Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D54BA38E157511EE8AA723184AD9E6FC.roa
File: D54BA38E157511EE8AA723184AD9E6FC.roa (raw, json)
Hash identifier: FieSG9gG6lyvVhleDz0M2mYHKF5k7vP3l8j3e4O1agE=
Subject key identifier: 4E:CF:DD:74:A5:2A:BF:FA:99:FF:3A:E5:E3:54:73:1C:8B:02:87:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2DE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D54BA38E157511EE8AA723184AD9E6FC.roa
Signing time: Wed 28 Jun 2023 05:37:13 +0000
ROA not before: Wed 28 Jun 2023 05:37:09 +0000
ROA not after: Tue 29 Oct 2024 05:37:09 +0000
asID: 135607
IP address blocks: 45.194.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11744 (0x2de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 05:37:09 2023 GMT
Not After : Oct 29 05:37:09 2024 GMT
Subject: CN=649bc709-de08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:da:96:ab:73:33:31:d2:c1:b0:da:41:a5:
de:78:03:df:4e:52:25:6a:1d:15:04:e3:31:14:1a:
87:e4:af:ac:07:2d:ac:4e:2b:8d:a6:69:41:28:25:
9e:10:01:5e:66:7a:d7:ba:37:fe:9c:03:3e:21:38:
9f:84:af:be:82:93:a3:dd:8b:32:3e:6d:41:ba:4f:
94:3e:31:06:5b:f1:34:45:47:0b:bd:d7:ab:71:42:
1b:11:d8:e5:94:8a:23:9f:bb:6e:a0:6a:50:71:00:
0a:4f:a0:60:e4:3d:c0:bc:2a:79:08:5e:52:c8:68:
a3:ba:eb:5a:5e:56:21:b6:29:c3:5c:f6:b4:95:29:
97:26:93:74:c0:e4:a9:fa:9f:9e:b4:e5:fa:c4:93:
35:97:d2:e7:d3:95:f3:a7:e8:23:6b:b2:03:b8:50:
f5:44:3a:1d:86:ec:49:96:09:e8:d9:ab:bf:68:46:
16:81:35:8d:44:12:ff:0c:d7:65:95:f3:e7:71:ff:
8d:40:ed:c9:57:3c:13:96:c0:3b:ae:82:0c:3f:30:
4e:31:6b:80:2e:2c:91:65:0f:0f:ce:e4:99:a4:04:
e2:b2:28:ee:f9:67:40:63:aa:e0:74:14:df:46:1b:
b3:b1:72:7c:26:9b:a0:e1:66:78:16:d5:63:13:7a:
4d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:DD:74:A5:2A:BF:FA:99:FF:3A:E5:E3:54:73:1C:8B:02:87:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D54BA38E157511EE8AA723184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b6:ae:b0:c8:38:6f:2b:da:50:6b:94:3d:32:ee:f5:6c:c7:
74:9f:4f:20:2f:ae:7e:54:9f:1c:fd:c3:90:fe:cb:3c:51:40:
09:70:af:da:28:83:fe:93:78:8b:b1:44:60:4d:13:1b:92:d5:
1a:72:dc:10:3d:65:88:8b:5c:e3:61:51:62:1e:0f:89:0a:66:
74:52:0f:ac:87:58:b1:b9:e7:48:b1:1c:ba:df:58:8a:4e:2e:
de:75:2a:c2:90:d7:03:9a:ff:fc:a2:63:8c:ca:d8:be:80:6a:
a4:9e:0e:14:ed:b3:b3:b8:5e:f3:fa:92:23:27:55:8c:6b:c3:
bf:6e:d2:50:36:c5:f9:36:c0:05:0f:23:8e:13:80:8b:0a:d9:
c1:ad:ea:b5:be:8c:db:e4:1f:2d:6e:b0:df:a0:04:2c:bf:64:
ee:e9:34:3e:ed:22:92:c1:a4:2b:cb:21:cb:1a:be:e6:0d:2c:
9b:55:c8:4e:d7:aa:4c:53:ff:d8:52:98:1c:7a:a5:38:30:23:
17:60:13:b4:98:2b:e1:d2:56:db:ec:c0:44:b9:d7:28:0a:02:
43:b3:e5:62:c9:a8:85:a6:e4:0b:1b:e4:07:90:5d:f9:a5:33:
60:03:43:c3:fd:b8:06:72:77:c1:ea:f4:66:1a:fd:df:7e:5c:
c3:a6:46:45
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLeAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MjgwNTM3MDlaFw0yNDEwMjkwNTM3MDlaMBgxFjAU
BgNVBAMTDTY0OWJjNzA5LWRlMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdM9qWq3MzMdLBsNpBpd54A99OUiVqHRUE4zEUGofkr6wHLaxOK42maUEo
JZ4QAV5mete6N/6cAz4hOJ+Er76Ck6PdizI+bUG6T5Q+MQZb8TRFRwu916txQhsR
2OWUiiOfu26galBxAApPoGDkPcC8KnkIXlLIaKO661peViG2KcNc9rSVKZcmk3TA
5Kn6n5605frEkzWX0ufTlfOn6CNrsgO4UPVEOh2G7EmWCejZq79oRhaBNY1EEv8M
12WV8+dx/41A7clXPBOWwDuuggw/ME4xa4AuLJFlDw/O5JmkBOKyKO75Z0BjquB0
FN9GG7Oxcnwmm6DhZngW1WMTek3FAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTs/d
dKUqv/qZ/zrl41RzHIsChy4wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Q1NEJBMzhFMTU3NTExRUU4QUE3MjMxODRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwgkwDQYJKoZIhvcNAQELBQAD
ggEBAHy2rrDIOG8r2lBrlD0y7vVsx3SfTyAvrn5Unxz9w5D+yzxRQAlwr9oog/6T
eIuxRGBNExuS1Rpy3BA9ZYiLXONhUWIeD4kKZnRSD6yHWLG550ixHLrfWIpOLt51
KsKQ1wOa//yiY4zK2L6AaqSeDhTts7O4XvP6kiMnVYxrw79u0lA2xfk2wAUPI44T
gIsK2cGt6rW+jNvkHy1usN+gBCy/ZO7pND7tIpLBpCvLIcsavuYNLJtVyE7XqkxT
/9hSmBx6pTgwIxdgE7SYK+HSVtvswES51ygKAkOz5WLJqIWm5Asb5AeQXfmlM2AD
Q8P9uAZyd8Hq9GYa/d9+XMOmRkU=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org