Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5B92B409BA11EEB84B34824AD9E6FC.roa
File: DB5B92B409BA11EEB84B34824AD9E6FC.roa (raw, json)
Hash identifier: ugzFjOLuYW6mwwxe02mBOQXAYwXAQUBci3YTyjOt6Qk=
Subject key identifier: 44:D5:6F:B6:69:FA:2B:C6:2E:6D:5F:B2:FA:77:CF:0C:95:AE:7C:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5B92B409BA11EEB84B34824AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:21:04 +0000
ROA not before: Tue 13 Jun 2023 07:21:00 +0000
ROA not after: Wed 05 Jun 2024 07:21:00 +0000
asID: 201411
IP address blocks: 45.195.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11292 (0x2c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 07:21:00 2023 GMT
Not After : Jun 5 07:21:00 2024 GMT
Subject: CN=648818e0-4655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:38:9e:b1:5f:d9:58:83:00:b0:3d:1d:11:
4b:22:a8:00:f0:89:b7:d3:4b:4a:7b:43:64:32:8d:
4a:b5:80:69:66:21:ad:58:e4:22:37:4b:fc:ac:48:
56:f0:76:3a:82:84:e3:48:2c:8f:a3:1a:16:a2:eb:
06:6e:85:b9:78:be:25:83:8f:dc:11:28:de:6f:c2:
2d:5a:dd:81:af:4c:71:43:cc:91:0c:3c:67:63:60:
09:c4:09:7c:73:f7:1b:ef:e8:3e:45:57:6d:cd:1a:
e3:2b:8c:4f:e1:31:38:c0:70:3b:82:9a:86:ae:f0:
f1:fe:90:be:22:a6:52:90:4c:6d:ee:5b:78:c2:3d:
47:7d:aa:87:0a:8a:97:c5:cd:eb:e3:2f:f9:75:50:
ca:41:2f:19:55:f2:73:09:46:c4:8f:ca:4a:0e:57:
eb:d0:d0:b9:4e:35:96:79:5e:8d:fe:56:54:c4:ba:
80:14:97:38:52:25:8b:07:91:5c:ba:3e:b9:c5:ed:
76:4c:9e:d8:b1:ef:cf:26:94:ec:d4:3f:af:84:6f:
d6:db:b0:96:b9:b1:55:0c:12:52:3a:55:03:c2:49:
aa:4d:56:46:4d:ac:98:4f:e2:93:a8:25:76:ca:8d:
ad:5e:8f:06:0d:4e:68:72:78:53:d0:d4:fe:13:f3:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:6F:B6:69:FA:2B:C6:2E:6D:5F:B2:FA:77:CF:0C:95:AE:7C:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5B92B409BA11EEB84B34824AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ba:47:46:53:52:d1:de:66:3b:d4:3b:02:1f:39:09:25:10:
3e:5c:8c:91:c4:75:4a:16:a8:96:29:93:7a:1a:d9:b8:a1:89:
fe:f4:a8:93:86:da:d8:08:4d:f4:cb:2e:c4:9b:b6:42:a0:2c:
41:27:05:8b:8f:7c:d6:87:44:d7:08:30:c6:a9:bb:94:7a:01:
82:90:6d:23:07:ff:79:7e:81:fd:51:89:49:8c:88:df:b7:b2:
15:56:cb:c0:4c:24:2a:70:b4:62:29:02:a2:6e:53:ce:d3:72:
7a:f5:86:11:62:f6:51:4b:a9:a4:b1:8b:52:24:b6:7c:cb:0c:
a0:aa:33:8c:dd:4c:45:97:bb:ad:36:64:b7:02:28:02:33:b4:
02:a3:07:2f:52:3a:1a:34:4d:cc:0d:09:66:85:8a:6e:1d:c9:
90:0f:9b:78:92:ca:1f:cf:94:ed:66:10:fe:ee:9e:d3:4b:32:
b2:0f:c8:c1:44:f3:fd:18:69:f6:37:68:6c:9a:09:d6:57:8b:
f2:60:0c:1a:29:3d:7e:26:fd:d4:ec:6c:88:0d:d8:8f:f1:4f:
fb:37:12:bb:6b:40:eb:d7:75:52:18:3f:ad:07:ce:19:ae:7e:
70:e4:64:3a:fa:4a:73:4d:bf:c8:e6:71:58:e7:7d:3b:8c:a0:
42:5d:01:b4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICLBwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA2MTMwNzIxMDBaFw0yNDA2MDUwNzIxMDBaMBgxFjAU
BgNVBAMTDTY0ODgxOGUwLTQ2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRzDiesV/ZWIMAsD0dEUsiqADwibfTS0p7Q2QyjUq1gGlmIa1Y5CI3S/ys
SFbwdjqChONILI+jGhai6wZuhbl4viWDj9wRKN5vwi1a3YGvTHFDzJEMPGdjYAnE
CXxz9xvv6D5FV23NGuMrjE/hMTjAcDuCmoau8PH+kL4iplKQTG3uW3jCPUd9qocK
ipfFzevjL/l1UMpBLxlV8nMJRsSPykoOV+vQ0LlONZZ5Xo3+VlTEuoAUlzhSJYsH
kVy6PrnF7XZMntix788mlOzUP6+Eb9bbsJa5sVUMElI6VQPCSapNVkZNrJhP4pOo
JXbKja1ejwYNTmhyeFPQ1P4T80yZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQURNVv
tmn6K8YubV+y+nfPDJWufEcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0RCNUI5MkI0MDlCQTExRUVCODRCMzQ4MjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw+MwDQYJKoZIhvcNAQELBQAD
ggEBAKe6R0ZTUtHeZjvUOwIfOQklED5cjJHEdUoWqJYpk3oa2bihif70qJOG2tgI
TfTLLsSbtkKgLEEnBYuPfNaHRNcIMMapu5R6AYKQbSMH/3l+gf1RiUmMiN+3shVW
y8BMJCpwtGIpAqJuU87Tcnr1hhFi9lFLqaSxi1IktnzLDKCqM4zdTEWXu602ZLcC
KAIztAKjBy9SOho0TcwNCWaFim4dyZAPm3iSyh/PlO1mEP7untNLMrIPyMFE8/0Y
afY3aGyaCdZXi/JgDBopPX4m/dTsbIgN2I/xT/s3ErtrQOvXdVIYP60HzhmufnDk
ZDr6SnNNv8jmcVjnfTuMoEJdAbQ=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org