Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAB16FF09F7D11EF878A3242762E951A.roa
File: DAB16FF09F7D11EF878A3242762E951A.roa (raw, json)
Hash identifier: bUc2qvkgmHaT1ZWkO1CSRdDdEBiOd9yubAsG5sN/9X0=
Subject key identifier: A3:EB:5E:6D:ED:28:5B:EE:0A:D0:E7:BD:99:BD:28:05:81:4E:3A:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D102
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAB16FF09F7D11EF878A3242762E951A.roa
Signing time: Sun 10 Nov 2024 16:07:16 +0000
ROA not before: Sun 10 Nov 2024 16:07:12 +0000
ROA not after: Fri 17 Oct 2025 16:07:12 +0000
asID: 137443
IP address blocks: 45.195.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53506 (0xd102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:07:12 2024 GMT
Not After : Oct 17 16:07:12 2025 GMT
Subject: CN=6730da34-b7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:75:5d:ee:e1:73:a1:de:9c:66:53:03:5e:
aa:ed:ea:c0:cb:5f:35:4b:4f:b2:88:30:d0:3a:74:
ae:6c:1e:40:c5:1c:fb:69:42:8e:0a:dd:8f:db:6e:
fd:3e:dc:4a:38:0f:7b:2d:d7:4a:3e:60:d8:81:da:
c6:5b:97:26:12:80:c3:b6:2e:3d:f1:62:a3:4a:d3:
06:54:c3:e9:f6:bc:7e:0e:17:f8:dc:93:ca:78:fb:
a9:75:22:0a:6d:e7:e4:08:1d:60:b1:a9:22:b9:f2:
19:0f:f7:61:52:ef:a1:0f:9c:4a:e8:d3:6f:5b:59:
55:07:91:68:20:e1:9f:7f:18:47:55:44:e1:43:b5:
c2:de:a9:72:cb:62:60:8c:7d:bc:fb:e4:80:48:00:
df:d7:4a:a3:1e:1a:0e:26:44:5f:13:46:cc:80:fc:
d7:15:6f:96:a4:5a:3e:3a:77:96:3c:b2:83:aa:85:
b2:c4:e7:69:5f:f2:19:25:6d:a1:9a:97:e3:0e:79:
a1:50:0d:af:de:8b:09:b7:03:cf:6f:89:1b:48:32:
a9:6d:98:76:4f:db:12:9a:51:54:c5:b1:f1:41:9c:
25:0e:41:c9:c0:3b:c1:a1:1c:9a:a4:f5:17:5f:51:
df:2a:4c:9c:4a:ec:bf:d2:46:64:9a:41:ab:29:f0:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:5E:6D:ED:28:5B:EE:0A:D0:E7:BD:99:BD:28:05:81:4E:3A:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAB16FF09F7D11EF878A3242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
13:0c:fe:c0:67:51:08:f8:82:c2:ae:69:61:e1:af:6b:e4:14:
b0:3e:43:ba:c9:5e:b6:6d:7b:32:c3:9a:78:08:cb:5a:fa:0a:
b6:4a:88:b4:7e:a2:fd:70:a5:37:59:fd:be:a3:42:ae:e4:4d:
08:5f:de:93:b4:0d:63:f3:31:77:e9:e9:d8:8d:b7:49:5f:ec:
aa:7f:69:37:20:85:5a:c7:7d:bb:cd:3a:c6:92:42:06:64:a5:
db:7b:86:2a:b1:f5:0a:43:16:d8:be:b0:b3:84:48:63:f2:b6:
a2:a1:60:76:ad:19:4d:5c:15:58:bf:4a:2f:70:6a:6c:a8:b3:
91:01:c6:4b:8f:c8:c4:54:28:a9:a4:7c:4f:bd:ea:de:21:92:
64:a5:b3:79:af:96:f7:58:3a:2a:cb:22:9a:c6:ab:44:a2:e5:
2d:41:02:db:26:a5:9e:a4:56:be:fe:d8:9e:b0:e3:f7:93:c8:
d1:28:00:19:09:e5:39:31:45:56:44:97:c9:ae:18:8d:72:63:
cf:ff:51:25:e2:23:fd:1a:6a:85:2b:86:90:a6:39:27:61:ac:
f0:3f:cf:9b:25:1c:e4:b4:78:e7:a2:a9:12:bb:fc:75:ca:31:
ee:8e:48:48:6b:68:59:dd:80:60:3f:cb:57:cf:be:75:34:34:
57:3e:70:30
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANECMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEwMTYwNzEyWhcNMjUxMDE3MTYwNzEyWjAYMRYw
FAYDVQQDEw02NzMwZGEzNC1iN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzRB1Xe7hc6HenGZTA16q7erAy181S0+yiDDQOnSubB5AxRz7aUKOCt2P
2279PtxKOA97LddKPmDYgdrGW5cmEoDDti498WKjStMGVMPp9rx+Dhf43JPKePup
dSIKbefkCB1gsakiufIZD/dhUu+hD5xK6NNvW1lVB5FoIOGffxhHVUThQ7XC3qly
y2JgjH28++SASADf10qjHhoOJkRfE0bMgPzXFW+WpFo+OneWPLKDqoWyxOdpX/IZ
JW2hmpfjDnmhUA2v3osJtwPPb4kbSDKpbZh2T9sSmlFUxbHxQZwlDkHJwDvBoRya
pPUXX1HfKkycSuy/0kZkmkGrKfBziwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKPr
Xm3tKFvuCtDnvZm9KAWBTjqNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQUIxNkZGMDlGN0QxMUVGODc4QTMyNDI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcM0MA0GCSqGSIb3DQEBCwUA
A4IBAQATDP7AZ1EI+ILCrmlh4a9r5BSwPkO6yV62bXsyw5p4CMta+gq2Soi0fqL9
cKU3Wf2+o0Ku5E0IX96TtA1j8zF36enYjbdJX+yqf2k3IIVax327zTrGkkIGZKXb
e4YqsfUKQxbYvrCzhEhj8raioWB2rRlNXBVYv0ovcGpsqLORAcZLj8jEVCippHxP
vereIZJkpbN5r5b3WDoqyyKaxqtEouUtQQLbJqWepFa+/tiesOP3k8jRKAAZCeU5
MUVWRJfJrhiNcmPP/1El4iP9GmqFK4aQpjknYazwP8+bJRzktHjnoqkSu/x1yjHu
jkhIa2hZ3YBgP8tXz751NDRXPnAw
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org