Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A4032C039711EF9D48992E017001B1.roa
File: A0A4032C039711EF9D48992E017001B1.roa (raw, json)
Hash identifier: bEnZpTxToWdnEJFvOUN3kRPg/gdCwvnYY/cBKaegT2Y=
Subject key identifier: 1B:36:AC:F2:A2:50:28:CE:1C:C1:B2:51:5D:43:A1:62:38:C3:34:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 865E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A4032C039711EF9D48992E017001B1.roa
Signing time: Fri 26 Apr 2024 06:38:44 +0000
ROA not before: Fri 26 Apr 2024 06:38:41 +0000
ROA not after: Mon 27 May 2024 06:38:41 +0000
asID: 18013
IP address blocks: 156.225.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34398 (0x865e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:38:41 2024 GMT
Not After : May 27 06:38:41 2024 GMT
Subject: CN=662b4bf4-27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:da:e1:e5:ec:3c:fc:71:99:05:42:a4:bd:
87:b9:89:01:86:e7:9e:f2:d0:a6:35:89:c2:c8:36:
1e:3a:24:68:d4:06:bc:f7:6a:fe:2c:6a:c1:66:0c:
9e:52:e7:a3:09:b8:07:78:94:6f:88:7a:66:88:29:
5e:93:1c:45:e4:ad:fe:9a:9e:9c:28:95:12:1f:4c:
c9:e9:9c:70:5a:ba:33:c5:f9:ce:21:71:f1:ab:06:
24:a2:00:d0:06:bc:ba:2a:09:df:5e:9e:cd:4a:09:
84:df:d8:9c:e9:7a:a5:fe:cb:56:90:63:0d:f4:f3:
1b:6c:96:26:47:9c:a3:6b:7e:d6:a9:f6:da:7f:d9:
da:00:5e:84:3b:04:47:cf:38:c1:3a:71:fe:f7:5f:
f5:5e:e4:ca:49:fb:44:7d:b2:ae:f9:d2:3e:cb:ab:
2f:1d:bd:c4:2f:f1:26:b3:a3:74:b3:11:5e:63:d8:
46:83:a7:31:8f:00:f0:ec:e3:8b:04:b1:a3:c6:24:
5d:18:55:5e:ea:b3:9e:d2:16:95:7c:61:7f:e8:05:
e4:94:1e:0e:8c:c4:9f:83:f3:33:18:8c:e9:e5:9c:
15:00:e7:a6:2a:24:a3:e1:17:eb:f9:38:02:52:d6:
a3:9a:8a:f6:95:a0:8b:ee:da:15:c0:b6:c5:60:14:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:AC:F2:A2:50:28:CE:1C:C1:B2:51:5D:43:A1:62:38:C3:34:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0A4032C039711EF9D48992E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:93:89:5b:e1:a3:e1:03:41:8a:5c:aa:eb:c3:a4:cd:31:16:
4a:8e:4b:09:cf:13:04:43:5e:46:01:d6:2c:7f:d6:31:71:dc:
69:90:8d:33:c2:7e:3e:e6:62:7a:c6:bc:91:2b:6b:1c:22:ee:
f5:18:4d:66:7b:93:3e:93:b8:d7:65:fd:07:ac:de:66:de:aa:
90:d4:c7:69:ae:0f:a0:a1:8a:3e:30:4e:79:d0:3a:a7:d4:8f:
20:2c:5c:b7:29:46:cb:de:18:8b:c4:90:b4:50:81:ba:ca:23:
1b:c5:38:8c:18:6b:a3:fb:44:af:02:8d:b0:9d:ba:af:8d:07:
5a:28:2f:e8:f1:29:2f:31:54:de:89:0e:31:ad:ee:e1:a9:3f:
23:66:94:69:9d:3f:f6:1f:1c:20:13:8f:2e:7b:b0:83:02:4b:
4e:92:11:d6:6d:cb:3d:d1:4c:de:f4:d6:7c:f4:04:3a:57:cc:
dc:d4:4b:dd:05:8f:7e:55:0a:18:0a:8d:08:6a:00:7b:de:de:
c3:3f:e9:c9:c3:1c:0f:77:0e:a5:0a:fb:f0:1e:2e:59:c6:cb:
ff:d6:02:f6:92:7a:eb:22:9a:f7:8e:d0:df:2c:10:53:60:30:
74:38:6b:30:0a:97:25:46:76:96:dc:7e:f9:f6:df:33:6c:56:
10:3b:08:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIZeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDYzODQxWhcNMjQwNTI3MDYzODQxWjAYMRYw
FAYDVQQDEw02NjJiNGJmNC0yN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyVba4eXsPPxxmQVCpL2HuYkBhuee8tCmNYnCyDYeOiRo1Aa892r+LGrB
ZgyeUuejCbgHeJRviHpmiClekxxF5K3+mp6cKJUSH0zJ6ZxwWrozxfnOIXHxqwYk
ogDQBry6KgnfXp7NSgmE39ic6Xql/stWkGMN9PMbbJYmR5yja37Wqfbaf9naAF6E
OwRHzzjBOnH+91/1XuTKSftEfbKu+dI+y6svHb3EL/Ems6N0sxFeY9hGg6cxjwDw
7OOLBLGjxiRdGFVe6rOe0haVfGF/6AXklB4OjMSfg/MzGIzp5ZwVAOemKiSj4Rfr
+TgCUtajmor2laCL7toVwLbFYBTQFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBs2
rPKiUCjOHMGyUV1DoWI4wzTXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMEE0MDMyQzAzOTcxMUVGOUQ0ODk5MkUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOE9MA0GCSqGSIb3DQEBCwUA
A4IBAQC7k4lb4aPhA0GKXKrrw6TNMRZKjksJzxMEQ15GAdYsf9YxcdxpkI0zwn4+
5mJ6xryRK2scIu71GE1me5M+k7jXZf0HrN5m3qqQ1Mdprg+goYo+ME550Dqn1I8g
LFy3KUbL3hiLxJC0UIG6yiMbxTiMGGuj+0SvAo2wnbqvjQdaKC/o8SkvMVTeiQ4x
re7hqT8jZpRpnT/2HxwgE48ue7CDAktOkhHWbcs90Uze9NZ89AQ6V8zc1EvdBY9+
VQoYCo0IagB73t7DP+nJwxwPdw6lCvvwHi5Zxsv/1gL2knrrIpr3jtDfLBBTYDB0
OGswCpclRnaW3H759t8zbFYQOwiI
-----END CERTIFICATE-----
Generated at Sat May 18 03:49:19 2024 by rpki-client on console-fra.rpki-client.org