Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F49E7C72A73511EFB677927A762E951A.roa
File: F49E7C72A73511EFB677927A762E951A.roa (raw, json)
Hash identifier: LlQiEMmLEnjp5Kgr7gPKspHaKyqBuxWotcMNMYHPM5I=
Subject key identifier: FE:3F:25:07:3E:A4:5A:CD:3D:77:EF:8C:99:AB:2C:9C:85:E2:8C:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F49E7C72A73511EFB677927A762E951A.roa
Signing time: Wed 20 Nov 2024 11:52:45 +0000
ROA not before: Wed 20 Nov 2024 11:52:41 +0000
ROA not after: Mon 02 Dec 2024 11:52:41 +0000
asID: 21859
IP address blocks: 45.196.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54771 (0xd5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:52:41 2024 GMT
Not After : Dec 2 11:52:41 2024 GMT
Subject: CN=673dcd8d-bd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:24:65:78:b5:58:6c:0b:16:41:84:41:1c:
a1:f7:91:24:dc:f8:5b:0e:9b:2b:df:84:65:d7:4c:
89:d7:00:e9:97:43:03:0d:9d:6f:08:63:ad:69:1a:
70:03:fa:5e:c0:05:a6:05:01:3f:1b:19:ad:1d:14:
10:8b:64:4a:1b:47:c7:df:4e:3e:89:74:fa:27:46:
ba:78:66:48:13:d3:38:c5:c9:11:0c:c0:a3:87:14:
81:73:32:29:4f:4b:89:14:c4:67:de:20:c8:e0:58:
af:9b:72:c0:fa:fd:d5:10:a7:71:54:b2:d6:28:52:
8e:ee:87:8d:8e:00:d4:a3:6a:ae:10:2f:e8:bd:86:
e4:77:5c:d2:c5:fe:1e:f0:1d:5a:23:69:7f:55:44:
ef:2c:8a:da:a1:93:b2:7b:d1:b4:e7:7a:9d:ab:fe:
db:59:64:21:c6:b3:64:2e:dd:62:9f:42:eb:ee:05:
cd:8a:02:0d:ef:23:ae:c9:e2:fc:4e:32:c1:a5:99:
65:a3:a0:64:c3:32:72:da:b1:5b:d3:00:13:82:83:
7f:7a:20:57:e7:46:cd:0f:cd:67:b9:85:42:a7:87:
a4:4a:6a:db:f3:82:01:50:69:6e:cd:26:9c:96:dd:
69:2c:32:1d:7c:f9:39:5d:7a:03:10:57:eb:0f:9d:
ce:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3F:25:07:3E:A4:5A:CD:3D:77:EF:8C:99:AB:2C:9C:85:E2:8C:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F49E7C72A73511EFB677927A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0/23
Signature Algorithm: sha256WithRSAEncryption
84:c1:6a:42:f1:6b:cf:13:68:86:8c:d4:2b:86:1f:e7:21:75:
5b:df:11:d5:ee:98:73:fb:ad:28:8f:ea:bc:48:db:c7:b2:56:
c5:fc:81:d9:fe:22:b8:f8:99:a9:e9:e4:ee:0b:ec:9d:b9:ba:
b3:dc:c0:c9:9d:3a:b9:60:6c:1d:94:13:25:67:d8:d7:2d:6c:
23:63:de:69:6a:5a:22:f0:22:f8:93:86:4d:2f:85:c1:66:2a:
c2:df:2f:f1:88:c3:13:a8:39:67:92:30:c5:4f:3d:75:51:78:
52:f6:76:df:c7:ab:c7:ed:42:76:d3:8e:42:e6:62:d1:e1:48:
e5:81:2e:d1:b5:79:21:67:83:c9:90:e4:12:7d:04:16:73:64:
01:46:72:91:87:26:0a:80:e6:06:c5:23:60:86:e8:40:f6:ad:
73:de:8e:db:26:48:44:9b:0a:24:e8:6a:08:b8:82:07:d1:dd:
2f:8c:90:44:ad:84:11:91:49:42:27:0e:e2:22:8e:8b:76:49:
eb:21:ec:34:1e:eb:b7:c8:0f:41:5f:33:aa:85:8c:9f:bf:72:
2d:b9:7f:e5:ec:c7:fc:74:e0:9c:77:6c:df:f4:bc:3a:f4:bb:
60:7a:38:ed:30:73:ac:3d:8f:41:e1:09:ff:e7:85:39:3c:ee:
24:d0:86:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANXzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMTE1MjQxWhcNMjQxMjAyMTE1MjQxWjAYMRYw
FAYDVQQDEw02NzNkY2Q4ZC1iZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2KQkZXi1WGwLFkGEQRyh95Ek3PhbDpsr34Rl10yJ1wDpl0MDDZ1vCGOt
aRpwA/pewAWmBQE/GxmtHRQQi2RKG0fH304+iXT6J0a6eGZIE9M4xckRDMCjhxSB
czIpT0uJFMRn3iDI4Fivm3LA+v3VEKdxVLLWKFKO7oeNjgDUo2quEC/ovYbkd1zS
xf4e8B1aI2l/VUTvLIraoZOye9G053qdq/7bWWQhxrNkLt1in0Lr7gXNigIN7yOu
yeL8TjLBpZllo6BkwzJy2rFb0wATgoN/eiBX50bND81nuYVCp4ekSmrb84IBUGlu
zSaclt1pLDIdfPk5XXoDEFfrD53O+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP4/
JQc+pFrNPXfvjJmrLJyF4oyWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNDlFN0M3MkE3MzUxMUVGQjY3NzkyN0E3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcSIMA0GCSqGSIb3DQEBCwUA
A4IBAQCEwWpC8WvPE2iGjNQrhh/nIXVb3xHV7phz+60oj+q8SNvHslbF/IHZ/iK4
+Jmp6eTuC+ydubqz3MDJnTq5YGwdlBMlZ9jXLWwjY95paloi8CL4k4ZNL4XBZirC
3y/xiMMTqDlnkjDFTz11UXhS9nbfx6vH7UJ2045C5mLR4UjlgS7RtXkhZ4PJkOQS
fQQWc2QBRnKRhyYKgOYGxSNghuhA9q1z3o7bJkhEmwok6GoIuIIH0d0vjJBErYQR
kUlCJw7iIo6LdknrIew0Huu3yA9BXzOqhYyfv3ItuX/l7Mf8dOCcd2zf9Lw69Ltg
ejjtMHOsPY9B4Qn/54U5PO4k0IaI
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:54 2024 by rpki-client on console-fra.rpki-client.org