Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC9C5A47EBE11EEB018F86D4AD9E6FC.roa
File: FDC9C5A47EBE11EEB018F86D4AD9E6FC.roa (raw, json)
Hash identifier: kLYKVIv7M9UdKmM9HzHhu/oNtgG8P4Zz7K8pzZFzGJw=
Subject key identifier: 7C:74:E2:C4:05:CA:6B:E9:2A:A2:58:5F:19:FC:45:96:B0:3B:22:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC9C5A47EBE11EEB018F86D4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:15:27 +0000
ROA not before: Thu 09 Nov 2023 05:15:23 +0000
ROA not after: Thu 07 Nov 2024 05:15:23 +0000
asID: 148994
IP address blocks: 45.200.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17659 (0x44fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:15:23 2023 GMT
Not After : Nov 7 05:15:23 2024 GMT
Subject: CN=654c6aef-e9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:ca:d7:f4:ea:4f:d1:a0:ad:f0:71:ed:65:
fc:14:b7:97:d7:02:a6:ed:b7:e5:49:8b:a9:72:c7:
3b:c3:65:1e:01:2b:39:dc:74:e7:58:d7:ed:eb:f5:
65:44:41:79:1c:eb:ed:ab:d1:70:56:2e:d5:18:9d:
e8:2b:65:d2:6a:c2:03:8c:34:9f:28:dd:e9:29:b7:
8b:c9:d9:21:97:e9:c8:a5:22:e9:52:c6:70:f1:19:
ee:4c:6b:f5:96:7b:82:e1:31:dc:e9:5b:e3:77:eb:
18:03:f7:8b:c6:66:7c:05:af:f0:22:24:63:3c:3e:
11:8b:7e:7c:26:98:47:4b:6e:bb:07:96:05:71:a1:
7a:8d:f0:d7:08:f9:90:66:f6:73:74:9c:2f:3e:e1:
51:6a:89:80:7f:e0:3d:a5:f0:f7:30:9f:51:8d:4c:
8f:1f:4d:cc:e0:b5:f9:6c:59:67:41:4c:dc:03:8d:
8a:6c:1b:89:51:63:9d:ff:71:60:fc:f7:73:af:b0:
55:7f:e6:be:64:63:26:c9:f5:22:94:58:0b:83:a2:
9e:9e:52:f8:e9:9c:e5:bf:20:0c:f2:97:86:f5:66:
22:d7:98:8f:1c:d4:e6:b3:05:08:fc:df:01:13:95:
d2:48:5f:06:c2:7a:46:2e:63:ae:82:3b:8a:ec:e0:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:E2:C4:05:CA:6B:E9:2A:A2:58:5F:19:FC:45:96:B0:3B:22:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDC9C5A47EBE11EEB018F86D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.86.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:d1:d8:65:70:47:c4:bc:54:f5:8f:3c:1d:42:64:d0:46:1a:
b9:be:84:67:a3:0b:e3:69:0c:1b:1b:1f:21:3e:9c:ba:0d:af:
53:88:2c:76:ad:17:0a:7a:39:6d:4e:b8:3f:7e:cb:fa:5e:ea:
99:d9:9e:81:cf:ad:61:0e:06:bb:52:30:31:46:9f:d0:32:64:
13:70:3a:86:a4:05:c7:65:a1:79:cb:ca:0d:99:e5:5c:be:ad:
96:12:fc:95:ab:87:a7:16:76:a3:30:8f:ca:90:46:57:30:07:
65:89:de:fc:62:29:2e:43:b1:a3:22:39:e5:1d:ec:b6:3d:f9:
41:f2:8e:19:d2:9c:8d:0c:8e:27:76:1a:e5:99:b8:5a:ca:80:
79:08:68:41:17:bf:da:47:68:05:fe:44:71:de:98:55:7a:54:
90:b6:b0:85:2f:33:d5:cb:74:10:98:28:75:48:95:6c:8f:09:
2d:ba:7c:28:9f:a8:1e:ab:31:bc:a7:f0:ff:f6:d6:cd:77:89:
f3:dd:7f:68:a2:ec:7c:27:a2:e6:6f:fe:c3:9e:6c:75:c3:81:
c4:68:9c:73:ad:d7:f7:54:49:97:ec:46:a9:ad:aa:5f:07:a4:
23:76:6d:9a:4e:f5:4f:5b:1b:53:18:3c:5a:61:1f:74:15:b7:
2b:78:3b:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRPswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNTE1MjNaFw0yNDExMDcwNTE1MjNaMBgxFjAU
BgNVBAMTDTY1NGM2YWVmLWU5ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBS8rX9OpP0aCt8HHtZfwUt5fXAqbtt+VJi6lyxzvDZR4BKzncdOdY1+3r
9WVEQXkc6+2r0XBWLtUYnegrZdJqwgOMNJ8o3ekpt4vJ2SGX6cilIulSxnDxGe5M
a/WWe4LhMdzpW+N36xgD94vGZnwFr/AiJGM8PhGLfnwmmEdLbrsHlgVxoXqN8NcI
+ZBm9nN0nC8+4VFqiYB/4D2l8Pcwn1GNTI8fTczgtflsWWdBTNwDjYpsG4lRY53/
cWD893OvsFV/5r5kYybJ9SKUWAuDop6eUvjpnOW/IAzyl4b1ZiLXmI8c1OazBQj8
3wETldJIXwbCekYuY66CO4rs4IwFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfHTi
xAXKa+kqolhfGfxFlrA7IqIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZEQzlDNUE0N0VCRTExRUVCMDE4Rjg2RDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtyFYwDQYJKoZIhvcNAQELBQAD
ggEBADrR2GVwR8S8VPWPPB1CZNBGGrm+hGejC+NpDBsbHyE+nLoNr1OILHatFwp6
OW1OuD9+y/pe6pnZnoHPrWEOBrtSMDFGn9AyZBNwOoakBcdloXnLyg2Z5Vy+rZYS
/JWrh6cWdqMwj8qQRlcwB2WJ3vxiKS5DsaMiOeUd7LY9+UHyjhnSnI0Mjid2GuWZ
uFrKgHkIaEEXv9pHaAX+RHHemFV6VJC2sIUvM9XLdBCYKHVIlWyPCS26fCifqB6r
Mbyn8P/21s13ifPdf2ii7HwnouZv/sOebHXDgcRonHOt1/dUSZfsRqmtql8HpCN2
bZpO9U9bG1MYPFphH3QVtyt4O1Y=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:20 2024 by rpki-client on console-fra.rpki-client.org