Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6A5FCCA25C11EF8A5D237D762E951A.roa
File: FB6A5FCCA25C11EF8A5D237D762E951A.roa (raw, json)
Hash identifier: iZIx9f4egukjVFq3aLUQwZdREAOXmdjE4S60BC+m/IA=
Subject key identifier: C7:C5:30:3E:4A:58:C4:F9:49:98:A1:5B:EF:53:EA:AA:D5:3F:A3:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D277
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6A5FCCA25C11EF8A5D237D762E951A.roa
Signing time: Thu 14 Nov 2024 07:49:31 +0000
ROA not before: Thu 14 Nov 2024 07:49:27 +0000
ROA not after: Sat 14 Dec 2024 07:49:27 +0000
asID: 6079
IP address blocks: 45.205.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53879 (0xd277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:49:27 2024 GMT
Not After : Dec 14 07:49:27 2024 GMT
Subject: CN=6735ab8b-2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:4b:60:76:dd:58:f9:be:28:42:16:e9:e5:
8f:8f:61:ea:bf:db:f2:7b:7f:7f:e6:27:d5:5f:7d:
be:9c:f7:25:ba:41:53:f2:38:52:6c:71:5f:0e:63:
a7:08:5b:52:c4:c3:6b:77:1d:a9:73:cb:ad:f6:bd:
80:56:a0:92:45:83:82:c6:96:b3:c9:4a:60:9e:de:
9d:ee:9e:b6:74:6a:e0:23:85:c2:75:49:cd:90:ee:
a4:16:31:04:66:ee:bb:18:52:8e:c2:c8:e3:6f:cd:
3d:b3:57:fa:83:73:4a:40:a0:96:ee:75:86:44:77:
fc:c9:73:3c:d9:de:24:c6:49:30:10:b2:89:df:a3:
e2:d8:0c:85:4e:b5:d8:db:ef:76:91:6f:af:02:29:
d7:f9:41:4f:53:93:70:c0:67:5f:8e:b7:a7:9d:53:
01:2f:ef:61:0b:c9:e6:60:86:a6:0d:cc:f7:1b:3e:
4e:62:2d:f5:4b:1f:37:cd:d8:4c:77:fb:37:07:33:
f3:61:86:2f:f3:71:56:a7:b9:07:0d:f9:de:79:b9:
31:96:fd:be:7d:e3:fc:2e:13:29:4a:9e:47:7e:54:
c1:54:01:a1:b0:1a:59:64:d3:7f:15:d7:2f:af:cc:
8c:55:8a:f3:9d:5f:f7:ca:f6:d4:72:86:ad:db:8d:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:30:3E:4A:58:C4:F9:49:98:A1:5B:EF:53:EA:AA:D5:3F:A3:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB6A5FCCA25C11EF8A5D237D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:e9:e9:44:0f:46:89:c5:e4:22:24:be:ca:3e:94:28:5c:89:
9b:10:b0:fc:0a:06:02:fa:8d:b6:c4:27:4b:9f:de:2b:45:17:
de:ac:ad:0e:df:fb:97:fd:0b:fe:31:bc:0a:eb:cd:97:e2:03:
5b:0b:f2:34:28:f5:93:4a:cf:3d:f4:ba:78:3f:b4:c2:d1:10:
7e:3e:36:7e:a0:9b:71:92:42:c5:9f:0f:59:d8:9a:43:4f:52:
bc:7f:1e:58:5b:8c:03:f1:6a:cf:c9:2c:3c:d9:36:c0:6f:a7:
da:84:79:f1:f4:f8:59:49:49:bd:ed:55:c7:ea:1d:0f:de:a3:
83:9c:15:5e:04:79:b1:9c:9d:77:5c:3b:92:36:76:ea:12:f3:
20:11:6f:0d:a2:68:0d:16:8d:08:a4:4d:32:dd:ef:6b:fc:bb:
21:3e:6a:39:dd:ab:6f:5b:a2:87:30:62:c6:10:9a:35:70:4c:
ba:6f:13:bd:88:dc:6a:d7:b4:f5:20:7b:78:b5:67:05:24:1f:
88:d7:f2:b9:c5:1e:9e:b9:3a:07:85:67:df:9a:2b:ec:fe:85:
a6:5c:f0:14:99:e8:86:e3:81:67:45:93:71:1d:b5:c7:8f:8a:
d4:75:73:0c:8f:5b:fd:13:25:c5:42:82:73:f5:52:2f:c7:c9:
ce:44:12:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANJ3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE0MDc0OTI3WhcNMjQxMjE0MDc0OTI3WjAYMRYw
FAYDVQQDEw02NzM1YWI4Yi0yZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr6pLYHbdWPm+KEIW6eWPj2Hqv9vye39/5ifVX32+nPclukFT8jhSbHFf
DmOnCFtSxMNrdx2pc8ut9r2AVqCSRYOCxpazyUpgnt6d7p62dGrgI4XCdUnNkO6k
FjEEZu67GFKOwsjjb809s1f6g3NKQKCW7nWGRHf8yXM82d4kxkkwELKJ36Pi2AyF
TrXY2+92kW+vAinX+UFPU5NwwGdfjrennVMBL+9hC8nmYIamDcz3Gz5OYi31Sx83
zdhMd/s3BzPzYYYv83FWp7kHDfneebkxlv2+feP8LhMpSp5HflTBVAGhsBpZZNN/
Fdcvr8yMVYrznV/3yvbUcoat241jxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMfF
MD5KWMT5SZihW+9T6qrVP6PlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQjZBNUZDQ0EyNUMxMUVGOEE1RDIzN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc2qMA0GCSqGSIb3DQEBCwUA
A4IBAQCO6elED0aJxeQiJL7KPpQoXImbELD8CgYC+o22xCdLn94rRRferK0O3/uX
/Qv+MbwK682X4gNbC/I0KPWTSs899Lp4P7TC0RB+PjZ+oJtxkkLFnw9Z2JpDT1K8
fx5YW4wD8WrPySw82TbAb6fahHnx9PhZSUm97VXH6h0P3qODnBVeBHmxnJ13XDuS
NnbqEvMgEW8NomgNFo0IpE0y3e9r/LshPmo53atvW6KHMGLGEJo1cEy6bxO9iNxq
17T1IHt4tWcFJB+I1/K5xR6euToHhWffmivs/oWmXPAUmeiG44FnRZNxHbXHj4rU
dXMMj1v9EyXFQoJz9VIvx8nORBJC
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org