Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC8BC08F0BB11EEA179DB4C775412E6.roa
File: EEC8BC08F0BB11EEA179DB4C775412E6.roa (raw, json)
Hash identifier: 0k32grfK6cIVg0+EssiiCLNEVeMK6n41WbS4fJ0eTag=
Subject key identifier: 06:4B:BD:C1:BF:75:D6:2C:D0:A9:5E:51:C8:12:C8:30:07:A3:E5:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 812A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC8BC08F0BB11EEA179DB4C775412E6.roa
Signing time: Tue 02 Apr 2024 06:40:45 +0000
ROA not before: Tue 02 Apr 2024 06:40:42 +0000
ROA not after: Mon 29 Apr 2024 06:40:42 +0000
asID: 139646
IP address blocks: 45.201.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 06:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33066 (0x812a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 06:40:42 2024 GMT
Not After : Apr 29 06:40:42 2024 GMT
Subject: CN=660ba86d-3626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:a8:c9:c5:aa:22:63:3b:f7:45:1f:a6:fc:
cf:91:b5:01:ff:b3:70:d4:4d:6a:e6:47:3c:7d:ae:
6e:78:10:88:61:f6:89:d8:d4:f4:58:29:68:24:4e:
ab:20:19:29:b3:5f:a9:1e:12:cd:cf:65:c9:f5:8f:
e8:8f:df:6d:53:78:28:cd:ba:bd:80:8b:9e:68:2a:
eb:ea:3d:7f:de:3b:80:d4:36:f1:60:98:02:08:4d:
e4:a5:9a:29:ba:d1:7f:50:e1:4f:15:ac:9d:2c:5f:
a6:5a:7b:b3:49:e7:ca:a8:9f:09:b3:b6:85:41:f3:
4f:c4:82:e1:f8:82:f7:6c:d0:d6:8c:db:fb:57:6d:
24:fa:97:17:49:aa:91:9a:71:65:c9:e9:b8:6c:03:
4d:4b:e0:9d:f7:20:49:04:cd:9d:65:68:e5:f5:67:
f5:1c:94:75:09:59:08:65:0e:ff:2d:6f:2a:e2:3a:
8f:94:cf:c5:4e:13:e5:8b:1c:7a:e5:bf:e7:8e:2c:
16:a8:6a:12:7f:d4:31:f0:7a:39:f1:16:7c:ac:e0:
08:6d:51:e4:6e:d7:50:69:31:3b:59:d7:8f:48:37:
71:a4:3a:59:88:cc:43:bd:0b:8a:0c:bd:7d:89:da:
78:8d:67:69:70:88:0a:0f:94:76:fb:c7:ca:c0:8b:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:BD:C1:BF:75:D6:2C:D0:A9:5E:51:C8:12:C8:30:07:A3:E5:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEC8BC08F0BB11EEA179DB4C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.218.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:94:f3:af:2e:12:f9:e2:1f:4e:27:b0:73:62:f4:68:54:d0:
91:8d:47:bb:a6:dc:07:ac:aa:77:d5:78:22:ca:f4:60:cc:92:
bc:bc:04:f6:7f:84:b0:dc:b1:48:e6:c7:c5:82:84:f3:58:ff:
8b:e9:45:48:13:11:c8:29:3f:66:92:89:dd:13:e1:34:ae:0c:
e9:54:be:9f:8e:3f:a1:c9:4d:d0:bb:4c:23:c7:8e:af:63:68:
ca:e2:2c:93:2f:d3:da:43:8a:5c:3a:cd:0a:1b:2a:fe:6c:35:
57:98:98:b8:ef:8a:b5:2e:d9:a7:01:12:65:f4:9a:e8:5b:34:
ca:a2:ab:d7:9e:ca:a5:4e:7f:f1:f5:a6:b5:51:c0:b4:71:ba:
3f:64:c2:a3:ef:51:96:62:f6:59:b7:89:5c:d0:87:34:3a:28:
c5:12:8f:62:4d:87:21:5f:a7:96:3b:de:52:91:57:1e:7f:f4:
89:0d:9f:48:cc:8f:ad:cc:d8:1b:ba:74:0b:25:fb:bf:9c:c8:
02:0e:76:22:f6:ee:47:3c:4f:27:f5:cf:82:99:cc:e3:e8:b9:
63:89:43:d9:f3:8f:05:ef:06:9d:36:2f:c2:9f:9e:69:06:6c:
fb:38:ac:48:e0:6a:df:d8:27:cc:8b:e8:24:04:d2:4f:fc:8e:
b7:6f:c6:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIEqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDAyMDY0MDQyWhcNMjQwNDI5MDY0MDQyWjAYMRYw
FAYDVQQDEw02NjBiYTg2ZC0zNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoK6oycWqImM790UfpvzPkbUB/7Nw1E1q5kc8fa5ueBCIYfaJ2NT0WClo
JE6rIBkps1+pHhLNz2XJ9Y/oj99tU3gozbq9gIueaCrr6j1/3juA1DbxYJgCCE3k
pZoputF/UOFPFaydLF+mWnuzSefKqJ8Js7aFQfNPxILh+IL3bNDWjNv7V20k+pcX
SaqRmnFlyem4bANNS+Cd9yBJBM2dZWjl9Wf1HJR1CVkIZQ7/LW8q4jqPlM/FThPl
ixx65b/njiwWqGoSf9Qx8Ho58RZ8rOAIbVHkbtdQaTE7WdePSDdxpDpZiMxDvQuK
DL19idp4jWdpcIgKD5R2+8fKwIs95QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAZL
vcG/ddYs0KleUcgSyDAHo+WtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRUM4QkMwOEYwQkIxMUVFQTE3OURCNEM3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcnaMA0GCSqGSIb3DQEBCwUA
A4IBAQA9lPOvLhL54h9OJ7BzYvRoVNCRjUe7ptwHrKp31XgiyvRgzJK8vAT2f4Sw
3LFI5sfFgoTzWP+L6UVIExHIKT9mkondE+E0rgzpVL6fjj+hyU3Qu0wjx46vY2jK
4iyTL9PaQ4pcOs0KGyr+bDVXmJi474q1LtmnARJl9JroWzTKoqvXnsqlTn/x9aa1
UcC0cbo/ZMKj71GWYvZZt4lc0Ic0OijFEo9iTYchX6eWO95SkVcef/SJDZ9IzI+t
zNgbunQLJfu/nMgCDnYi9u5HPE8n9c+Cmczj6LljiUPZ848F7wadNi/Cn55pBmz7
OKxI4Grf2CfMi+gkBNJP/I63b8Y0
-----END CERTIFICATE-----
Generated at Mon Apr 29 05:25:44 2024 by rpki-client on console-ams.rpki-client.org