Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/8CF32B68904C11EF9584C288762E951A.roa
File: 8CF32B68904C11EF9584C288762E951A.roa (raw, json)
Hash identifier: W8KdpJvKsiz8S2dQkLaP2FisSXn5+k8WsnBGg52AlIA=
Subject key identifier: 91:5A:5A:32:E7:CB:EA:5B:4B:3C:73:62:57:F8:9B:3E:DF:09:09:9D
Certificate issuer: /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial: 0257
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Authority info access: rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/8CF32B68904C11EF9584C288762E951A.roa
Signing time: Tue 22 Oct 2024 08:06:33 +0000
ROA not before: Tue 22 Oct 2024 08:06:28 +0000
ROA not after: Wed 22 Oct 2025 08:06:28 +0000
asID: 327906
IP address blocks: 169.255.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Validity
Not Before: Oct 22 08:06:28 2024 GMT
Not After : Oct 22 08:06:28 2025 GMT
Subject: CN=67175d09-7d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:32:2a:bb:d3:2e:cc:1d:c3:36:ac:50:4d:
ee:1e:78:67:72:6e:d6:a1:d7:0c:af:6a:c9:6f:e9:
81:8a:ca:9d:04:b2:a5:e7:2a:6a:37:ff:da:f8:e7:
5b:d3:7c:a7:28:c8:95:cc:08:67:bc:22:ed:c9:ea:
ce:d8:35:31:3d:b9:79:df:2b:44:44:b4:63:e8:72:
5e:a6:72:b5:38:66:cc:e7:8c:0d:b1:87:40:b7:61:
41:3d:1c:bb:ac:0d:76:a1:2c:80:6e:ca:d2:40:13:
08:4a:d7:d3:c9:85:fa:9c:6c:d3:ab:cf:86:29:74:
d7:65:cf:71:22:52:34:f9:2c:3b:05:21:f7:40:ed:
a6:f0:70:84:0b:a8:5d:9f:65:d4:7b:4a:ec:f0:64:
90:9b:20:7b:34:39:6f:95:64:eb:78:a7:95:2e:bd:
ff:84:43:18:f5:33:be:39:0a:83:bf:4f:fd:0a:da:
b9:c4:68:7a:c8:c4:08:6f:ae:8b:82:91:41:cf:21:
c3:15:df:1d:84:4b:d4:8d:d7:68:0c:a6:ec:b9:2c:
15:44:3b:56:1f:36:af:44:ff:e9:a0:40:4a:18:d4:
6d:d6:0d:8a:f9:b3:08:e7:24:cf:39:09:69:ce:6e:
1d:7b:36:21:f8:70:06:14:7f:c0:e9:bb:88:81:87:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:5A:32:E7:CB:EA:5B:4B:3C:73:62:57:F8:9B:3E:DF:09:09:9D
X509v3 Authority Key Identifier:
keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/8CF32B68904C11EF9584C288762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.104.0/22
Signature Algorithm: sha256WithRSAEncryption
65:f0:1d:ca:b1:c3:53:02:4a:c6:6d:32:02:7b:e4:f5:ec:ba:
45:ce:a8:33:a9:45:64:99:d0:b9:6f:73:49:16:ee:07:ea:f7:
f0:bc:3e:04:47:93:d0:91:9b:73:12:33:1a:0b:aa:59:ad:28:
d5:ee:aa:8c:e4:ed:74:10:ec:7e:ed:58:e7:ba:ca:ce:be:14:
e9:70:42:ce:87:94:36:b3:da:3a:ab:aa:05:3c:e3:5b:d4:c6:
01:bb:6a:81:0c:28:57:4e:d1:44:12:80:da:48:78:b3:60:3b:
a7:38:25:72:86:b5:04:8b:18:77:32:d2:a1:16:61:0e:46:7e:
3d:10:6d:06:95:50:ab:bb:e6:21:c6:5b:a1:a2:b7:8f:d9:cf:
bd:3d:c7:6e:4c:af:34:53:cd:9c:1b:2f:78:42:c3:2c:93:4c:
14:43:11:74:c9:70:7e:5e:58:51:40:f7:64:d3:f7:04:ee:8a:
d9:28:ab:fb:c0:d3:55:16:af:51:24:0d:6c:fa:2d:57:70:7b:
3c:c8:b8:9f:f4:b1:30:90:80:c0:ff:ce:c5:87:1e:95:36:24:
40:33:b4:05:de:ee:84:a4:e8:ca:06:10:9e:e4:dc:59:c9:4e:
12:9b:91:ff:aa:7b:15:46:9a:34:90:87:04:5f:e4:f2:ef:a0:
73:9d:99:73
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ1REJBUjExMC8GA1UEBRMoQUI1NTFEMTA4NDUwNjA4RUJERjU0MENBMTIxOUIy
Qjg0N0Y2NUVCRDAeFw0yNDEwMjIwODA2MjhaFw0yNTEwMjIwODA2MjhaMBgxFjAU
BgNVBAMTDTY3MTc1ZDA5LTdkMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0fjIqu9MuzB3DNqxQTe4eeGdybtah1wyvaslv6YGKyp0EsqXnKmo3/9r4
51vTfKcoyJXMCGe8Iu3J6s7YNTE9uXnfK0REtGPocl6mcrU4ZsznjA2xh0C3YUE9
HLusDXahLIBuytJAEwhK19PJhfqcbNOrz4YpdNdlz3EiUjT5LDsFIfdA7abwcIQL
qF2fZdR7SuzwZJCbIHs0OW+VZOt4p5Uuvf+EQxj1M745CoO/T/0K2rnEaHrIxAhv
rouCkUHPIcMV3x2ES9SN12gMpuy5LBVEO1YfNq9E/+mgQEoY1G3WDYr5swjnJM85
CWnObh17NiH4cAYUf8Dpu4iBh01DAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUkVpa
MufL6ltLPHNiV/ibPt8JCZ0wHwYDVR0jBBgwFoAUq1UdEIRQYI699UDKEhmyuEf2
Xr0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NURCLzdBNjYyMkQ0Q0EyODExRUQ4QzBBRDA5NUYxMjIyNDY4L3ExVWRF
SVJRWUk2OTlVREtFaG15dUVmMlhyMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3ExVWRFSVJRWUk2OTlVREtFaG15dUVmMlhyMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjE0NURCLzdBNjYyMkQ0Q0EyODExRUQ4QzBBRDA5NUYxMjIy
NDY4LzhDRjMyQjY4OTA0QzExRUY5NTg0QzI4ODc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKp/2gwDQYJKoZIhvcNAQELBQAD
ggEBAGXwHcqxw1MCSsZtMgJ75PXsukXOqDOpRWSZ0Llvc0kW7gfq9/C8PgRHk9CR
m3MSMxoLqlmtKNXuqozk7XQQ7H7tWOe6ys6+FOlwQs6HlDaz2jqrqgU841vUxgG7
aoEMKFdO0UQSgNpIeLNgO6c4JXKGtQSLGHcy0qEWYQ5Gfj0QbQaVUKu75iHGW6Gi
t4/Zz709x25MrzRTzZwbL3hCwyyTTBRDEXTJcH5eWFFA92TT9wTuitkoq/vA01UW
r1EkDWz6LVdwezzIuJ/0sTCQgMD/zsWHHpU2JEAztAXe7oSk6MoGEJ7k3FnJThKb
kf+qexVGmjSQhwRf5PLvoHOdmXM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:30 2024 by rpki-client on console-ams.rpki-client.org