Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C59DD3DE08F111EE909FFD1C4AD9E6FC.roa
File: C59DD3DE08F111EE909FFD1C4AD9E6FC.roa (raw, json)
Hash identifier: HOLCyTDql+LTSyTppF+py6CCx3CjwGaHH7RLqnRgKFA=
Subject key identifier: 55:70:64:E1:E2:0A:48:22:29:A3:D7:40:A2:C5:B7:5F:86:97:4D:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2AE5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C59DD3DE08F111EE909FFD1C4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 07:21:39 +0000
ROA not before: Mon 12 Jun 2023 07:21:35 +0000
ROA not after: Sat 25 May 2024 07:21:35 +0000
asID: 131178
IP address blocks: 45.201.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10981 (0x2ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 07:21:35 2023 GMT
Not After : May 25 07:21:35 2024 GMT
Subject: CN=6486c783-4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:a6:aa:a4:57:e2:68:75:da:d9:89:cb:70:
de:b7:ca:97:52:ff:d1:6a:0f:c6:b4:8e:a9:a1:ac:
91:5c:1a:f3:6a:fe:75:8a:b4:f6:ba:bc:28:0c:74:
c1:da:af:7c:39:98:6a:1e:04:11:15:ef:ab:3a:f6:
88:44:74:63:7f:d3:db:bd:70:f4:53:4a:ae:c2:bb:
c7:dc:ae:f6:cd:34:d5:a8:44:4c:20:69:e0:fa:cc:
db:04:48:fd:96:a5:49:86:82:5c:90:65:2d:af:c1:
6d:76:11:75:51:fe:57:22:b8:c6:cb:d4:31:a5:ec:
43:57:b7:db:d5:a4:0d:68:04:d4:fd:52:7a:e2:ac:
0c:6e:a6:04:e8:cb:2d:49:ec:5b:17:47:74:b7:e3:
3f:0c:49:11:fb:85:27:19:de:f0:d7:65:6c:d2:36:
9b:47:6a:81:5a:61:cd:7a:09:ab:c6:1e:c9:e9:36:
f5:da:e3:f6:c6:6d:2e:ba:fd:9f:14:8e:45:bb:14:
7f:db:90:6e:7b:c7:7c:91:c9:10:27:12:77:2f:f5:
16:5c:33:22:e9:a7:21:9c:6a:34:5d:eb:74:2a:ac:
9c:cc:8b:69:c9:e3:5b:85:ba:2e:d2:d2:e0:f9:09:
1c:91:51:9e:9b:66:65:36:aa:68:6b:ea:90:ea:20:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:70:64:E1:E2:0A:48:22:29:A3:D7:40:A2:C5:B7:5F:86:97:4D:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C59DD3DE08F111EE909FFD1C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d0:3e:35:60:f8:eb:a7:eb:4f:bf:84:d8:ad:f7:2e:d4:ab:
55:18:5a:ac:53:2b:c5:c5:12:20:85:ba:61:c4:45:37:d1:03:
b2:38:35:3c:30:97:a1:3c:c7:9c:f4:9c:22:ad:b1:20:ec:b3:
2c:06:fc:72:6b:d8:d4:e9:79:92:9d:87:2d:ae:dc:ad:10:6e:
74:8a:26:55:ad:75:d0:33:6a:13:29:b5:a2:9b:ed:60:fe:80:
fe:97:db:dd:3c:ec:69:99:60:cc:c2:26:ab:1f:eb:73:7a:a7:
ab:07:7b:2b:aa:85:2c:e0:da:28:88:9e:52:8d:c1:d1:25:cc:
3e:fd:70:28:05:c7:ef:fe:7d:c8:cf:0f:ca:22:06:8b:7b:fe:
7c:8e:d2:89:97:55:2c:e5:3a:8c:1b:e3:35:b2:68:c5:31:99:
de:80:4d:f3:1e:7c:a9:35:dc:25:0c:88:ac:b0:9c:95:ff:f3:
85:e7:d0:69:92:1c:3f:db:91:9a:f4:c5:05:e4:66:2b:f0:f7:
31:59:20:65:7a:05:69:d1:82:4a:4c:97:a1:39:41:51:60:c2:
d0:ee:14:c4:87:93:92:2a:78:3d:7f:a9:57:8c:f2:78:0e:3e:
ba:0c:0e:4e:d6:39:d5:8c:05:59:ab:2f:1d:a9:f1:b9:25:31:
0f:5f:92:8d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICKuUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTIwNzIxMzVaFw0yNDA1MjUwNzIxMzVaMBgxFjAU
BgNVBAMTDTY0ODZjNzgzLTQxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCaZaaqpFfiaHXa2YnLcN63ypdS/9FqD8a0jqmhrJFcGvNq/nWKtPa6vCgM
dMHar3w5mGoeBBEV76s69ohEdGN/09u9cPRTSq7Cu8fcrvbNNNWoREwgaeD6zNsE
SP2WpUmGglyQZS2vwW12EXVR/lciuMbL1DGl7ENXt9vVpA1oBNT9UnrirAxupgTo
yy1J7FsXR3S34z8MSRH7hScZ3vDXZWzSNptHaoFaYc16CavGHsnpNvXa4/bGbS66
/Z8UjkW7FH/bkG57x3yRyRAnEncv9RZcMyLppyGcajRd63QqrJzMi2nJ41uFui7S
0uD5CRyRUZ6bZmU2qmhr6pDqIJRvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVXBk
4eIKSCIpo9dAosW3X4aXTagwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M1OUREM0RFMDhGMTExRUU5MDlGRkQxQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyZkwDQYJKoZIhvcNAQELBQAD
ggEBAIrQPjVg+Oun60+/hNit9y7Uq1UYWqxTK8XFEiCFumHERTfRA7I4NTwwl6E8
x5z0nCKtsSDssywG/HJr2NTpeZKdhy2u3K0QbnSKJlWtddAzahMptaKb7WD+gP6X
29087GmZYMzCJqsf63N6p6sHeyuqhSzg2iiInlKNwdElzD79cCgFx+/+fcjPD8oi
Bot7/nyO0omXVSzlOowb4zWyaMUxmd6ATfMefKk13CUMiKywnJX/84Xn0GmSHD/b
kZr0xQXkZivw9zFZIGV6BWnRgkpMl6E5QVFgwtDuFMSHk5IqeD1/qVeM8ngOProM
Dk7WOdWMBVmrLx2p8bklMQ9fko0=
-----END CERTIFICATE-----
Generated at Thu May 2 17:18:23 2024 by rpki-client on console-ams.rpki-client.org