Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC258D2A95DB11EFB8E81F8D762E951A.roa
File: FC258D2A95DB11EFB8E81F8D762E951A.roa (raw, json)
Hash identifier: fGO9RNPjoNaUXWWgz9dygfqhJdyZ4YWv0i30LadD+mE=
Subject key identifier: 15:B6:DE:B2:5A:AD:0B:3E:7F:A2:02:27:57:4F:6F:26:B3:DC:7D:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C98E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC258D2A95DB11EFB8E81F8D762E951A.roa
Signing time: Tue 29 Oct 2024 09:55:53 +0000
ROA not before: Tue 29 Oct 2024 09:55:49 +0000
ROA not after: Mon 09 Dec 2024 09:55:49 +0000
asID: 63139
IP address blocks: 45.197.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51598 (0xc98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 09:55:49 2024 GMT
Not After : Dec 9 09:55:49 2024 GMT
Subject: CN=6720b129-eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ad:59:31:17:61:21:69:0d:f0:19:47:80:49:
c3:e7:9c:bd:e1:19:c1:15:1e:b9:ca:55:33:d3:97:
d8:da:ff:42:dd:c4:f1:62:2e:3b:8c:40:dc:af:21:
9f:e4:a5:66:2a:fc:ed:bb:48:6d:75:8d:a2:41:ac:
c5:53:95:b2:fc:4d:ac:8e:4a:76:17:e0:41:b6:b3:
f4:43:00:a5:84:e8:96:a3:55:ab:9c:bc:f5:a4:e2:
61:7d:dc:ed:02:eb:1d:1b:53:f3:55:03:00:35:e4:
8a:d6:a5:5c:50:3b:3f:7d:5c:c3:7c:56:11:f6:50:
19:eb:1f:51:59:ca:98:ce:8f:70:83:93:46:97:8d:
82:c1:12:e2:65:14:62:78:53:01:8e:b6:61:e8:2b:
31:25:25:5a:9f:40:1b:af:72:d5:51:94:e4:33:84:
ac:38:4b:ad:26:3f:1e:ed:06:04:3b:9b:41:4a:37:
50:f5:06:43:bc:9b:d8:a9:99:6a:2f:5f:8a:e3:61:
e3:10:02:8b:46:50:f8:08:95:0b:9b:e8:3d:2e:63:
64:ba:c6:92:38:0b:af:d9:87:e8:f6:2b:27:5a:79:
aa:41:cc:c1:f4:7a:75:f2:ab:cd:7d:88:1e:0b:5e:
3a:c1:aa:03:28:8a:18:20:43:11:23:bf:58:26:61:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:DE:B2:5A:AD:0B:3E:7F:A2:02:27:57:4F:6F:26:B3:DC:7D:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC258D2A95DB11EFB8E81F8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:f4:ba:5d:17:42:4e:22:49:18:df:79:7d:66:80:d5:6e:ed:
5a:35:ba:a6:39:75:04:dd:3b:bd:81:b2:57:36:da:6b:d4:19:
a4:53:44:97:3e:33:af:12:c9:0b:6b:0f:c6:c4:7b:8a:67:5b:
55:df:72:c0:93:6b:d6:af:76:2c:95:3f:06:90:ea:86:fb:e4:
1b:5f:7a:d0:82:dc:18:b3:0d:73:09:cd:08:fe:69:39:18:72:
07:28:dc:eb:3b:02:91:62:96:fd:86:b0:08:61:3e:41:e6:b0:
d9:79:cf:7d:f3:23:eb:6c:1c:e8:e8:c1:52:2d:d3:28:b0:39:
72:9b:5a:4b:61:63:d9:66:2a:0f:57:ba:d9:a5:01:3f:19:d8:
e3:ac:c4:1b:5b:c3:87:57:6a:47:2f:58:f6:b0:ce:ae:45:9a:
2c:c1:6b:58:c4:65:f5:64:75:95:5a:a2:c9:af:db:94:08:58:
ae:d3:08:26:32:eb:bb:ca:60:61:92:ef:b9:84:4d:a6:84:38:
a2:eb:af:e1:8f:f3:54:0d:9b:e7:35:97:ef:d1:e3:b4:34:c1:
4e:c1:13:54:1f:3c:3c:f8:f3:7b:0a:14:0a:ee:d8:ae:15:1c:
0a:b2:94:fd:02:10:53:4d:43:d2:45:65:0b:01:d7:8b:39:18:
b9:cf:c9:72
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMmOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI5MDk1NTQ5WhcNMjQxMjA5MDk1NTQ5WjAYMRYw
FAYDVQQDEw02NzIwYjEyOS1lYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA461ZMRdhIWkN8BlHgEnD55y94RnBFR65ylUz05fY2v9C3cTxYi47jEDc
ryGf5KVmKvztu0htdY2iQazFU5Wy/E2sjkp2F+BBtrP0QwClhOiWo1WrnLz1pOJh
fdztAusdG1PzVQMANeSK1qVcUDs/fVzDfFYR9lAZ6x9RWcqYzo9wg5NGl42CwRLi
ZRRieFMBjrZh6CsxJSVan0Abr3LVUZTkM4SsOEutJj8e7QYEO5tBSjdQ9QZDvJvY
qZlqL1+K42HjEAKLRlD4CJULm+g9LmNkusaSOAuv2Yfo9isnWnmqQczB9Hp18qvN
fYgeC146waoDKIoYIEMRI79YJmH/DwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBW2
3rJarQs+f6ICJ1dPbyaz3H0DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzI1OEQyQTk1REIxMUVGQjhFODFGOEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcVAMA0GCSqGSIb3DQEBCwUA
A4IBAQCM9LpdF0JOIkkY33l9ZoDVbu1aNbqmOXUE3Tu9gbJXNtpr1BmkU0SXPjOv
EskLaw/GxHuKZ1tV33LAk2vWr3YslT8GkOqG++QbX3rQgtwYsw1zCc0I/mk5GHIH
KNzrOwKRYpb9hrAIYT5B5rDZec998yPrbBzo6MFSLdMosDlym1pLYWPZZioPV7rZ
pQE/GdjjrMQbW8OHV2pHL1j2sM6uRZoswWtYxGX1ZHWVWqLJr9uUCFiu0wgmMuu7
ymBhku+5hE2mhDii66/hj/NUDZvnNZfv0eO0NMFOwRNUHzw8+PN7ChQK7tiuFRwK
spT9AhBTTUPSRWULAdeLORi5z8ly
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:56 2024 by rpki-client on console-fra.rpki-client.org