Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA78222C9F7E11EFA305A848762E951A.roa
File: CA78222C9F7E11EFA305A848762E951A.roa (raw, json)
Hash identifier: yTj8T+G4T53zF/G0EWVFihX7IqMnrniqG/WPs8ygEGo=
Subject key identifier: 80:0D:40:83:6B:D8:A7:19:7A:8E:E9:86:C2:51:92:54:65:32:11:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D10A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA78222C9F7E11EFA305A848762E951A.roa
Signing time: Sun 10 Nov 2024 16:13:58 +0000
ROA not before: Sun 10 Nov 2024 16:13:55 +0000
ROA not after: Fri 17 Oct 2025 16:13:55 +0000
asID: 152450
IP address blocks: 45.204.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53514 (0xd10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:13:55 2024 GMT
Not After : Oct 17 16:13:55 2025 GMT
Subject: CN=6730dbc6-469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:55:ca:4f:55:ca:e2:d8:2a:2e:41:5c:29:
5b:7b:23:bd:81:0a:e2:31:d7:f3:24:08:5c:7c:4b:
e3:f8:cf:c8:f1:2e:72:7a:62:a9:d5:ab:7a:fb:fc:
6b:a5:20:c4:78:b9:6a:2a:a4:79:eb:d2:7d:d8:6a:
8d:54:2f:89:30:c4:c4:49:a7:14:7d:b6:2e:57:0d:
04:a7:5e:2f:47:b1:6d:c8:04:11:09:60:c1:ef:42:
86:e7:01:3d:72:47:94:3d:61:48:c1:b5:c2:d1:96:
37:b7:7b:1e:75:56:ef:54:db:66:19:24:db:fb:2d:
b7:3f:91:f0:f8:42:dc:48:f4:98:da:ea:9a:b1:a1:
63:10:2b:e9:12:a7:52:0a:82:46:f1:13:34:52:a0:
50:51:2a:35:1c:3d:45:52:f8:c5:d2:cd:05:8b:e1:
bf:08:6c:47:1b:d1:2d:45:92:d3:c1:e9:32:f5:9f:
7e:1e:33:68:ae:69:e0:df:4c:7b:e0:d7:7a:91:f9:
cd:57:ee:d1:03:f8:e5:0c:10:73:18:18:7c:01:0e:
2f:31:d5:7f:a8:dd:b0:c4:01:18:ad:3b:64:18:88:
3e:a6:9c:9e:fc:74:1d:7c:bb:0c:81:0d:95:04:73:
2f:60:06:2d:19:d4:6a:8c:a6:92:86:83:fd:a7:5e:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0D:40:83:6B:D8:A7:19:7A:8E:E9:86:C2:51:92:54:65:32:11:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA78222C9F7E11EFA305A848762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:bc:cc:fd:3f:49:63:d4:79:ce:d1:a1:54:bf:4f:e3:c5:9c:
1b:05:30:83:67:3d:a7:3e:29:43:90:95:fa:0c:4d:39:c8:ed:
b1:ec:20:04:55:16:0e:03:a5:2c:98:9f:1b:a0:73:00:88:8f:
9e:dc:6e:cc:58:e0:c5:37:9f:f2:bb:0b:33:14:47:71:1a:bd:
68:02:85:b3:77:40:14:44:59:8e:e6:fc:51:be:09:27:43:17:
8b:e6:a0:7c:e3:3a:5e:d9:95:da:d7:1f:fc:c8:13:f8:36:78:
31:58:62:b8:85:9a:08:4f:77:08:50:31:2e:2f:62:bb:e4:4f:
e1:36:1f:c5:55:29:48:17:d0:a1:79:f9:69:07:86:7a:70:f0:
bf:b3:8e:b5:be:3f:09:52:9a:ba:22:df:4a:cb:06:dd:f3:70:
78:82:04:88:aa:0d:92:8a:60:aa:c4:e8:2b:72:36:50:12:b1:
eb:47:12:48:39:4b:71:24:67:48:aa:08:40:ff:50:f9:d2:9e:
be:5f:a1:1c:db:74:5a:96:a1:15:df:ed:44:89:db:45:c0:1e:
e6:ff:bd:57:09:d5:33:8c:dd:d4:60:de:f0:f2:ca:aa:b8:e4:
aa:46:f8:04:b5:2f:11:bc:52:54:92:05:a4:cf:f4:28:d8:35:
b8:e7:f0:36
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANEKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEwMTYxMzU1WhcNMjUxMDE3MTYxMzU1WjAYMRYw
FAYDVQQDEw02NzMwZGJjNi00NjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqX1Vyk9VyuLYKi5BXClbeyO9gQriMdfzJAhcfEvj+M/I8S5yemKp1at6
+/xrpSDEeLlqKqR569J92GqNVC+JMMTESacUfbYuVw0Ep14vR7FtyAQRCWDB70KG
5wE9ckeUPWFIwbXC0ZY3t3sedVbvVNtmGSTb+y23P5Hw+ELcSPSY2uqasaFjECvp
EqdSCoJG8RM0UqBQUSo1HD1FUvjF0s0Fi+G/CGxHG9EtRZLTweky9Z9+HjNormng
30x74Nd6kfnNV+7RA/jlDBBzGBh8AQ4vMdV/qN2wxAEYrTtkGIg+ppye/HQdfLsM
gQ2VBHMvYAYtGdRqjKaShoP9p16kEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIAN
QINr2KcZeo7phsJRklRlMhH4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQTc4MjIyQzlGN0UxMUVGQTMwNUE4NDg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcwIMA0GCSqGSIb3DQEBCwUA
A4IBAQCqvMz9P0lj1HnO0aFUv0/jxZwbBTCDZz2nPilDkJX6DE05yO2x7CAEVRYO
A6UsmJ8boHMAiI+e3G7MWODFN5/yuwszFEdxGr1oAoWzd0AURFmO5vxRvgknQxeL
5qB84zpe2ZXa1x/8yBP4NngxWGK4hZoIT3cIUDEuL2K75E/hNh/FVSlIF9Cheflp
B4Z6cPC/s461vj8JUpq6It9Kywbd83B4ggSIqg2SimCqxOgrcjZQErHrRxJIOUtx
JGdIqghA/1D50p6+X6Ec23RalqEV3+1EidtFwB7m/71XCdUzjN3UYN7w8sqquOSq
RvgEtS8RvFJUkgWkz/Qo2DW45/A2
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org