Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFBDB6D4D2BE11EE913F1A5B775412E6.roa
File: DFBDB6D4D2BE11EE913F1A5B775412E6.roa (raw, json)
Hash identifier: 2QE+DWAD2pI9+RdZXKY0RTj/DP8IPN16ILQVL+i2iLw=
Subject key identifier: D9:45:E3:B2:35:BB:C8:FB:97:FE:47:48:EC:41:80:EC:E3:97:5F:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7513
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFBDB6D4D2BE11EE913F1A5B775412E6.roa
Signing time: Sat 24 Feb 2024 02:46:13 +0000
ROA not before: Sat 24 Feb 2024 02:46:08 +0000
ROA not after: Wed 26 Feb 2025 02:46:08 +0000
asID: 139056
IP address blocks: 45.195.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29971 (0x7513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 02:46:08 2024 GMT
Not After : Feb 26 02:46:08 2025 GMT
Subject: CN=65d95875-78bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:87:53:56:4f:11:35:d7:2b:10:a8:28:51:
89:67:8f:ef:0d:d7:49:b0:e1:fe:54:70:16:34:a1:
7b:78:1c:f7:89:b1:40:8d:5e:3f:f7:e9:96:ee:94:
16:d3:e2:ee:28:d9:62:a0:88:10:d3:0b:b6:f2:75:
ba:8b:23:61:6d:28:4c:c6:8d:69:d1:e0:f2:f7:47:
13:c2:fb:a7:c2:1d:a5:95:06:35:d0:ac:fb:9b:1b:
20:15:ba:25:ed:2f:81:b6:58:5c:b5:ad:44:da:9c:
a1:9f:b7:05:f0:9c:95:08:54:68:63:99:45:9a:84:
02:a3:c7:94:f0:a0:6f:3f:6c:d0:33:7b:68:48:25:
eb:b8:3c:b6:91:e2:59:fb:4f:f8:6f:c9:b6:00:d5:
a6:f4:e2:13:27:29:2c:86:08:18:77:73:e4:b1:26:
5f:8a:1d:8b:50:10:d7:e4:d2:be:57:ed:71:77:e0:
11:61:11:0a:45:66:59:8a:50:21:b5:ea:2d:5a:a2:
3c:24:db:52:9f:55:f5:ff:19:70:87:3b:20:b9:5d:
88:b8:a9:cd:52:3a:b7:44:ae:31:8d:a9:00:e3:09:
93:81:44:2a:38:b1:1e:2c:85:82:b2:63:16:36:b1:
73:12:b6:7d:b0:5c:6f:01:37:14:3a:92:e7:09:9e:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:E3:B2:35:BB:C8:FB:97:FE:47:48:EC:41:80:EC:E3:97:5F:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFBDB6D4D2BE11EE913F1A5B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.70.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:25:e2:a2:77:34:4e:ea:6d:a2:2a:02:0a:e9:67:50:34:71:
27:de:9b:5c:c5:12:8e:db:bb:d7:61:8a:91:29:b0:aa:db:42:
4d:15:17:3d:20:56:72:93:45:7c:e2:42:c1:81:90:03:49:a8:
9f:19:50:18:49:b4:58:bf:24:16:e2:9d:af:35:d5:26:7d:10:
99:c5:33:46:91:4a:b8:10:01:d5:8a:0c:d2:35:8f:70:68:2b:
0a:20:94:d8:91:e2:87:3b:8e:84:2c:ea:30:3b:93:36:10:ad:
6b:e9:26:65:4b:1f:f3:96:5c:74:97:64:23:dc:b4:63:e7:d7:
54:28:24:dc:e3:eb:b1:1b:38:9e:81:00:2b:5e:f6:52:9a:23:
bc:e2:41:13:80:e2:ed:cb:3b:d6:c1:cb:a9:c4:4b:96:f0:cb:
bd:84:7d:6f:08:3b:a6:45:be:75:90:bb:79:94:b7:5a:91:97:
a9:55:0b:be:09:01:65:9a:40:6e:6c:39:b4:6f:68:88:93:3f:
11:6f:7e:9a:59:40:32:91:79:a2:53:ba:b1:a2:1a:9d:8a:f7:
b5:44:d9:36:8d:06:20:88:f6:10:ce:44:f0:85:9c:de:30:27:
1e:78:04:8b:88:72:70:ef:23:07:66:ea:f7:c3:c5:c2:02:c8:
45:76:c3:e3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICdRMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAyMjQwMjQ2MDhaFw0yNTAyMjYwMjQ2MDhaMBgxFjAU
BgNVBAMTDTY1ZDk1ODc1LTc4YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN2odTVk8RNdcrEKgoUYlnj+8N10mw4f5UcBY0oXt4HPeJsUCNXj/36Zbu
lBbT4u4o2WKgiBDTC7bydbqLI2FtKEzGjWnR4PL3RxPC+6fCHaWVBjXQrPubGyAV
uiXtL4G2WFy1rUTanKGftwXwnJUIVGhjmUWahAKjx5TwoG8/bNAze2hIJeu4PLaR
4ln7T/hvybYA1ab04hMnKSyGCBh3c+SxJl+KHYtQENfk0r5X7XF34BFhEQpFZlmK
UCG16i1aojwk21KfVfX/GXCHOyC5XYi4qc1SOrdErjGNqQDjCZOBRCo4sR4shYKy
YxY2sXMStn2wXG8BNxQ6kucJngCBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU2UXj
sjW7yPuX/kdI7EGA7OOXX/cwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0RGQkRCNkQ0RDJCRTExRUU5MTNGMUE1Qjc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtw0YwDQYJKoZIhvcNAQELBQAD
ggEBAE0l4qJ3NE7qbaIqAgrpZ1A0cSfem1zFEo7bu9dhipEpsKrbQk0VFz0gVnKT
RXziQsGBkANJqJ8ZUBhJtFi/JBbina811SZ9EJnFM0aRSrgQAdWKDNI1j3BoKwog
lNiR4oc7joQs6jA7kzYQrWvpJmVLH/OWXHSXZCPctGPn11QoJNzj67EbOJ6BACte
9lKaI7ziQROA4u3LO9bBy6nES5bwy72EfW8IO6ZFvnWQu3mUt1qRl6lVC74JAWWa
QG5sObRvaIiTPxFvfppZQDKReaJTurGiGp2K97VE2TaNBiCI9hDORPCFnN4wJx54
BIuIcnDvIwdm6vfDxcICyEV2w+M=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org