:74:
ff:e6:b3:b1:36:6c:f0:7c:66:4f:17:2b:b6:d0:d7:
84:a8:e1:bc:ba:98:e1:de:fb:7c:ca:5b:e2:7e:bb:
8e:fd:5e:1d:a3:a1:35:b8:90:da:22:47:11:06:5b:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:0E:0C:D3:98:B4:DE:0F:FA:0B:1D:8F:72:49:98:7D:A4:39:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C566D2827E3711EFAD41B588762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:54:12:16:b3:cf:0c:6c:fe:01:84:31:75:92:36:bd:37:6b:
b7:3d:6d:ff:06:4e:24:31:1d:c6:9d:bd:cf:2f:5e:17:fc:58:
b6:79:4f:42:df:a7:54:32:5b:4f:b2:84:f5:d9:19:93:64:c3:
98:53:9e:6d:ec:e6:e7:fe:e0:1d:cf:b1:65:5d:db:04:85:69:
e5:14:7c:c8:3f:fb:75:1b:db:e6:f5:f9:f8:be:9e:fa:19:a8:
cc:ff:8c:4f:11:fe:ba:b5:61:33:80:45:99:89:38:41:d0:2d:
cc:05:1a:61:02:8c:25:d2:3d:46:80:3b:45:d2:6a:ee:76:f5:
05:e2:6f:3a:a5:e8:b2:94:b7:27:4f:e3:10:6a:31:f0:b4:82:
29:04:aa:6a:46:d4:bb:9d:9d:68:03:8f:b8:43:b3:50:4c:7c:
66:15:d5:83:8b:6f:d8:02:96:55:ab:91:1e:5b:84:51:83:5b:
bf:bb:f5:d5:1f:4e:b2:0d:95:cc:28:98:93:93:37:de:0b:5c:
4c:6e:aa:1a:77:6d:b7:6a:52:e0:b9:24:8c:d7:b3:3a:a3:99:
c0:db:fa:d7:d4:30:0e:96:80:29:5d:49:3f:48:61:2c:6a:13:
47:99:72:4f:09:a0:c5:24:6a:89:49:9d:a8:95:c9:29:2a:17:
9d:91:c2:3e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALxNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTI5MDc1MjI0WhcNMjQxMjMwMDc1MjI0WjAYMRYw
FAYDVQQDEw02NmY5MDczYi1lZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAspA60tqZi+jxT1uYUjQTHRjKG+4lAzH7Qi5sCVwGhv3gxKomFjRisUwD
F/IhsvDQCNksDunPcRbuWBUrg/CB8egGNUknSw4C7rqA21lZcEqCfw1r8zmEAImP
o/NMzzs/RDQDXn/wGgzwUbBSXhtTB64nSZ8P70KmxDGfzv59tJvJTYmZ1yd8uGOO
6tEwc7FeuDz3OvVrkG2PVJAPTSITpxNmnzQMeZoZ6Usi/2BFIlaJ0kD6hIowd4df
+tn3lovUgp3NsRfnu+tmLZNJ9IkapXT/5rOxNmzwfGZPFyu20NeEqOG8upjh3vt8
ylvifruO/V4do6E1uJDaIkcRBlsxfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOrq
DgzTmLTeD/oLHY9ySZh9pDk6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNTY2RDI4MjdFMzcxMUVGQUQ0MUI1ODg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALciAMA0GCSqGSIb3DQEBCwUA
A4IBAQB7VBIWs88MbP4BhDF1kja9N2u3PW3/Bk4kMR3Gnb3PL14X/Fi2eU9C36dU
MltPsoT12RmTZMOYU55t7Obn/uAdz7FlXdsEhWnlFHzIP/t1G9vm9fn4vp76GajM
/4xPEf66tWEzgEWZiThB0C3MBRphAowl0j1GgDtF0mrudvUF4m86peiylLcnT+MQ
ajHwtIIpBKpqRtS7nZ1oA4+4Q7NQTHxmFdWDi2/YApZVq5EeW4RRg1u/u/XVH06y
DZXMKJiTkzfeC1xMbqoad223alLguSSM17M6o5nA2/rX1DAOloApXUk/SGEsahNH
mXJPCaDFJGqJSZ2olckpKhedkcI+
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org