Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB92DCDCA73411EFAD073576762E951A.roa
File: EB92DCDCA73411EFAD073576762E951A.roa (raw, json)
Hash identifier: E1OUgh0b+Ewifmtjpy8dcu7F2RO6q8xG9N1beAfwW48=
Subject key identifier: E1:B5:2B:CB:7D:B3:C0:48:10:6F:8E:BA:33:3B:0F:C3:81:10:84:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB92DCDCA73411EFAD073576762E951A.roa
Signing time: Wed 20 Nov 2024 11:45:20 +0000
ROA not before: Wed 20 Nov 2024 11:45:16 +0000
ROA not after: Mon 02 Dec 2024 11:45:16 +0000
asID: 39600
IP address blocks: 45.203.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54761 (0xd5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:45:16 2024 GMT
Not After : Dec 2 11:45:16 2024 GMT
Subject: CN=673dcbd0-5b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:dc:c1:e8:12:6f:57:6c:dc:b3:6f:18:df:
07:79:dc:05:45:5b:37:f4:0a:12:83:70:02:9b:16:
94:10:10:84:eb:a6:fc:8c:31:72:0a:e5:cc:e8:31:
a5:7e:10:7f:9a:a2:c4:3e:69:87:ed:d1:01:dd:50:
cc:06:79:ae:65:15:7e:1b:89:d7:81:06:51:79:de:
da:ac:21:94:6b:7c:6e:91:4c:12:bb:78:da:0b:f6:
e9:fd:4f:16:4a:37:2a:02:d9:74:fa:88:0c:6c:f1:
59:3f:8a:8a:42:f7:d2:54:c4:6b:67:23:9d:52:ea:
6a:e7:42:a4:58:79:1c:a1:96:da:f6:4e:14:6b:cd:
13:76:c9:e3:48:d9:ac:99:34:b4:8b:84:64:03:45:
19:70:29:34:f4:92:b9:15:c0:03:07:f5:d2:5c:78:
58:2e:9b:86:55:09:b9:63:58:c8:2f:69:77:0b:ad:
23:ef:10:68:5c:89:c4:a4:0d:aa:4f:66:26:32:1a:
a2:25:88:bf:71:6d:48:fa:ca:62:15:aa:ea:54:80:
13:04:a3:89:0f:05:27:bd:9c:90:82:9b:c7:e0:02:
8a:76:90:4d:5a:bc:99:76:1b:6b:82:03:e8:1f:17:
26:47:fb:9a:ae:ae:1a:bf:ff:4f:6f:2b:14:8d:96:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:2B:CB:7D:B3:C0:48:10:6F:8E:BA:33:3B:0F:C3:81:10:84:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB92DCDCA73411EFAD073576762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:20:84:be:1e:e0:c5:16:a0:96:e1:50:4f:43:d5:66:d0:e4:
f3:a4:57:5f:f2:84:46:97:09:9b:4b:8b:04:a3:86:2e:05:49:
ed:f4:80:15:0d:8c:8e:54:cd:c5:12:9b:4e:9a:92:fe:78:41:
45:ea:f2:98:f3:48:7c:0e:55:83:14:ff:6f:6f:ae:1b:80:4c:
93:79:43:d9:14:fb:32:b2:b8:90:ba:dd:b5:1f:85:d4:1c:76:
b5:39:7f:0d:6c:11:99:6a:88:a1:97:0d:c4:1f:b4:48:c2:78:
d4:92:c6:3b:50:ca:eb:cc:8f:3b:de:9a:ca:61:e7:59:15:93:
e5:1f:82:cc:ed:8b:b9:04:e6:29:0e:a0:7e:98:36:31:ef:86:
9f:78:d6:b8:5d:86:f8:c9:33:c4:2c:3b:25:05:d3:55:69:6f:
b3:a4:ed:46:ab:85:75:ec:e1:d0:71:b1:ad:e4:35:fb:52:ae:
4f:4e:19:b0:f7:73:5a:dc:02:58:78:0e:69:1e:d8:5a:11:49:
64:94:aa:3b:f1:d7:c8:f7:ce:ce:f6:17:1c:dc:88:05:4c:db:
fb:ea:06:37:e4:18:77:f9:11:71:40:8b:99:c9:93:75:af:89:
5a:f3:64:90:08:5e:8a:6c:a4:b8:82:66:ef:0f:81:78:05:a4:
77:8c:63:ca
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANXpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMTE0NTE2WhcNMjQxMjAyMTE0NTE2WjAYMRYw
FAYDVQQDEw02NzNkY2JkMC01YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmG/cwegSb1ds3LNvGN8HedwFRVs39AoSg3ACmxaUEBCE66b8jDFyCuXM
6DGlfhB/mqLEPmmH7dEB3VDMBnmuZRV+G4nXgQZRed7arCGUa3xukUwSu3jaC/bp
/U8WSjcqAtl0+ogMbPFZP4qKQvfSVMRrZyOdUupq50KkWHkcoZba9k4Ua80Tdsnj
SNmsmTS0i4RkA0UZcCk09JK5FcADB/XSXHhYLpuGVQm5Y1jIL2l3C60j7xBoXInE
pA2qT2YmMhqiJYi/cW1I+spiFarqVIATBKOJDwUnvZyQgpvH4AKKdpBNWryZdhtr
ggPoHxcmR/uarq4av/9PbysUjZZU9wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOG1
K8t9s8BIEG+OujM7D8OBEIQPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjkyRENEQ0E3MzQxMUVGQUQwNzM1NzY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcs8MA0GCSqGSIb3DQEBCwUA
A4IBAQAuIIS+HuDFFqCW4VBPQ9Vm0OTzpFdf8oRGlwmbS4sEo4YuBUnt9IAVDYyO
VM3FEptOmpL+eEFF6vKY80h8DlWDFP9vb64bgEyTeUPZFPsysriQut21H4XUHHa1
OX8NbBGZaoihlw3EH7RIwnjUksY7UMrrzI873prKYedZFZPlH4LM7Yu5BOYpDqB+
mDYx74afeNa4XYb4yTPELDslBdNVaW+zpO1Gq4V17OHQcbGt5DX7Uq5PThmw93Na
3AJYeA5pHthaEUlklKo78dfI987O9hcc3IgFTNv76gY35Bh3+RFxQIuZyZN1r4la
82SQCF6KbKS4gmbvD4F4BaR3jGPK
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:55 2024 by rpki-client on console-ams.rpki-client.org