Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC5163FC992C11EF9921AC74762E951A.roa
File: EC5163FC992C11EF9921AC74762E951A.roa (raw, json)
Hash identifier: zr3BhI8qhIMBzQNa5OU25jjfYJWQq84cRf0JLyoEZbU=
Subject key identifier: FC:83:FA:78:11:1F:3C:F2:B6:C5:7C:76:77:1E:22:87:47:7F:7C:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CC82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC5163FC992C11EF9921AC74762E951A.roa
Signing time: Sat 02 Nov 2024 15:12:49 +0000
ROA not before: Sat 02 Nov 2024 15:12:45 +0000
ROA not after: Wed 05 Nov 2025 15:12:45 +0000
asID: 40065
IP address blocks: 45.202.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52354 (0xcc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 2 15:12:45 2024 GMT
Not After : Nov 5 15:12:45 2025 GMT
Subject: CN=67264171-0e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:0b:da:e2:96:17:38:32:e6:39:68:41:c9:
30:eb:69:cb:ab:66:68:e9:55:5e:34:ff:32:e5:e0:
1a:60:c1:df:dd:c9:f2:5d:97:ee:73:5c:cc:c2:09:
a5:8f:91:4d:25:32:79:2f:b3:35:93:64:9e:4d:84:
8c:a6:1a:5c:07:59:8f:57:b3:eb:83:60:29:6b:35:
a3:b2:09:4f:30:ea:14:62:c4:df:32:ae:86:df:1d:
3d:3a:e1:e3:76:38:b7:0b:3d:90:66:b8:3d:82:84:
8d:ce:b5:bb:b0:39:19:3f:77:a6:b1:1d:af:7b:8f:
f4:62:88:6e:45:10:7b:1b:91:b7:89:87:e5:ca:41:
ec:e2:6b:e2:8b:81:7f:69:5a:e2:99:22:db:d9:52:
f3:9c:a3:4a:39:73:18:62:f0:fb:42:a3:e1:bd:d7:
dc:15:f2:b5:53:e3:77:6f:73:fd:ec:b0:f5:9b:78:
63:89:2c:0d:a7:ed:0f:8e:36:23:e6:a5:57:ec:cd:
b6:a9:6c:76:1f:b5:99:ca:c8:44:22:b0:a0:50:7f:
3c:d4:44:13:2a:77:60:5c:e0:06:7e:47:0f:ae:5f:
71:48:b5:5c:69:06:c3:34:c2:b3:36:a6:18:37:88:
00:11:20:3d:e7:60:ca:1f:3e:6f:cc:f2:c3:fd:98:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:FA:78:11:1F:3C:F2:B6:C5:7C:76:77:1E:22:87:47:7F:7C:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC5163FC992C11EF9921AC74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.214.0/23
Signature Algorithm: sha256WithRSAEncryption
05:4f:af:70:d9:d8:55:7c:c8:cf:89:a0:72:5d:56:72:d8:37:
24:c1:10:8f:49:47:d7:2c:7a:cd:66:96:c5:8a:8a:d4:7a:da:
9a:10:fc:5e:77:3e:80:99:e1:b2:82:86:ca:5f:1c:19:bc:52:
c9:62:d1:bb:79:5e:4e:cb:32:9c:9f:ae:84:23:9b:1e:d9:41:
4b:cd:ce:16:c7:dc:9f:ba:f7:24:58:1f:1a:86:58:6b:35:a8:
c7:4e:57:a8:97:2e:71:68:6e:77:70:c1:b2:c6:f6:2f:42:fe:
87:10:f7:51:b6:64:59:39:7f:87:e6:b1:b7:9d:33:be:7b:2f:
e7:65:07:8c:80:81:d0:bd:5c:c7:c2:3c:d4:e2:7e:48:bb:32:
f9:17:7c:fa:90:1a:fc:ef:28:2c:3f:41:9e:46:dc:f4:68:b6:
e7:50:e6:5a:13:1c:68:32:a9:26:1e:8a:6a:8c:79:07:c7:40:
63:7b:c2:5c:f9:ee:fa:e0:f2:b2:89:f0:d4:81:ec:02:7e:21:
a9:08:7a:86:4c:08:21:ac:47:7c:7a:58:ac:76:f2:c8:ea:b1:
70:c0:1a:28:9b:1d:35:66:19:ad:7e:f9:2d:14:fd:1e:da:2a:
7e:48:e4:79:c8:9f:a9:17:02:72:e1:c6:57:ed:5b:7f:33:cd:
b2:37:1c:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMyCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTAyMTUxMjQ1WhcNMjUxMTA1MTUxMjQ1WjAYMRYw
FAYDVQQDEw02NzI2NDE3MS0wZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvw0L2uKWFzgy5jloQckw62nLq2Zo6VVeNP8y5eAaYMHf3cnyXZfuc1zM
wgmlj5FNJTJ5L7M1k2SeTYSMphpcB1mPV7Prg2ApazWjsglPMOoUYsTfMq6G3x09
OuHjdji3Cz2QZrg9goSNzrW7sDkZP3emsR2ve4/0YohuRRB7G5G3iYflykHs4mvi
i4F/aVrimSLb2VLznKNKOXMYYvD7QqPhvdfcFfK1U+N3b3P97LD1m3hjiSwNp+0P
jjYj5qVX7M22qWx2H7WZyshEIrCgUH881EQTKndgXOAGfkcPrl9xSLVcaQbDNMKz
NqYYN4gAESA952DKHz5vzPLD/ZiK9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPyD
+ngRHzzytsV8dnceIodHf3x9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzUxNjNGQzk5MkMxMUVGOTkyMUFDNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcrWMA0GCSqGSIb3DQEBCwUA
A4IBAQAFT69w2dhVfMjPiaByXVZy2DckwRCPSUfXLHrNZpbFiorUetqaEPxedz6A
meGygobKXxwZvFLJYtG7eV5OyzKcn66EI5se2UFLzc4Wx9yfuvckWB8ahlhrNajH
Tleoly5xaG53cMGyxvYvQv6HEPdRtmRZOX+H5rG3nTO+ey/nZQeMgIHQvVzHwjzU
4n5IuzL5F3z6kBr87ygsP0GeRtz0aLbnUOZaExxoMqkmHopqjHkHx0Bje8Jc+e76
4PKyifDUgewCfiGpCHqGTAghrEd8elisdvLI6rFwwBoomx01ZhmtfvktFP0e2ip+
SOR5yJ+pFwJy4cZX7Vt/M82yNxxa
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:55 2024 by rpki-client on console-ams.rpki-client.org