Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5BF27CCCBA11EEBA620D80775412E6.roa
File: DB5BF27CCCBA11EEBA620D80775412E6.roa (raw, json)
Hash identifier: xasnGi4XVbJCq/JdPPcngTkencou7ymniNqFTMG11EA=
Subject key identifier: B4:9D:D2:5E:92:48:AE:0F:B4:87:FC:B3:00:2B:8F:B9:40:18:83:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 711B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5BF27CCCBA11EEBA620D80775412E6.roa
Signing time: Fri 16 Feb 2024 11:02:21 +0000
ROA not before: Fri 16 Feb 2024 11:02:18 +0000
ROA not after: Fri 26 Apr 2024 11:02:18 +0000
asID: 9009
IP address blocks: 156.246.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28955 (0x711b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 11:02:18 2024 GMT
Not After : Apr 26 11:02:18 2024 GMT
Subject: CN=65cf40bd-918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:b2:59:a9:e6:e0:89:f5:bf:76:d0:5b:be:
ed:35:00:75:ab:ca:3f:76:3a:6e:ce:41:04:f5:0e:
1b:17:3b:ef:fb:b4:eb:13:10:3f:ca:88:af:32:ce:
c7:04:d5:78:5e:9a:b4:31:15:5d:2a:6e:1d:1c:8a:
18:77:b5:07:fd:32:84:fd:28:ff:cd:60:c2:9b:8b:
dd:13:49:55:de:6f:58:e5:f4:b8:5e:26:c3:ad:67:
6d:82:8f:ff:8d:5c:7c:f5:43:3d:01:e9:96:da:b2:
be:79:74:48:62:60:49:2b:91:04:24:56:f3:b2:6f:
57:02:ce:8c:13:f3:6b:2d:36:e4:cd:da:1e:50:2b:
1b:e2:3a:56:d5:eb:7f:e2:08:c9:c6:35:de:91:79:
92:c4:d9:24:dd:3a:a1:73:cb:0d:97:45:a3:bf:81:
e8:0a:fc:ee:0e:c7:e4:7a:f1:e3:80:10:be:ad:a7:
08:1c:f7:3f:bc:4f:9d:ba:53:35:7c:95:f7:82:ee:
35:1e:ae:40:68:52:68:7c:63:c2:21:dd:c1:b5:0e:
43:fb:c9:0a:30:40:fb:6e:58:63:8d:86:81:3e:0a:
60:8c:0b:46:d3:cd:52:1e:7b:d6:23:9b:9f:80:29:
bf:9d:f6:d2:f9:b5:0e:90:ad:cb:5e:a5:e3:71:4d:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:D2:5E:92:48:AE:0F:B4:87:FC:B3:00:2B:8F:B9:40:18:83:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB5BF27CCCBA11EEBA620D80775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.46.0/24
Signature Algorithm: sha256WithRSAEncryption
48:36:ae:ca:0b:66:72:63:c0:ed:3b:79:0f:ab:a6:37:cc:2a:
96:0c:4a:7f:48:d5:53:75:6d:9c:69:65:00:4a:ec:53:46:22:
1e:06:d6:9d:40:6c:b4:3f:33:4b:83:98:ed:12:45:e4:ac:1c:
cc:c1:75:18:1d:96:13:57:a6:5f:95:fc:36:ae:9f:72:1b:f0:
4b:5d:8b:cb:d7:97:80:c4:06:aa:cf:d2:5b:4f:83:85:16:44:
0a:02:b6:6b:32:3e:49:af:d1:5b:47:1c:b5:fa:a6:bd:1a:23:
42:8f:e3:ae:91:fc:ca:3d:b3:6c:df:a0:c9:61:9a:ed:92:b7:
fc:2d:d6:8f:97:ea:73:a5:82:f9:57:53:4c:31:ed:fb:f9:87:
00:1f:4a:01:c7:c6:bb:76:bc:c0:d4:ac:f4:97:bc:cc:b0:0c:
90:87:c5:8c:a5:1e:b1:bc:a7:01:f8:e8:a7:46:d9:90:3b:37:
22:8a:c6:42:0b:ab:34:fe:6b:14:3e:9c:8f:72:d9:83:ce:dc:
40:50:91:ef:b3:e7:fb:6e:d1:a5:28:e0:cb:e6:d8:6c:28:34:
5b:59:77:08:21:9f:5f:de:d3:0d:fd:1c:11:d4:1e:dc:eb:3d:
a9:7f:3c:3e:ef:94:83:3a:0a:29:57:2e:0f:ad:b4:9e:07:9a:
e6:0a:ef:de
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICcRswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAyMTYxMTAyMThaFw0yNDA0MjYxMTAyMThaMBgxFjAU
BgNVBAMTDTY1Y2Y0MGJkLTkxOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNC7JZqebgifW/dtBbvu01AHWryj92Om7OQQT1DhsXO+/7tOsTED/KiK8y
zscE1XhemrQxFV0qbh0cihh3tQf9MoT9KP/NYMKbi90TSVXeb1jl9LheJsOtZ22C
j/+NXHz1Qz0B6Zbasr55dEhiYEkrkQQkVvOyb1cCzowT82stNuTN2h5QKxviOlbV
63/iCMnGNd6ReZLE2STdOqFzyw2XRaO/gegK/O4Ox+R68eOAEL6tpwgc9z+8T526
UzV8lfeC7jUerkBoUmh8Y8Ih3cG1DkP7yQowQPtuWGONhoE+CmCMC0bTzVIee9Yj
m5+AKb+d9tL5tQ6QrctepeNxTfKVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUtJ3S
XpJIrg+0h/yzACuPuUAYg/YwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0RCNUJGMjdDQ0NCQTExRUVCQTYyMEQ4MDc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9i4wDQYJKoZIhvcNAQELBQAD
ggEBAEg2rsoLZnJjwO07eQ+rpjfMKpYMSn9I1VN1bZxpZQBK7FNGIh4G1p1AbLQ/
M0uDmO0SReSsHMzBdRgdlhNXpl+V/Daun3Ib8Etdi8vXl4DEBqrP0ltPg4UWRAoC
tmsyPkmv0VtHHLX6pr0aI0KP466R/Mo9s2zfoMlhmu2St/wt1o+X6nOlgvlXU0wx
7fv5hwAfSgHHxrt2vMDUrPSXvMywDJCHxYylHrG8pwH46KdG2ZA7NyKKxkILqzT+
axQ+nI9y2YPO3EBQke+z5/tu0aUo4Mvm2GwoNFtZdwghn1/e0w39HBHUHtzrPal/
PD7vlIM6CilXLg+ttJ4HmuYK794=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:04 2024 by rpki-client on console-ams.rpki-client.org