Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/44CC9024914411EFAF149499762E951A.roa
File: 44CC9024914411EFAF149499762E951A.roa (raw, json)
Hash identifier: l3Qn1RGJiIaOX/uJ3zhEKWWubILzUTCLDcpUJEVSwjw=
Subject key identifier: 7E:EC:51:5B:7D:F2:34:0A:F1:70:62:76:85:53:CE:10:EB:D3:B4:1B
Certificate issuer: /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial: 0B6E
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Authority info access: rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/44CC9024914411EFAF149499762E951A.roa
Signing time: Wed 23 Oct 2024 13:39:47 +0000
ROA not before: Wed 23 Oct 2024 13:39:43 +0000
ROA not after: Fri 31 Oct 2025 13:39:43 +0000
asID: 13335
IP address blocks: 45.220.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2926 (0xb6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Validity
Not Before: Oct 23 13:39:43 2024 GMT
Not After : Oct 31 13:39:43 2025 GMT
Subject: CN=6718fca3-a967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:81:c4:7b:0c:83:75:17:79:b7:e7:29:17:
f7:f2:db:51:74:20:30:a4:a9:98:84:8b:eb:c0:ce:
c4:da:ce:b7:ef:df:49:fc:a2:38:61:17:ff:f8:db:
bf:47:71:0a:0c:b8:b6:78:60:ed:2c:18:58:e0:af:
1d:20:b6:8e:a1:ca:ba:5b:bb:ac:f2:78:25:d8:b6:
8f:cf:b1:d5:52:5a:65:3b:4d:f5:2d:4a:e2:f2:29:
b2:87:38:bd:e2:cb:68:71:34:d3:35:e0:a1:b7:0b:
a3:b1:71:16:a6:98:8b:23:7f:4b:99:54:b1:63:d1:
75:3b:57:ea:d8:3e:be:99:95:4f:48:d6:c8:96:16:
15:c2:50:05:7b:e8:bf:26:04:d9:e8:2c:21:ea:cc:
96:54:97:41:38:bd:c2:d6:c5:42:45:e1:e0:dc:e1:
60:b1:5a:dc:0d:cf:7d:12:ae:96:c3:60:21:80:b9:
15:b9:6e:79:58:4a:4e:95:60:2d:f4:6e:75:c1:e1:
f9:86:25:64:4b:5f:1e:36:a6:1e:a4:27:79:27:95:
35:2d:46:10:f7:2c:51:87:19:5c:b0:76:a0:44:c5:
73:66:e2:a2:e4:0e:3d:70:a5:56:2c:22:81:b4:51:
5f:48:9c:61:9c:0d:e1:81:5d:50:2e:de:40:26:89:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:51:5B:7D:F2:34:0A:F1:70:62:76:85:53:CE:10:EB:D3:B4:1B
X509v3 Authority Key Identifier:
keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/44CC9024914411EFAF149499762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.220.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:18:8f:75:a6:82:b4:73:af:a6:37:30:cd:04:83:ee:44:da:
f5:e3:5f:af:19:f3:32:3b:b6:e6:79:36:49:b9:27:8a:57:e1:
ea:ad:9c:a8:b1:eb:b3:d3:2f:43:8e:03:e8:56:6c:b9:2c:16:
d7:ff:94:ab:89:dc:61:18:27:aa:5d:6e:7d:63:b6:65:df:05:
3f:4a:17:05:10:c2:17:1b:82:79:1c:f7:9c:9f:6b:4d:93:91:
cb:8b:d3:b1:4d:61:32:f8:95:54:ff:b4:73:eb:ea:fb:af:6e:
53:10:d3:2d:04:3d:be:3c:29:af:90:e9:9e:48:7a:c7:b4:8b:
3e:e8:32:e8:bf:5c:d8:a6:3b:b2:36:80:b9:c6:a7:6d:5a:37:
7c:37:2d:2a:65:a9:d3:c5:da:90:97:37:27:6e:2e:0a:69:79:
85:bc:2b:f8:6a:c9:e7:43:20:13:f2:d8:ae:bf:10:ba:cb:4e:
16:17:a0:89:ff:f0:ee:a8:df:3b:cc:49:89:59:d0:3c:16:7e:
89:f3:a2:cd:a2:bd:2f:53:dc:48:81:af:e1:f6:1f:ac:8a:0d:
eb:85:5e:b8:7e:d4:96:70:85:8a:60:f6:35:de:93:9a:22:3f:
96:9d:7a:95:00:9f:b8:11:79:cc:e5:87:7f:61:0c:09:f1:89:
c6:33:40:5b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC24wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDlCNUJBUjExMC8GA1UEBRMoODMwRjI3QTI1NTg3NzNGMzE2OEI4ODNDMDRCMDIz
OEVBNTc1MjNCNTAeFw0yNDEwMjMxMzM5NDNaFw0yNTEwMzExMzM5NDNaMBgxFjAU
BgNVBAMTDTY3MThmY2EzLWE5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+AIHEewyDdRd5t+cpF/fy21F0IDCkqZiEi+vAzsTazrfv30n8ojhhF//4
279HcQoMuLZ4YO0sGFjgrx0gto6hyrpbu6zyeCXYto/PsdVSWmU7TfUtSuLyKbKH
OL3iy2hxNNM14KG3C6OxcRammIsjf0uZVLFj0XU7V+rYPr6ZlU9I1siWFhXCUAV7
6L8mBNnoLCHqzJZUl0E4vcLWxUJF4eDc4WCxWtwNz30SrpbDYCGAuRW5bnlYSk6V
YC30bnXB4fmGJWRLXx42ph6kJ3knlTUtRhD3LFGHGVywdqBExXNm4qLkDj1wpVYs
IoG0UV9InGGcDeGBXVAu3kAmicv3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfuxR
W33yNArxcGJ2hVPOEOvTtBswHwYDVR0jBBgwFoAUgw8nolWHc/MWi4g8BLAjjqV1
I7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ5QjVCL0VDRUFFMjc2Qzg2NDExRTY5OTRGNUI3NUY4QUVBMjI4L2d3OG5v
bFdIY19NV2k0ZzhCTEFqanFWMUk3VS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2d3OG5vbFdIY19NV2k0ZzhCTEFqanFWMUk3VS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkQ5QjVCL0VDRUFFMjc2Qzg2NDExRTY5OTRGNUI3NUY4QUVB
MjI4LzQ0Q0M5MDI0OTE0NDExRUZBRjE0OTQ5OTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3OYwDQYJKoZIhvcNAQELBQAD
ggEBAB0Yj3WmgrRzr6Y3MM0Eg+5E2vXjX68Z8zI7tuZ5Nkm5J4pX4eqtnKix67PT
L0OOA+hWbLksFtf/lKuJ3GEYJ6pdbn1jtmXfBT9KFwUQwhcbgnkc95yfa02TkcuL
07FNYTL4lVT/tHPr6vuvblMQ0y0EPb48Ka+Q6Z5Iese0iz7oMui/XNimO7I2gLnG
p21aN3w3LSplqdPF2pCXNyduLgppeYW8K/hqyedDIBPy2K6/ELrLThYXoIn/8O6o
3zvMSYlZ0DwWfonzos2ivS9T3EiBr+H2H6yKDeuFXrh+1JZwhYpg9jXek5oiP5ad
epUAn7gReczlh39hDAnxicYzQFs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:48 2024 by rpki-client on console-fra.rpki-client.org