Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4928500FBAE11EE904F0838017001B1.roa
File: D4928500FBAE11EE904F0838017001B1.roa (raw, json)
Hash identifier: I5ufg6mMUHpSb/ENFOQ8hNRaI6t6BqDqA0gEi3Jpb70=
Subject key identifier: B4:5B:C9:3D:C6:3E:51:13:64:34:7B:05:B0:25:BE:E0:9C:31:4A:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4928500FBAE11EE904F0838017001B1.roa
Signing time: Tue 16 Apr 2024 05:04:40 +0000
ROA not before: Tue 16 Apr 2024 05:04:37 +0000
ROA not after: Sat 01 Jun 2024 05:04:37 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33493 (0x82d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 05:04:37 2024 GMT
Not After : Jun 1 05:04:37 2024 GMT
Subject: CN=661e06e8-412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:cc:20:ac:2b:be:b4:1b:0a:5f:9f:b3:2d:
c2:19:ee:22:82:40:ca:1b:e4:48:46:68:47:61:64:
b1:6e:ea:1b:96:a9:8e:48:ec:f1:5a:43:f6:5c:c8:
21:e4:4e:6e:75:d8:97:5d:d5:87:49:c8:1c:4c:de:
e8:50:71:a1:c1:d9:f6:fe:7d:76:91:d4:24:0b:6e:
5c:19:8e:d9:e7:81:4f:4c:32:b0:47:8b:7a:02:ca:
2c:d5:4d:56:b8:a6:31:c2:e6:fd:07:8d:a1:02:15:
0b:c2:1e:4a:c8:7d:96:52:eb:c0:13:7b:5c:d0:e4:
76:62:d3:19:8c:52:34:a7:d4:ff:1f:b0:18:7d:a3:
7c:f6:10:25:8d:5b:29:5d:a6:0b:65:2d:e9:c1:96:
a4:67:08:0c:fb:2b:c2:e2:3e:f9:95:3f:38:03:53:
49:26:9b:fb:1d:19:94:bb:a9:41:ae:e8:3b:7b:3d:
9e:67:53:3b:7a:2f:24:97:8d:65:07:24:b4:18:09:
08:a7:fe:fe:00:5e:31:30:8f:2f:2f:3d:43:f8:47:
d9:4a:8d:8c:1a:5c:3a:0b:7f:3a:7b:e8:7e:b9:38:
02:68:99:a3:4a:6d:1e:46:18:e4:42:63:46:8d:0f:
2c:9e:a4:f3:47:a8:94:db:4b:61:05:4a:cb:29:62:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:C9:3D:C6:3E:51:13:64:34:7B:05:B0:25:BE:E0:9C:31:4A:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4928500FBAE11EE904F0838017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
54:68:e1:6e:d1:d3:64:6c:f7:b3:2a:81:e2:7d:1a:c1:23:b0:
07:7d:e7:64:5b:be:30:35:bc:92:8c:71:83:2a:7a:49:63:9b:
d8:aa:a0:0b:c3:8b:d3:5c:86:80:93:80:61:07:78:99:46:a6:
11:f2:36:30:ba:a3:fd:3a:ca:3c:82:0b:2d:8a:1d:9b:69:ce:
79:63:b5:fb:67:7a:cf:2e:8b:0f:03:dc:81:3e:27:89:2e:a7:
cf:d1:0e:a5:3a:25:83:17:30:91:d7:5a:e7:35:34:ad:ac:61:
59:af:a8:bb:2e:df:ea:79:c8:be:86:78:8e:b3:7a:c5:0c:96:
6f:74:9b:13:f4:2c:be:44:fb:a6:9f:03:67:89:ca:7e:75:d2:
6a:ef:6d:33:84:e6:3c:1f:7f:be:81:f2:1a:48:8e:93:a3:24:
3a:e4:a9:45:93:d7:02:bb:c3:0a:d7:2a:31:70:ab:24:e1:38:
4b:68:c5:4a:6d:1f:01:c0:95:ac:03:ba:1e:5b:1a:49:c4:81:
dd:0b:1b:a1:51:14:87:2f:e1:72:bf:83:22:41:17:fb:54:6f:
76:d6:f6:12:4f:d4:be:5a:68:82:82:cb:13:51:4c:f5:c0:b7:
ae:38:e6:51:5b:25:84:01:46:ed:05:35:d1:86:de:b3:1f:54:
2b:30:49:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAILVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE2MDUwNDM3WhcNMjQwNjAxMDUwNDM3WjAYMRYw
FAYDVQQDEw02NjFlMDZlOC00MTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2+3MIKwrvrQbCl+fsy3CGe4igkDKG+RIRmhHYWSxbuoblqmOSOzxWkP2
XMgh5E5uddiXXdWHScgcTN7oUHGhwdn2/n12kdQkC25cGY7Z54FPTDKwR4t6Asos
1U1WuKYxwub9B42hAhULwh5KyH2WUuvAE3tc0OR2YtMZjFI0p9T/H7AYfaN89hAl
jVspXaYLZS3pwZakZwgM+yvC4j75lT84A1NJJpv7HRmUu6lBrug7ez2eZ1M7ei8k
l41lByS0GAkIp/7+AF4xMI8vLz1D+EfZSo2MGlw6C386e+h+uTgCaJmjSm0eRhjk
QmNGjQ8snqTzR6iU20thBUrLKWJJWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLRb
yT3GPlETZDR7BbAlvuCcMUpuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENDkyODUwMEZCQUUxMUVFOTA0RjA4MzgwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIbMA0GCSqGSIb3DQEBCwUA
A4IBAQBUaOFu0dNkbPezKoHifRrBI7AHfedkW74wNbySjHGDKnpJY5vYqqALw4vT
XIaAk4BhB3iZRqYR8jYwuqP9Oso8ggstih2bac55Y7X7Z3rPLosPA9yBPieJLqfP
0Q6lOiWDFzCR11rnNTStrGFZr6i7Lt/qeci+hniOs3rFDJZvdJsT9Cy+RPumnwNn
icp+ddJq720zhOY8H3++gfIaSI6ToyQ65KlFk9cCu8MK1yoxcKsk4ThLaMVKbR8B
wJWsA7oeWxpJxIHdCxuhURSHL+Fyv4MiQRf7VG921vYST9S+WmiCgssTUUz1wLeu
OOZRWyWEAUbtBTXRht6zH1QrMEl8
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org