Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8E593DEA73F11EF8DE968B9762E951A.roa
File: E8E593DEA73F11EF8DE968B9762E951A.roa (raw, json)
Hash identifier: 8K8V8C0HzjCwY39ofCi6498SgGNy0mfIYWIF+Na2bFw=
Subject key identifier: 42:B9:64:F1:2D:01:0C:DD:B8:36:58:58:8E:11:F0:D6:06:28:23:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D62F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8E593DEA73F11EF8DE968B9762E951A.roa
Signing time: Wed 20 Nov 2024 13:04:00 +0000
ROA not before: Wed 20 Nov 2024 13:03:57 +0000
ROA not after: Sat 30 Nov 2024 13:03:57 +0000
asID: 44559
IP address blocks: 45.192.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54831 (0xd62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:03:57 2024 GMT
Not After : Nov 30 13:03:57 2024 GMT
Subject: CN=673dde40-57c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:e3:57:f9:77:32:63:42:48:cb:ce:bf:4d:
2e:82:2c:63:b9:9c:ab:9c:b3:1e:4a:59:cf:25:df:
ac:6c:8d:27:31:fc:58:33:27:53:74:4a:10:ac:cd:
78:9d:e8:1b:9a:f1:62:6b:38:4c:65:b0:3b:05:b3:
1b:9b:cd:25:09:87:b6:87:32:be:33:c5:02:be:84:
aa:d6:31:86:2e:77:38:3a:dc:1d:23:cd:2f:38:20:
6e:b1:ca:1b:48:54:bf:a4:4e:79:03:72:e3:0c:79:
a6:fd:de:fb:7d:c2:91:61:2c:b1:c2:8c:ad:4b:d7:
bf:fa:0d:85:28:62:07:a7:7d:21:05:51:c9:78:64:
5e:06:4f:77:58:02:86:5d:6f:ae:bf:7d:fa:62:b6:
e8:e4:69:70:75:dc:ce:0d:f6:f6:7f:a9:18:b8:40:
13:2f:f2:7a:4b:87:70:f3:59:a1:70:ff:dc:fd:fd:
d8:26:bf:b7:19:3a:78:8e:a1:2e:86:44:31:21:db:
77:64:f8:ba:11:8c:96:c3:42:46:cd:d5:4b:ec:7a:
17:f6:57:6d:ce:11:92:d5:75:14:17:29:01:f3:0f:
59:3c:d3:d1:8c:fd:35:ec:f3:7b:b0:74:15:ee:70:
cb:1e:da:d6:eb:6e:63:f6:a6:ad:c1:74:0b:ce:02:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:64:F1:2D:01:0C:DD:B8:36:58:58:8E:11:F0:D6:06:28:23:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8E593DEA73F11EF8DE968B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a6:88:cf:fb:48:dc:82:80:94:20:57:e6:6d:28:f6:16:02:
b0:39:e8:45:1d:8f:71:57:b7:c1:4b:16:e1:56:6e:ef:d8:bd:
c8:8f:41:51:e1:ac:18:40:44:70:f3:32:a7:57:5d:06:40:b8:
b0:56:49:60:74:3d:fa:69:ac:de:f1:1c:62:44:5c:32:e4:33:
5c:39:33:a0:1a:dc:0c:b9:ac:fa:c2:b9:6e:1a:8d:04:ae:09:
b0:4d:d0:bf:b1:c2:b8:e0:07:3f:91:cb:33:43:c1:06:40:57:
76:9a:61:5b:1a:af:7b:a3:61:ef:83:84:72:f7:3d:74:c7:bf:
d3:39:71:8c:ee:a9:13:ca:80:80:c7:81:a9:e9:2f:03:0d:9e:
e1:90:4a:07:61:56:a7:4a:cf:7c:6c:48:52:b1:db:10:41:fc:
f5:76:f6:f8:cd:ea:9a:82:15:1e:82:23:cf:a9:b9:3a:d4:c2:
ae:3c:36:da:64:2d:ef:39:ce:92:7f:db:cb:bd:ac:35:85:55:
e3:4b:83:72:82:a8:62:26:6d:f5:46:30:46:16:ec:9d:86:ef:
15:2e:ec:96:73:5a:46:a8:ce:7e:94:8f:21:87:cf:be:03:2a:
c5:37:bd:25:6a:34:5f:1b:cf:3a:0d:ec:ae:90:ac:02:78:43:
77:c2:15:e4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANYvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMTMwMzU3WhcNMjQxMTMwMTMwMzU3WjAYMRYw
FAYDVQQDEw02NzNkZGU0MC01N2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx/DjV/l3MmNCSMvOv00ugixjuZyrnLMeSlnPJd+sbI0nMfxYMydTdEoQ
rM14negbmvFiazhMZbA7BbMbm80lCYe2hzK+M8UCvoSq1jGGLnc4OtwdI80vOCBu
scobSFS/pE55A3LjDHmm/d77fcKRYSyxwoytS9e/+g2FKGIHp30hBVHJeGReBk93
WAKGXW+uv336Yrbo5GlwddzODfb2f6kYuEATL/J6S4dw81mhcP/c/f3YJr+3GTp4
jqEuhkQxIdt3ZPi6EYyWw0JGzdVL7HoX9ldtzhGS1XUUFykB8w9ZPNPRjP017PN7
sHQV7nDLHtrW625j9qatwXQLzgKXPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEK5
ZPEtAQzduDZYWI4R8NYGKCNXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOEU1OTNERUE3M0YxMUVGOERFOTY4Qjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcA0MA0GCSqGSIb3DQEBCwUA
A4IBAQAMpojP+0jcgoCUIFfmbSj2FgKwOehFHY9xV7fBSxbhVm7v2L3Ij0FR4awY
QERw8zKnV10GQLiwVklgdD36aaze8RxiRFwy5DNcOTOgGtwMuaz6wrluGo0Ergmw
TdC/scK44Ac/kcszQ8EGQFd2mmFbGq97o2Hvg4Ry9z10x7/TOXGM7qkTyoCAx4Gp
6S8DDZ7hkEoHYVanSs98bEhSsdsQQfz1dvb4zeqaghUegiPPqbk61MKuPDbaZC3v
Oc6Sf9vLvaw1hVXjS4NygqhiJm31RjBGFuydhu8VLuyWc1pGqM5+lI8hh8++AyrF
N70lajRfG886DeyukKwCeEN3whXk
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org