Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DABC12F91811EDB4D9BA1C4AD9E6FC.roa
File: A5DABC12F91811EDB4D9BA1C4AD9E6FC.roa (raw, json)
Hash identifier: AIc12E/Cfn07gPKFMAeGKJt1btPW/6f3TY39fJ9wvKc=
Subject key identifier: 8F:49:B2:F4:95:53:41:93:D8:1D:B1:1C:31:A5:ED:D4:E4:54:23:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DABC12F91811EDB4D9BA1C4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:19:38 +0000
ROA not before: Tue 23 May 2023 03:19:34 +0000
ROA not after: Tue 20 Aug 2024 03:19:34 +0000
asID: 399674
IP address blocks: 156.248.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9948 (0x26dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:19:34 2023 GMT
Not After : Aug 20 03:19:34 2024 GMT
Subject: CN=646c30c9-927c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:82:a5:b2:7c:2c:8a:6f:6b:25:c9:db:19:
81:d9:77:5a:cd:34:7a:90:55:0b:5b:ad:25:21:d4:
ed:3f:10:f0:ec:dd:a5:19:12:d3:34:f6:d5:fd:03:
4d:3c:48:c4:1d:01:8a:07:c1:68:8c:00:6c:a1:f9:
47:6a:fc:a8:cd:99:9c:5a:4f:95:3d:5e:56:c0:18:
ee:89:38:4c:6f:24:1f:e9:c8:fe:ca:be:c2:10:34:
19:de:c1:84:3f:a9:50:69:57:83:2a:10:e1:d2:0b:
df:96:e0:a7:33:b2:f7:a7:bc:45:bd:79:1b:41:8e:
79:20:23:f9:a1:a6:0a:b5:db:b6:fd:88:7a:15:7f:
83:81:af:78:6a:d5:c3:c7:b6:98:d3:9d:95:e6:3b:
bd:79:28:a1:f0:cc:64:4f:71:eb:5c:2a:8f:cf:6c:
d6:51:ca:57:33:fa:4a:db:a2:e6:b1:ee:eb:4a:49:
37:fc:b4:e5:fd:e8:63:ab:35:91:63:e4:3f:0f:04:
6a:f4:42:e5:e3:be:73:8f:7e:42:25:c9:c6:69:e8:
8b:e2:3e:82:e1:e4:ab:93:c2:1d:da:1a:1d:ce:7a:
ae:93:4d:fb:5d:02:2f:05:3e:90:22:f4:6a:3c:df:
b8:f0:ef:c8:05:9b:92:14:2f:5a:fd:f1:cc:b1:02:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:49:B2:F4:95:53:41:93:D8:1D:B1:1C:31:A5:ED:D4:E4:54:23:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DABC12F91811EDB4D9BA1C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:b9:d3:f2:8d:c3:79:08:06:6d:22:e3:9c:30:b4:1a:bf:9d:
1c:c8:ad:33:6d:fa:5a:8c:75:b5:af:8b:80:e6:82:88:fe:92:
7a:03:ec:77:e7:49:c4:0f:cf:dd:da:59:cb:a5:56:48:4c:df:
f3:2b:08:71:46:29:41:90:60:fd:8c:62:8e:50:0a:30:68:3e:
5c:1c:53:c5:a9:de:3e:e9:b4:29:13:50:5a:15:df:0b:a0:e2:
b4:00:6a:2b:af:78:46:08:e6:ff:6a:85:53:ff:af:a5:91:53:
f9:fd:ed:b0:55:8c:91:55:be:a0:d5:a9:f0:ba:18:4e:2b:42:
f7:26:8b:80:04:6d:18:11:06:43:f4:62:6c:e8:72:dc:66:cb:
db:49:8d:41:05:61:0b:7a:89:35:14:bf:6c:ed:ed:71:f4:fe:
0a:50:f4:bf:f5:94:04:36:df:44:e5:b9:f8:2b:1c:32:28:a1:
86:ff:9f:02:0c:7d:6c:50:89:2e:64:93:52:80:bc:1e:c6:ee:
90:1b:d4:0f:1b:bb:cc:0f:98:8a:a7:0e:2d:9e:cf:ba:59:44:
5e:79:29:25:e4:be:be:c1:da:ee:79:03:fa:de:0b:b2:57:cc:
22:33:dc:6a:51:16:4e:e3:f7:a0:cf:aa:f3:fa:9a:c8:c6:69:
62:8f:b4:65
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJtwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjMwMzE5MzRaFw0yNDA4MjAwMzE5MzRaMBgxFjAU
BgNVBAMTDTY0NmMzMGM5LTkyN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/B4Klsnwsim9rJcnbGYHZd1rNNHqQVQtbrSUh1O0/EPDs3aUZEtM09tX9
A008SMQdAYoHwWiMAGyh+Udq/KjNmZxaT5U9XlbAGO6JOExvJB/pyP7KvsIQNBne
wYQ/qVBpV4MqEOHSC9+W4KczsvenvEW9eRtBjnkgI/mhpgq127b9iHoVf4OBr3hq
1cPHtpjTnZXmO715KKHwzGRPcetcKo/PbNZRylcz+krbouax7utKSTf8tOX96GOr
NZFj5D8PBGr0QuXjvnOPfkIlycZp6IviPoLh5KuTwh3aGh3Oeq6TTftdAi8FPpAi
9Go837jw78gFm5IUL1r98cyxAuwZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUj0my
9JVTQZPYHbEcMaXt1ORUI/AwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0E1REFCQzEyRjkxODExRURCNEQ5QkExQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASc+KAwDQYJKoZIhvcNAQELBQAD
ggEBAD+50/KNw3kIBm0i45wwtBq/nRzIrTNt+lqMdbWvi4Dmgoj+knoD7HfnScQP
z93aWculVkhM3/MrCHFGKUGQYP2MYo5QCjBoPlwcU8Wp3j7ptCkTUFoV3wug4rQA
aiuveEYI5v9qhVP/r6WRU/n97bBVjJFVvqDVqfC6GE4rQvcmi4AEbRgRBkP0Ymzo
ctxmy9tJjUEFYQt6iTUUv2zt7XH0/gpQ9L/1lAQ230TlufgrHDIooYb/nwIMfWxQ
iS5kk1KAvB7G7pAb1A8bu8wPmIqnDi2ez7pZRF55KSXkvr7B2u55A/reC7JXzCIz
3GpRFk7j96DPqvP6msjGaWKPtGU=
-----END CERTIFICATE-----
Generated at Wed May 22 05:59:19 2024 by rpki-client on console-ams.rpki-client.org