Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D754846171811EFB78AE218017001B1.roa
File: 1D754846171811EFB78AE218017001B1.roa (raw, json)
Hash identifier: I+U/Bv7Eu+kGlHFsOdymEyHvYazyW8uP4jGKZqGmIDs=
Subject key identifier: 3F:F0:DB:B3:6C:04:B3:7F:41:F0:82:80:81:55:D2:22:AB:35:96:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8AFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D754846171811EFB78AE218017001B1.roa
Signing time: Tue 21 May 2024 02:16:21 +0000
ROA not before: Tue 21 May 2024 02:16:18 +0000
ROA not after: Tue 25 Jun 2024 02:16:18 +0000
asID: 135330
IP address blocks: 156.227.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Jun 2024 00:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35581 (0x8afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 02:16:18 2024 GMT
Not After : Jun 25 02:16:18 2024 GMT
Subject: CN=664c03f5-f8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:33:cb:ed:93:9a:2e:44:fb:ae:f2:5b:83:
30:4e:7d:47:42:2a:eb:bb:31:c6:23:80:4c:ab:8b:
0b:46:94:46:1f:25:2b:83:ac:90:89:f0:c0:05:5f:
25:ad:25:78:1e:fd:5f:ee:05:73:7d:b1:5b:b0:76:
1f:6f:f0:29:e9:3e:7f:f7:ff:f7:22:5a:0c:5a:d0:
97:e5:3a:fc:66:0f:f5:a7:bf:95:bf:94:76:f8:54:
d7:e0:63:57:ba:78:a8:a1:05:ec:4d:51:0f:7c:d8:
fd:7f:71:89:e9:ed:47:f7:6f:ec:57:8d:4b:39:5d:
4a:13:0f:b0:e2:82:d4:c9:4a:8f:ab:c0:16:1a:ab:
16:4b:b6:a2:d2:0b:13:3f:9a:4c:9d:6d:da:dd:34:
39:a0:15:96:e1:a7:fa:d6:92:1f:40:76:bb:f8:f9:
cf:0d:74:87:40:60:39:4d:3c:c6:27:6a:32:44:73:
8b:be:6b:13:08:d6:1d:f5:4f:19:61:f6:c3:d1:50:
41:20:46:a9:f1:94:c3:4c:62:0a:02:45:b8:ca:ee:
16:52:41:b5:fe:a8:c1:7a:42:99:43:6d:e4:24:23:
0e:db:30:ba:55:66:1e:f5:ba:b5:5c:ad:ca:46:ab:
67:5e:d8:b1:8f:3c:b5:ee:94:11:bf:b9:a3:34:ab:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:DB:B3:6C:04:B3:7F:41:F0:82:80:81:55:D2:22:AB:35:96:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D754846171811EFB78AE218017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.6.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ca:2e:26:5c:42:81:8e:86:87:e0:57:d6:a8:68:f5:05:4d:
3a:44:bf:9a:02:a5:68:f3:3b:2f:7f:b4:12:85:45:68:1a:3d:
1c:6b:f4:33:2a:95:45:78:15:4b:3c:e5:bf:32:eb:a7:5b:09:
7f:0b:b9:97:27:ed:06:bd:f4:8e:c8:6e:6f:c5:44:72:e9:b0:
72:52:cf:06:b2:ad:98:34:3f:d7:fd:62:42:15:57:71:43:bb:
09:87:f1:f2:48:e0:a1:40:6c:7f:e1:c3:88:05:7f:3c:74:e0:
e9:f8:b1:1a:0e:75:73:4a:ed:7b:7a:a9:b1:73:f1:78:ad:d9:
9b:f9:7b:18:bf:d7:03:3c:0c:02:2d:ca:b5:a4:95:ac:8b:53:
22:19:39:87:24:ab:33:a6:ca:15:31:76:5e:0e:4b:77:3f:3c:
1b:3a:e7:e5:5c:61:b5:da:7a:9b:8d:94:f6:f0:90:6f:6b:15:
23:76:4a:4b:fe:52:a9:90:ed:1a:e7:cb:fc:e3:3f:09:0b:e3:
7d:6d:ea:71:e6:ed:99:be:2f:90:3b:62:ae:e7:12:31:25:f8:
21:a7:be:d4:49:8c:47:71:4d:af:3a:65:b7:6d:f1:c1:aa:4c:
e4:11:0c:01:73:7c:9e:11:ed:09:d3:d9:01:73:4b:06:39:db:
a8:f8:80:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIr9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTIxMDIxNjE4WhcNMjQwNjI1MDIxNjE4WjAYMRYw
FAYDVQQDEw02NjRjMDNmNS1mOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2PIzy+2Tmi5E+67yW4MwTn1HQirruzHGI4BMq4sLRpRGHyUrg6yQifDA
BV8lrSV4Hv1f7gVzfbFbsHYfb/Ap6T5/9//3IloMWtCX5Tr8Zg/1p7+Vv5R2+FTX
4GNXuniooQXsTVEPfNj9f3GJ6e1H92/sV41LOV1KEw+w4oLUyUqPq8AWGqsWS7ai
0gsTP5pMnW3a3TQ5oBWW4af61pIfQHa7+PnPDXSHQGA5TTzGJ2oyRHOLvmsTCNYd
9U8ZYfbD0VBBIEap8ZTDTGIKAkW4yu4WUkG1/qjBekKZQ23kJCMO2zC6VWYe9bq1
XK3KRqtnXtixjzy17pQRv7mjNKvwSwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD/w
27NsBLN/QfCCgIFV0iKrNZb5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRDc1NDg0NjE3MTgxMUVGQjc4QUUyMTgwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOMGMA0GCSqGSIb3DQEBCwUA
A4IBAQCEyi4mXEKBjoaH4FfWqGj1BU06RL+aAqVo8zsvf7QShUVoGj0ca/QzKpVF
eBVLPOW/MuunWwl/C7mXJ+0GvfSOyG5vxURy6bByUs8Gsq2YND/X/WJCFVdxQ7sJ
h/HySOChQGx/4cOIBX88dODp+LEaDnVzSu17eqmxc/F4rdmb+XsYv9cDPAwCLcq1
pJWsi1MiGTmHJKszpsoVMXZeDkt3PzwbOuflXGG12nqbjZT28JBvaxUjdkpL/lKp
kO0a58v84z8JC+N9bepx5u2Zvi+QO2Ku5xIxJfghp77USYxHcU2vOmW3bfHBqkzk
EQwBc3yeEe0J09kBc0sGOduo+IDn
-----END CERTIFICATE-----
Generated at Fri Jun 21 01:19:51 2024 by rpki-client on console-fra.rpki-client.org