Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D071D7CCA44711EFA3563C8F762E951A.roa
File: D071D7CCA44711EFA3563C8F762E951A.roa (raw, json)
Hash identifier: gmNi8XcfTy4y5hDuk298PfPNrjbYvIawsDVIeoqyKgk=
Subject key identifier: 61:99:9E:8F:FB:6E:BD:32:74:95:90:32:26:32:A7:0E:F6:22:7D:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D382
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D071D7CCA44711EFA3563C8F762E951A.roa
Signing time: Sat 16 Nov 2024 18:23:02 +0000
ROA not before: Sat 16 Nov 2024 18:22:58 +0000
ROA not after: Mon 25 Nov 2024 18:22:58 +0000
asID: 7029
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54146 (0xd382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:22:58 2024 GMT
Not After : Nov 25 18:22:58 2024 GMT
Subject: CN=6738e306-ef81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:0e:69:d2:2b:e5:2e:5a:88:5f:77:1c:61:
73:a7:c6:25:10:77:ac:8a:0c:5d:dd:c1:16:be:63:
8e:fa:eb:89:1f:89:d3:85:79:97:3c:bd:f6:48:8f:
8d:0c:1b:f9:db:08:e8:af:4f:0f:cf:99:a7:71:cb:
76:ed:8f:4a:3e:e4:81:6a:37:c6:f2:57:da:f4:ab:
10:22:7d:04:cc:a4:a1:c2:0b:bf:e9:34:9e:c5:e4:
ec:8f:b9:56:dc:85:f5:35:3c:08:8a:c2:75:cd:f1:
1c:00:6b:95:52:11:3e:92:c1:33:2f:38:38:64:dd:
f3:74:d8:75:29:0f:d5:fe:bd:fd:bf:f8:4d:30:c4:
42:08:04:90:21:ae:62:0a:b5:4c:ba:e8:18:a1:e9:
5e:69:5b:21:6c:fe:59:7d:57:e4:8e:74:6c:65:21:
b2:7e:7a:c7:8e:48:a0:43:63:52:b5:2a:9a:7e:72:
e3:76:08:cd:74:aa:11:54:56:4f:c3:3c:68:d0:74:
a8:66:14:91:14:20:67:77:2a:bc:c4:56:6f:5b:56:
c9:8c:5f:d5:8e:71:43:b5:e4:14:9f:ea:75:23:8a:
94:4d:eb:55:a4:0f:07:9a:9e:41:33:84:f6:ca:16:
2a:7d:44:87:74:15:31:a4:a3:d4:7d:5d:16:27:9a:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:9E:8F:FB:6E:BD:32:74:95:90:32:26:32:A7:0E:F6:22:7D:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D071D7CCA44711EFA3563C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
62:21:61:ea:31:60:d0:3d:28:fa:22:9d:f1:ec:de:ed:08:28:
19:64:9b:f8:74:46:34:8d:dc:e8:2b:cb:15:9e:49:69:a3:d5:
58:7c:93:5e:fd:22:3c:e9:12:61:55:7b:0e:14:41:4a:fb:1f:
fe:5d:0c:98:7c:85:e7:d0:4e:e3:5b:54:af:63:05:07:aa:5b:
d9:1a:05:f9:b2:2a:19:9a:54:f5:ba:67:95:75:28:64:cf:d8:
ce:c4:66:f4:ab:6e:4a:f2:28:9e:ce:4a:3a:ec:5f:aa:54:54:
72:53:94:38:3c:8b:6e:6f:c1:db:de:cb:0d:90:c5:64:59:b4:
2d:1b:bc:39:91:cd:3e:c0:28:12:2c:f6:43:f9:ef:c5:d5:b1:
0b:25:89:b4:67:24:a0:c6:00:d1:f9:27:a2:87:d9:02:23:f3:
d0:fe:2f:59:f7:da:ad:8e:76:d5:f7:9e:26:e8:2b:1f:55:79:
b2:d2:e8:e8:2e:93:79:2d:ce:a4:60:29:32:01:b0:69:ba:62:
29:62:36:32:66:5d:8e:0c:53:0f:77:be:ea:8a:0b:b7:1b:65:
ba:4a:46:c9:93:37:bd:b5:cf:1b:c1:c3:9f:1a:83:f9:c7:76:
cd:2b:f8:3f:2a:c6:74:8f:01:5d:7b:2f:df:2d:0a:e4:93:f2:
09:dc:61:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANOCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTgyMjU4WhcNMjQxMTI1MTgyMjU4WjAYMRYw
FAYDVQQDEw02NzM4ZTMwNi1lZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2n8OadIr5S5aiF93HGFzp8YlEHesigxd3cEWvmOO+uuJH4nThXmXPL32
SI+NDBv52wjor08Pz5mncct27Y9KPuSBajfG8lfa9KsQIn0EzKShwgu/6TSexeTs
j7lW3IX1NTwIisJ1zfEcAGuVUhE+ksEzLzg4ZN3zdNh1KQ/V/r39v/hNMMRCCASQ
Ia5iCrVMuugYoeleaVshbP5ZfVfkjnRsZSGyfnrHjkigQ2NStSqafnLjdgjNdKoR
VFZPwzxo0HSoZhSRFCBndyq8xFZvW1bJjF/VjnFDteQUn+p1I4qUTetVpA8Hmp5B
M4T2yhYqfUSHdBUxpKPUfV0WJ5rBQwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGGZ
no/7br0ydJWQMiYypw72In1VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMDcxRDdDQ0E0NDcxMUVGQTM1NjNDOEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcQwMA0GCSqGSIb3DQEBCwUA
A4IBAQBiIWHqMWDQPSj6Ip3x7N7tCCgZZJv4dEY0jdzoK8sVnklpo9VYfJNe/SI8
6RJhVXsOFEFK+x/+XQyYfIXn0E7jW1SvYwUHqlvZGgX5sioZmlT1umeVdShkz9jO
xGb0q25K8iiezko67F+qVFRyU5Q4PItub8Hb3ssNkMVkWbQtG7w5kc0+wCgSLPZD
+e/F1bELJYm0ZySgxgDR+Seih9kCI/PQ/i9Z99qtjnbV954m6CsfVXmy0ujoLpN5
Lc6kYCkyAbBpumIpYjYyZl2ODFMPd77qigu3G2W6SkbJkze9tc8bwcOfGoP5x3bN
K/g/KsZ0jwFdey/fLQrkk/IJ3GE8
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:50 2024 by rpki-client on console-ams.rpki-client.org