Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/77A53CFAAD8011EF8D542C9E762E951A.roa
File: 77A53CFAAD8011EF8D542C9E762E951A.roa (raw, json)
Hash identifier: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=
Subject key identifier: 96:D2:DF:D5:9B:3A:6C:85:E9:1C:0C:D1:57:06:71:6B:A8:C7:E8:C0
Certificate issuer: /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial: 02
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Authority info access: rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/77A53CFAAD8011EF8D542C9E762E951A.roa
Signing time: Thu 28 Nov 2024 12:01:15 +0000
ROA not before: Thu 28 Nov 2024 12:01:10 +0000
ROA not after: Tue 28 Feb 2045 12:01:10 +0000
asID: 37063
IP address blocks: 129.205.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 29 Dec 2024 00:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Validity
Not Before: Nov 28 12:01:10 2024 GMT
Not After : Feb 28 12:01:10 2045 GMT
Subject: CN=67485b8b-50e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:b0:b5:cf:3e:a3:37:62:01:af:92:55:a0:
a9:d9:f0:2c:9d:fb:dd:8b:15:ea:94:9a:e8:95:4a:
46:33:06:6c:9e:08:bd:10:3b:ef:ca:a0:1b:21:b9:
94:3c:3f:49:90:36:d6:e9:df:b1:35:b7:1c:ba:df:
38:bc:dc:ca:63:71:ed:e9:8a:6d:75:a2:60:3d:83:
22:43:f4:46:a2:82:d3:7d:68:bc:1c:3f:0c:af:85:
03:85:d1:1a:e9:a4:c1:01:72:d3:96:cb:ef:aa:dd:
bb:f9:19:38:f2:8c:19:29:09:33:cf:03:24:64:31:
71:51:00:93:d6:54:61:e0:80:6e:16:a7:a3:36:b6:
1e:9c:95:54:f3:46:52:a9:c6:d6:04:34:18:99:fa:
7d:31:51:12:53:fc:16:fc:19:52:fe:81:4e:c8:a6:
27:2a:18:aa:77:17:36:ac:ad:04:b9:e8:8a:55:24:
13:f5:12:08:26:b2:6e:62:82:63:19:7b:5b:30:ff:
b6:80:a6:4a:d5:d6:d7:d4:c5:03:d9:3d:06:d9:b5:
bc:c1:10:5d:31:5c:94:1e:99:cb:0c:02:73:8f:d1:
49:54:06:25:54:25:b8:ab:2d:27:4f:35:99:c7:59:
d3:b4:c5:ca:3a:52:44:bb:99:4b:c8:75:28:e4:24:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:DF:D5:9B:3A:6C:85:E9:1C:0C:D1:57:06:71:6B:A8:C7:E8:C0
X509v3 Authority Key Identifier:
keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/77A53CFAAD8011EF8D542C9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.205.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:1c:a1:a6:ca:ac:84:3c:18:4c:9c:59:2e:70:7a:b5:ea:ae:
66:02:f3:77:18:09:8c:2a:9d:87:5c:3d:cc:d7:a7:84:92:63:
ce:fd:08:68:4b:9f:fd:e7:bb:0b:63:b4:69:13:ae:8b:7b:51:
13:26:64:e1:a1:a0:d2:21:ef:84:07:c4:a8:99:3a:df:51:d5:
fb:42:e8:eb:91:33:27:53:77:85:e2:70:fa:a1:be:f8:52:9e:
57:d9:73:80:84:b2:a2:65:1c:20:1c:5f:98:38:1f:2c:9b:72:
e2:0b:9c:9d:10:0c:1f:73:ec:f9:73:a2:58:1b:b5:8a:c3:c0:
ad:fb:77:38:50:8c:72:e1:36:82:0f:86:fe:25:8f:cc:58:ba:
0c:ec:a7:e5:f9:50:93:3d:7a:e5:64:39:81:4d:9f:e0:29:02:
dd:64:b4:91:a1:5f:08:19:12:e8:af:8e:9b:4f:25:6a:fa:5c:
6b:9e:f8:43:c4:ef:40:01:89:02:81:fe:40:bc:01:a8:b4:85:
ef:5e:62:16:4b:d2:bd:74:28:4e:4b:84:38:e2:db:21:67:fb:
20:b3:54:83:36:4e:fc:c4:76:56:0b:c5:53:8d:eb:91:4a:0c:
35:46:04:ce:77:d5:bb:91:13:a3:fc:fa:39:15:ab:84:86:0b:
1a:0a:e8:fb
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
MzFDNUFSMTEwLwYDVQQFEyg4RTFBMzc0NDc1RkI1RjUwNzBDODY2QzYwREQ1NUU4
QUVBQ0Y3MTczMB4XDTI0MTEyODEyMDExMFoXDTQ1MDIyODEyMDExMFowGDEWMBQG
A1UEAxMNNjc0ODViOGItNTBlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK4asLXPPqM3YgGvklWgqdnwLJ373YsV6pSa6JVKRjMGbJ4IvRA778qgGyG5
lDw/SZA21unfsTW3HLrfOLzcymNx7emKbXWiYD2DIkP0RqKC031ovBw/DK+FA4XR
GumkwQFy05bL76rdu/kZOPKMGSkJM88DJGQxcVEAk9ZUYeCAbhanoza2HpyVVPNG
UqnG1gQ0GJn6fTFRElP8FvwZUv6BTsimJyoYqncXNqytBLnoilUkE/USCCaybmKC
Yxl7WzD/toCmStXW19TFA9k9Btm1vMEQXTFclB6ZywwCc4/RSVQGJVQluKstJ081
mcdZ07TFyjpSRLuZS8h1KOQkEmkCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSW0t/V
mzpshekcDNFXBnFrqMfowDAfBgNVHSMEGDAWgBSOGjdEdftfUHDIZsYN1V6K6s9x
czAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTMxQzUvNTkxRTNFODZBRDdGMTFFRkFGOTY3NTk3NzYyRTk1MUEvamhvM1JI
WDdYMUJ3eUdiR0RkVmVpdXJQY1hNLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
amhvM1JIWDdYMUJ3eUdiR0RkVmVpdXJQY1hNLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTMxQzUvNTkxRTNFODZBRDdGMTFFRkFGOTY3NTk3NzYyRTk1
MUEvNzdBNTNDRkFBRDgwMTFFRjhENTQyQzlFNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBYHNADANBgkqhkiG9w0BAQsFAAOC
AQEAXByhpsqshDwYTJxZLnB6tequZgLzdxgJjCqdh1w9zNenhJJjzv0IaEuf/ee7
C2O0aROui3tREyZk4aGg0iHvhAfEqJk631HV+0Lo65EzJ1N3heJw+qG++FKeV9lz
gISyomUcIBxfmDgfLJty4gucnRAMH3Ps+XOiWBu1isPArft3OFCMcuE2gg+G/iWP
zFi6DOyn5flQkz165WQ5gU2f4CkC3WS0kaFfCBkS6K+Om08lavpca574Q8TvQAGJ
AoH+QLwBqLSF715iFkvSvXQoTkuEOOLbIWf7ILNUgzZO/MR2VgvFU43rkUoMNUYE
znfVu5ETo/z6ORWrhIYLGgro+w==
-----END CERTIFICATE-----
Generated at Fri Dec 27 05:16:43 2024 by rpki-client on console-fra.rpki-client.org