Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9AC89D2A7DD11EF9B86F3A0762E951A.roa
File: E9AC89D2A7DD11EF9B86F3A0762E951A.roa (raw, json)
Hash identifier: haa9w9FrERXmoTliKb4s8fX9ArkLsw8HIegy5I7AJig=
Subject key identifier: 5F:40:CD:5D:9D:8F:BE:E5:0D:D8:59:D4:89:02:23:A9:90:E2:91:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D709
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9AC89D2A7DD11EF9B86F3A0762E951A.roa
Signing time: Thu 21 Nov 2024 07:55:02 +0000
ROA not before: Thu 21 Nov 2024 07:54:58 +0000
ROA not after: Sat 04 Jan 2025 07:54:58 +0000
asID: 42831
IP address blocks: 45.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55049 (0xd709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 21 07:54:58 2024 GMT
Not After : Jan 4 07:54:58 2025 GMT
Subject: CN=673ee756-6736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:cc:2f:da:b3:d8:dd:f5:e2:2a:de:4a:9e:
f8:7c:c2:cc:2b:c2:af:47:16:fa:6a:ee:30:98:07:
89:bc:01:ea:9b:19:57:67:f1:87:a9:b8:68:cf:3c:
9f:1e:e4:c3:da:22:5d:36:ab:f3:81:0b:d7:73:8c:
c3:ad:4c:18:ba:b7:f9:a1:7b:68:84:20:da:36:f0:
7b:36:b6:cb:42:60:23:64:97:b3:39:b4:3c:e0:07:
a7:1d:db:56:7d:3d:89:79:81:f6:ac:bc:f7:07:91:
d2:c0:5c:c0:50:48:8f:54:82:95:a8:f0:68:af:6c:
bb:ff:8c:b6:4c:7a:70:e3:73:9b:fe:85:e6:21:b7:
d9:cc:e0:6a:0e:6d:15:9b:2b:83:07:aa:ec:8f:d3:
db:26:02:61:80:2e:a0:ac:88:f5:43:2b:fb:9c:49:
d8:63:34:27:9a:36:32:dc:af:fc:8f:88:32:b3:ee:
ab:2f:ca:92:1b:83:69:1e:23:32:07:32:5d:b8:27:
e9:dd:6a:59:4f:5f:43:78:d2:66:56:7f:2e:be:d4:
b2:11:20:c0:c2:da:67:4b:42:9e:09:36:05:25:8b:
c7:fc:66:22:89:a1:3a:3a:a7:56:d0:68:c6:ed:d2:
03:5c:01:de:ff:a0:87:9c:46:cb:30:48:45:a4:96:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:CD:5D:9D:8F:BE:E5:0D:D8:59:D4:89:02:23:A9:90:E2:91:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9AC89D2A7DD11EF9B86F3A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
14:41:52:18:96:15:9d:4c:5e:e2:8f:43:c8:64:2d:02:ab:93:
44:8e:f4:89:94:37:a3:d5:a8:36:c7:e7:95:40:40:6a:fb:fa:
31:31:1a:d1:94:dc:f1:bf:17:ca:5a:74:26:dc:ed:c0:7b:32:
dd:14:38:33:26:67:be:d4:82:49:42:bc:02:05:d9:68:e7:57:
5f:17:4e:c6:65:7f:31:b6:81:8f:e4:a8:e9:17:5b:5f:a9:ec:
7c:3b:ed:05:0f:09:ef:5f:9c:02:69:11:7f:8f:3c:d9:73:89:
28:b7:9e:76:de:ad:4d:d3:eb:fa:27:ce:f3:fd:1b:d6:02:5e:
f2:cf:e2:77:95:e8:ab:84:59:bc:4c:e4:0e:ed:44:a7:23:7c:
30:07:00:2a:37:2d:00:be:7d:aa:f4:cb:36:de:79:01:1d:ad:
3b:8b:a4:55:ce:57:0d:45:50:74:48:cf:58:8d:45:2f:88:cb:
5f:76:27:0c:6a:c3:99:f5:61:79:d4:46:2e:db:9e:69:71:26:
8f:a3:85:af:b2:8b:02:91:9b:b8:70:79:06:19:aa:eb:f4:e6:
9e:3b:f2:81:5e:45:b9:cf:61:ff:b7:ce:4c:53:66:e7:6c:81:
cf:b2:6e:33:29:b8:48:f6:ad:0b:26:14:d6:0b:9d:fc:02:77:
0c:4b:ad:19
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANcJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIxMDc1NDU4WhcNMjUwMTA0MDc1NDU4WjAYMRYw
FAYDVQQDEw02NzNlZTc1Ni02NzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm/TML9qz2N314ireSp74fMLMK8KvRxb6au4wmAeJvAHqmxlXZ/GHqbho
zzyfHuTD2iJdNqvzgQvXc4zDrUwYurf5oXtohCDaNvB7NrbLQmAjZJezObQ84Aen
HdtWfT2JeYH2rLz3B5HSwFzAUEiPVIKVqPBor2y7/4y2THpw43Ob/oXmIbfZzOBq
Dm0VmyuDB6rsj9PbJgJhgC6grIj1Qyv7nEnYYzQnmjYy3K/8j4gys+6rL8qSG4Np
HiMyBzJduCfp3WpZT19DeNJmVn8uvtSyESDAwtpnS0KeCTYFJYvH/GYiiaE6OqdW
0GjG7dIDXAHe/6CHnEbLMEhFpJbkMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF9A
zV2dj77lDdhZ1IkCI6mQ4pGyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOUFDODlEMkE3REQxMUVGOUI4NkYzQTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcZAMA0GCSqGSIb3DQEBCwUA
A4IBAQAUQVIYlhWdTF7ij0PIZC0Cq5NEjvSJlDej1ag2x+eVQEBq+/oxMRrRlNzx
vxfKWnQm3O3AezLdFDgzJme+1IJJQrwCBdlo51dfF07GZX8xtoGP5KjpF1tfqex8
O+0FDwnvX5wCaRF/jzzZc4kot5523q1N0+v6J87z/RvWAl7yz+J3leirhFm8TOQO
7USnI3wwBwAqNy0Avn2q9Ms23nkBHa07i6RVzlcNRVB0SM9YjUUviMtfdicMasOZ
9WF51EYu255pcSaPo4WvsosCkZu4cHkGGarr9OaeO/KBXkW5z2H/t85MU2bnbIHP
sm4zKbhI9q0LJhTWC538AncMS60Z
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:55 2024 by rpki-client on console-ams.rpki-client.org