Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E7C926039211EF94731C08017001B1.roa
File: E2E7C926039211EF94731C08017001B1.roa (raw, json)
Hash identifier: B574Ko+88HGXo9L6d4tP2UFPtu6vPjvYy3R+hFLO5ik=
Subject key identifier: 60:9A:69:F3:7D:47:50:E3:26:1C:EC:56:1F:F7:4B:F6:8D:13:DA:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8631
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E7C926039211EF94731C08017001B1.roa
Signing time: Fri 26 Apr 2024 06:04:48 +0000
ROA not before: Fri 26 Apr 2024 06:04:45 +0000
ROA not after: Sat 07 Sep 2024 06:04:45 +0000
asID: 138415
IP address blocks: 156.241.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34353 (0x8631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:04:45 2024 GMT
Not After : Sep 7 06:04:45 2024 GMT
Subject: CN=662b4400-c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:fc:a4:2b:6a:0f:94:1f:70:4c:6d:50:ed:
e4:f6:dc:a9:38:90:17:70:4e:7b:4a:4d:58:ef:77:
ef:b9:9a:6d:3b:ef:2a:43:a5:2c:34:60:85:33:de:
72:9b:ad:f1:0e:15:2e:55:61:4e:bd:1e:45:08:e9:
73:50:16:58:5b:fa:be:a6:61:90:7f:3f:82:c7:45:
1f:c5:9f:b1:cb:8e:48:b9:15:d3:93:a2:0f:6a:eb:
5c:3b:ee:c7:30:fb:59:9c:6f:a7:58:66:c7:50:2f:
89:6f:96:31:91:a0:62:8b:c4:ba:37:3d:15:3a:5b:
9d:01:8a:0d:a5:85:cc:02:a4:04:f3:4e:6e:35:c2:
1a:a2:9a:a7:20:02:54:0a:22:67:54:ab:76:ad:72:
fb:3c:eb:e8:48:c9:41:e2:8d:ac:d6:37:e5:c9:a0:
df:cb:06:e9:52:f0:78:39:67:b4:b6:7a:a0:20:00:
f2:31:21:ef:bf:38:9e:dd:30:56:f0:a2:13:fb:e1:
80:3c:55:e0:de:61:71:92:2d:cd:a6:13:8d:29:ea:
a1:31:4c:7c:c6:c5:11:fe:89:58:bb:b4:db:23:97:
55:8c:0e:41:ee:ff:26:bf:0f:aa:45:e4:cf:9f:7e:
a3:43:23:70:41:6c:9a:a3:dc:d5:a0:b9:18:ce:a5:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:69:F3:7D:47:50:E3:26:1C:EC:56:1F:F7:4B:F6:8D:13:DA:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E7C926039211EF94731C08017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.16.0/20
Signature Algorithm: sha256WithRSAEncryption
16:4d:ca:ac:51:69:52:13:ab:74:e0:31:e7:49:b2:6a:3a:a5:
ab:dc:47:e4:a2:f6:d4:a6:95:e1:c7:9b:5b:a0:97:fb:92:3f:
09:ec:93:36:ff:ea:46:85:0c:48:d0:9a:3a:3c:08:42:01:73:
a9:6b:8f:22:38:27:df:d6:1a:3d:72:92:63:50:ab:c4:d3:b6:
5f:2a:35:a1:a4:e2:07:64:4c:31:54:21:4b:2f:68:88:ad:b8:
4a:0c:cf:da:8a:39:a5:f1:e5:72:a5:81:8c:c5:f9:0d:c4:6e:
f8:ca:4b:ae:a8:c9:6e:17:b9:12:5a:16:2f:e5:fa:77:58:17:
76:5c:91:4d:cc:b0:f4:79:09:dc:8e:c7:ff:f7:3a:1b:30:15:
48:18:08:ec:88:ab:b1:dc:2f:5b:b8:d7:04:af:60:ed:4d:a4:
f0:1f:b8:f3:f4:b5:0c:0e:7e:d1:fb:bd:20:3b:67:65:ae:f4:
f5:bc:dd:c5:8b:9f:dc:ad:cb:6e:db:85:47:c4:31:aa:f3:2d:
b4:51:6a:44:9a:9b:de:93:f1:b4:88:18:3e:45:52:a5:a5:5c:
4f:f4:b6:20:b8:3a:bf:7f:60:ff:be:a2:16:af:09:ee:af:24:
0c:1b:82:56:b8:61:38:30:0d:e1:c6:c5:0c:c8:05:1a:bf:24:
b4:d0:dd:1d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIYxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDYwNDQ1WhcNMjQwOTA3MDYwNDQ1WjAYMRYw
FAYDVQQDEw02NjJiNDQwMC1jNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsrX8pCtqD5QfcExtUO3k9typOJAXcE57Sk1Y73fvuZptO+8qQ6UsNGCF
M95ym63xDhUuVWFOvR5FCOlzUBZYW/q+pmGQfz+Cx0UfxZ+xy45IuRXTk6IPautc
O+7HMPtZnG+nWGbHUC+Jb5YxkaBii8S6Nz0VOludAYoNpYXMAqQE805uNcIaopqn
IAJUCiJnVKt2rXL7POvoSMlB4o2s1jflyaDfywbpUvB4OWe0tnqgIADyMSHvvzie
3TBW8KIT++GAPFXg3mFxki3NphONKeqhMUx8xsUR/olYu7TbI5dVjA5B7v8mvw+q
ReTPn36jQyNwQWyao9zVoLkYzqXxkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGCa
afN9R1DjJhzsVh/3S/aNE9r/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMkU3QzkyNjAzOTIxMUVGOTQ3MzFDMDgwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnPEQMA0GCSqGSIb3DQEBCwUA
A4IBAQAWTcqsUWlSE6t04DHnSbJqOqWr3EfkovbUppXhx5tboJf7kj8J7JM2/+pG
hQxI0Jo6PAhCAXOpa48iOCff1ho9cpJjUKvE07ZfKjWhpOIHZEwxVCFLL2iIrbhK
DM/aijml8eVypYGMxfkNxG74ykuuqMluF7kSWhYv5fp3WBd2XJFNzLD0eQncjsf/
9zobMBVIGAjsiKux3C9buNcEr2DtTaTwH7jz9LUMDn7R+70gO2dlrvT1vN3Fi5/c
rctu24VHxDGq8y20UWpEmpvek/G0iBg+RVKlpVxP9LYguDq/f2D/vqIWrwnuryQM
G4JWuGE4MA3hxsUMyAUavyS00N0d
-----END CERTIFICATE-----
Generated at Sat May 18 03:49:22 2024 by rpki-client on console-fra.rpki-client.org