Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E10FF3EC6CF811EF8BD121A8762E951A.roa
File: E10FF3EC6CF811EF8BD121A8762E951A.roa (raw, json)
Hash identifier: Q78648rCQa2N6fnc1M8Ldeh09GCC891sLBkKsfNvwUY=
Subject key identifier: 1D:BC:BB:76:3F:76:F2:5B:4A:B2:5E:36:24:C9:A8:01:74:55:5D:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B2EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E10FF3EC6CF811EF8BD121A8762E951A.roa
Signing time: Sat 07 Sep 2024 09:09:26 +0000
ROA not before: Sat 07 Sep 2024 09:09:22 +0000
ROA not after: Tue 09 Sep 2025 09:09:22 +0000
asID: 138195
IP address blocks: 45.202.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45806 (0xb2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 7 09:09:22 2024 GMT
Not After : Sep 9 09:09:22 2025 GMT
Subject: CN=66dc1845-8925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:ad:8b:98:8b:bd:55:cc:e4:e2:c4:27:eb:
23:df:f2:b4:6b:14:ea:5d:a2:69:71:01:4b:83:17:
d8:b8:0d:5e:a1:0e:d0:eb:82:6f:c2:40:0e:c4:4c:
a9:ab:8a:2a:ea:a8:44:1c:e7:ff:b7:6c:90:6d:d8:
b7:ff:5b:5c:ab:ff:de:c3:47:37:a4:98:fb:7d:5c:
cb:01:41:08:1a:47:da:1b:50:36:38:a5:9d:46:81:
89:bc:47:bb:d6:7d:83:22:d1:94:7c:d1:fb:c4:ad:
c3:a6:d0:22:ed:9d:f1:a9:40:13:8d:c8:77:b1:a4:
c1:6d:2e:d6:b1:38:a6:2a:6d:1b:4e:39:b4:bc:8a:
80:fd:3c:a0:e2:64:4e:a8:b9:dd:db:e1:5a:e8:7d:
11:f9:6f:d8:3c:97:1f:97:84:d7:8e:e6:a1:08:46:
ee:fd:3b:24:00:1f:6d:06:ef:7b:d3:21:a2:94:f8:
b6:21:fe:d0:75:cf:3f:5d:07:d4:ce:54:96:ca:8c:
2a:43:ff:1d:73:02:4d:7b:5f:51:6a:8f:56:6d:94:
bd:9c:9a:da:2b:5c:b7:bd:92:e0:ba:5b:bb:37:d6:
c8:b4:cf:bc:c2:00:6e:32:f6:e4:de:24:f8:60:82:
28:4e:f7:a6:ab:4f:ce:84:9d:69:db:cd:d3:39:71:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:BB:76:3F:76:F2:5B:4A:B2:5E:36:24:C9:A8:01:74:55:5D:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E10FF3EC6CF811EF8BD121A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.64.0/22
Signature Algorithm: sha256WithRSAEncryption
77:0d:02:26:7c:a2:36:72:0f:1b:23:16:a3:78:f2:ca:a1:58:
9a:e7:2e:c7:ce:d4:7a:f8:f2:e6:22:f5:56:88:34:fe:10:e1:
fa:3b:c8:18:53:ec:8b:50:c1:d8:46:ba:18:cf:4b:d3:5f:81:
19:31:bf:f8:38:76:bb:17:80:a6:0b:a1:69:44:d2:89:44:88:
33:ab:25:ed:fa:95:c0:6a:60:7e:89:15:0e:92:f3:13:3f:fa:
27:37:47:cb:a0:e2:05:95:13:a5:db:d8:e1:08:7b:bc:4c:b0:
e1:07:f5:b7:0d:b1:b0:8c:4f:5b:6a:37:3d:b6:53:da:c2:f9:
ca:02:89:9d:91:36:2b:4e:85:da:c6:38:45:95:ff:bb:33:84:
1c:90:5f:95:0f:51:c0:8b:1a:e9:ea:75:f5:7e:55:27:4f:63:
60:05:6c:e1:4c:54:ce:e1:09:36:e3:fb:0b:91:31:30:f8:bc:
c5:d4:8a:29:61:74:7b:bb:d6:ed:e5:3e:06:36:f4:c2:7b:6f:
d8:6a:5a:17:e1:d1:e5:74:2b:1d:53:01:18:b5:de:ec:a2:af:
e3:c2:4b:f9:9f:ed:b9:37:1d:91:3f:32:86:af:3c:33:c4:e4:
1c:1f:fc:77:b5:a2:e2:fe:6f:bb:5b:e9:bb:90:6d:36:9e:db:
d1:13:44:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALLuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTA3MDkwOTIyWhcNMjUwOTA5MDkwOTIyWjAYMRYw
FAYDVQQDEw02NmRjMTg0NS04OTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Gqti5iLvVXM5OLEJ+sj3/K0axTqXaJpcQFLgxfYuA1eoQ7Q64JvwkAO
xEypq4oq6qhEHOf/t2yQbdi3/1tcq//ew0c3pJj7fVzLAUEIGkfaG1A2OKWdRoGJ
vEe71n2DItGUfNH7xK3DptAi7Z3xqUATjch3saTBbS7WsTimKm0bTjm0vIqA/Tyg
4mROqLnd2+Fa6H0R+W/YPJcfl4TXjuahCEbu/TskAB9tBu970yGilPi2If7Qdc8/
XQfUzlSWyowqQ/8dcwJNe19Rao9WbZS9nJraK1y3vZLgulu7N9bItM+8wgBuMvbk
3iT4YIIoTvemq0/OhJ1p283TOXFrBQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB28
u3Y/dvJbSrJeNiTJqAF0VV0oMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMTBGRjNFQzZDRjgxMUVGOEJEMTIxQTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcpAMA0GCSqGSIb3DQEBCwUA
A4IBAQB3DQImfKI2cg8bIxajePLKoVia5y7HztR6+PLmIvVWiDT+EOH6O8gYU+yL
UMHYRroYz0vTX4EZMb/4OHa7F4CmC6FpRNKJRIgzqyXt+pXAamB+iRUOkvMTP/on
N0fLoOIFlROl29jhCHu8TLDhB/W3DbGwjE9bajc9tlPawvnKAomdkTYrToXaxjhF
lf+7M4QckF+VD1HAixrp6nX1flUnT2NgBWzhTFTO4Qk24/sLkTEw+LzF1IopYXR7
u9bt5T4GNvTCe2/YaloX4dHldCsdUwEYtd7soq/jwkv5n+25Nx2RPzKGrzwzxOQc
H/x3taLi/m+7W+m7kG02ntvRE0SX
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:51 2024 by rpki-client on console-fra.rpki-client.org