Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED39FA5E735211EF82757251762E951A.roa
File: ED39FA5E735211EF82757251762E951A.roa (raw, json)
Hash identifier: 7lqZtq0WtYtPgbVcZ3/LoFytxE+a74dTJR86IpXGYjY=
Subject key identifier: 74:7D:9F:07:EB:4D:B8:F7:B1:47:C2:32:EA:EF:C0:C0:74:0B:81:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B67C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED39FA5E735211EF82757251762E951A.roa
Signing time: Sun 15 Sep 2024 11:09:08 +0000
ROA not before: Sun 15 Sep 2024 11:09:04 +0000
ROA not after: Fri 08 Aug 2025 11:09:04 +0000
asID: 133861
IP address blocks: 45.204.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46716 (0xb67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 11:09:04 2024 GMT
Not After : Aug 8 11:09:04 2025 GMT
Subject: CN=66e6c054-d421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:7a:13:63:a0:35:60:f4:3f:30:4e:f4:d4:
81:9b:1a:27:5f:2c:4b:4f:cd:dc:b4:57:c0:33:9c:
a1:0a:0d:5d:4c:59:86:8c:21:bb:38:ac:1b:10:f0:
24:d6:36:c0:73:e3:ad:87:ac:f7:c0:b1:76:4a:85:
b9:0f:03:35:f9:82:5a:02:9e:c2:05:6e:03:44:e3:
4c:e7:00:f0:da:13:63:3f:dd:89:6a:ac:26:53:6d:
c7:8b:b6:7b:25:2d:71:ca:b3:bb:70:36:7d:1b:b3:
2d:09:66:9d:8b:9a:c0:af:c2:39:c7:84:ef:b8:8d:
b8:29:3b:55:dd:b8:9a:2e:e1:87:ba:f1:3f:a2:21:
17:27:e9:fa:3a:cf:60:fd:3e:03:eb:f8:2d:3f:7c:
85:fa:60:ca:48:46:f6:e7:d5:1c:b3:e4:79:74:9c:
dd:5c:ea:8f:f4:20:4d:24:5a:a2:13:58:3e:7d:8a:
97:c5:35:31:39:4e:8a:9b:75:c3:80:eb:ff:7e:d3:
dd:0d:c1:9f:2a:fa:f2:aa:91:b3:db:83:44:c2:24:
cc:cf:24:20:69:cd:ec:96:a0:47:26:c2:69:f2:44:
ea:05:82:f9:33:15:7f:4f:0e:ee:b3:69:d1:b3:79:
f6:fb:88:11:86:cb:7d:40:2b:f1:17:cf:4a:7d:cd:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:9F:07:EB:4D:B8:F7:B1:47:C2:32:EA:EF:C0:C0:74:0B:81:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED39FA5E735211EF82757251762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.2.0/23
Signature Algorithm: sha256WithRSAEncryption
31:96:02:c9:86:86:6e:2f:9a:12:f1:9c:22:f7:70:47:e8:f1:
2a:ca:ba:74:d3:64:5b:07:53:dd:a1:bc:b3:9e:69:48:24:72:
a0:bc:2e:65:f4:86:ef:2d:bf:e4:af:2a:49:c8:c9:10:51:d4:
4d:c2:0c:ad:1a:38:20:7b:5c:3e:48:0d:f3:c3:ab:57:fb:2f:
d1:7d:48:71:d6:f8:11:73:4b:76:aa:43:e8:91:89:f2:21:0c:
0e:3a:3f:9c:2f:99:3b:d0:27:f0:87:4b:e0:5f:2c:2e:81:86:
c8:40:0e:a1:ab:55:4e:59:65:7a:b4:50:36:94:63:4f:a8:ad:
e8:af:f6:59:3b:17:de:eb:d9:d4:af:a8:ba:8d:94:0f:c0:06:
df:ee:f0:f4:7f:a6:6a:df:28:97:72:95:6b:8f:a2:e9:70:9b:
cb:70:9d:fd:e7:4e:7f:61:d7:b8:89:1d:32:80:11:8a:b8:cd:
79:f6:e6:06:72:1f:ed:63:76:50:69:77:77:29:51:8f:13:0d:
71:b4:2f:f5:b7:40:ca:8f:32:36:b0:13:1e:db:24:c0:cf:fa:
56:40:0e:e8:46:c8:4c:4d:83:ff:28:ab:e1:4f:e7:d4:3d:e1:
88:f5:c5:7c:ea:25:58:3b:ef:33:3e:47:6a:a4:eb:a1:08:75:
a4:8b:72:24
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALZ8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE1MTEwOTA0WhcNMjUwODA4MTEwOTA0WjAYMRYw
FAYDVQQDEw02NmU2YzA1NC1kNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzZF6E2OgNWD0PzBO9NSBmxonXyxLT83ctFfAM5yhCg1dTFmGjCG7OKwb
EPAk1jbAc+Oth6z3wLF2SoW5DwM1+YJaAp7CBW4DRONM5wDw2hNjP92JaqwmU23H
i7Z7JS1xyrO7cDZ9G7MtCWadi5rAr8I5x4TvuI24KTtV3biaLuGHuvE/oiEXJ+n6
Os9g/T4D6/gtP3yF+mDKSEb259Ucs+R5dJzdXOqP9CBNJFqiE1g+fYqXxTUxOU6K
m3XDgOv/ftPdDcGfKvryqpGz24NEwiTMzyQgac3slqBHJsJp8kTqBYL5MxV/Tw7u
s2nRs3n2+4gRhst9QCvxF89Kfc3UVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHR9
nwfrTbj3sUfCMurvwMB0C4E1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRDM5RkE1RTczNTIxMUVGODI3NTcyNTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcwCMA0GCSqGSIb3DQEBCwUA
A4IBAQAxlgLJhoZuL5oS8Zwi93BH6PEqyrp002RbB1PdobyznmlIJHKgvC5l9Ibv
Lb/krypJyMkQUdRNwgytGjgge1w+SA3zw6tX+y/RfUhx1vgRc0t2qkPokYnyIQwO
Oj+cL5k70Cfwh0vgXywugYbIQA6hq1VOWWV6tFA2lGNPqK3or/ZZOxfe69nUr6i6
jZQPwAbf7vD0f6Zq3yiXcpVrj6LpcJvLcJ39505/Yde4iR0ygBGKuM159uYGch/t
Y3ZQaXd3KVGPEw1xtC/1t0DKjzI2sBMe2yTAz/pWQA7oRshMTYP/KKvhT+fUPeGI
9cV86iVYO+8zPkdqpOuhCHWki3Ik
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org