Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/3F0DCC84D53811EE9F160874775412E6.roa
File: 3F0DCC84D53811EE9F160874775412E6.roa (raw, json)
Hash identifier: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=
Subject key identifier: 64:AB:07:17:6B:9F:CD:91:7B:38:5E:53:8F:01:06:84:90:F3:53:B6
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 0191
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/3F0DCC84D53811EE9F160874775412E6.roa
Signing time: Tue 27 Feb 2024 06:20:05 +0000
ROA not before: Tue 27 Feb 2024 06:20:01 +0000
ROA not after: Wed 27 Feb 2030 06:20:01 +0000
asID: 202023
IP address blocks: 139.26.24.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Feb 27 06:20:01 2024 GMT
Not After : Feb 27 06:20:01 2030 GMT
Subject: CN=65dd7f15-10ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:9d:eb:be:fb:2f:ca:13:98:87:2d:25:d7:
fa:39:91:7b:0a:62:56:d9:d9:b7:da:63:34:e0:94:
cb:e0:f8:65:50:34:5f:64:d1:29:a5:7f:4d:77:fc:
1f:43:44:fe:7e:7c:1b:6b:a3:65:e5:38:27:5f:d4:
cb:ce:10:34:ae:63:43:6d:84:78:a5:d9:4a:39:b7:
3f:53:bf:73:0a:39:ea:71:4d:e8:f9:e3:0e:08:4f:
5c:bc:0d:85:61:83:e5:84:65:e9:18:32:85:bc:5b:
79:29:43:9a:d2:ad:4f:21:b1:5b:b9:75:4e:e9:78:
f6:9d:60:25:9c:63:c2:47:11:aa:c0:2e:d1:c7:b2:
ef:49:55:fc:ca:bc:94:ae:f2:aa:97:43:13:e5:bd:
59:5a:08:59:c3:f9:dc:0c:d0:ca:33:13:8b:70:0b:
fa:95:4b:5f:14:c9:c7:a5:51:6c:46:11:ce:2e:22:
69:4f:aa:fc:83:ab:03:65:e9:12:e2:9f:84:bd:c1:
ab:12:cd:40:6f:df:1a:9d:f5:bd:8e:8f:23:7c:a0:
90:a7:58:31:62:7d:5b:e7:54:15:56:9a:f8:f1:c0:
16:73:07:77:47:14:a1:5a:78:9f:a3:49:14:27:f3:
ab:7d:b5:10:06:10:1a:9c:0b:fd:5e:51:8c:35:cd:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AB:07:17:6B:9F:CD:91:7B:38:5E:53:8F:01:06:84:90:F3:53:B6
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/3F0DCC84D53811EE9F160874775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:65:4d:70:e0:09:db:db:4c:9c:4b:9d:0d:b3:45:d0:b3:16:
a1:d8:4c:81:2c:c4:57:77:5a:6b:6d:4b:6c:d4:a0:c8:83:ec:
f7:e8:e1:2f:a0:bc:07:46:f8:a4:b0:ff:39:4b:7d:23:07:4e:
2b:0b:1f:b9:41:87:3e:6c:fa:81:90:30:98:f3:c2:a3:f7:bb:
c6:f8:5f:d7:6f:d1:38:79:89:4b:f1:a3:b5:8e:6d:ac:e4:ff:
74:70:48:6c:ca:a1:cb:03:66:05:8d:d5:6b:a9:1e:4e:99:6f:
e3:c4:1c:19:f5:66:48:88:0c:da:da:34:70:7a:9c:24:df:d9:
d6:73:44:11:16:7b:60:8c:85:14:bd:fd:bc:67:36:90:80:61:
9b:6e:7c:c4:27:05:e6:a1:03:63:e6:45:a1:d8:81:c1:d1:12:
38:c0:ab:0f:69:b0:c0:7d:37:fb:f0:db:f2:b6:12:c2:c3:a4:
ec:ea:c0:9d:d5:1a:20:f5:d6:8a:b6:07:35:e8:76:3d:89:c0:
74:0e:97:96:02:ab:1e:99:06:04:ae:7f:aa:33:81:97:5d:11:
1e:29:d3:43:d5:d9:2b:84:97:15:f8:af:53:1a:da:28:a2:c7:
60:24:ae:b9:6f:fb:d4:4c:45:75:d7:6b:29:16:c8:ad:f9:e7:
ae:31:6c:f3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDMyMUFBUjExMC8GA1UEBRMoOTMzRjcwREI5ODE3Qjg0OEY4QzA4NjFBODI0QjEw
MTE3REM1MTkyQzAeFw0yNDAyMjcwNjIwMDFaFw0zMDAyMjcwNjIwMDFaMBgxFjAU
BgNVBAMTDTY1ZGQ3ZjE1LTEwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0xJ3rvvsvyhOYhy0l1/o5kXsKYlbZ2bfaYzTglMvg+GVQNF9k0Smlf013
/B9DRP5+fBtro2XlOCdf1MvOEDSuY0NthHil2Uo5tz9Tv3MKOepxTej54w4IT1y8
DYVhg+WEZekYMoW8W3kpQ5rSrU8hsVu5dU7pePadYCWcY8JHEarALtHHsu9JVfzK
vJSu8qqXQxPlvVlaCFnD+dwM0MozE4twC/qVS18UycelUWxGEc4uImlPqvyDqwNl
6RLin4S9wasSzUBv3xqd9b2OjyN8oJCnWDFifVvnVBVWmvjxwBZzB3dHFKFaeJ+j
SRQn86t9tRAGEBqcC/1eUYw1zUMZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUZKsH
F2ufzZF7OF5TjwEGhJDzU7YwHwYDVR0jBBgwFoAUkz9w25gXuEj4wIYagksQEX3F
GSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIyNDY4L2t6OXcy
NWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2t6OXcyNWdYdUVqNHdJWWFna3NRRVgzRkdTdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjQzMjFBLzQ5M0U0NjJFQkNEQTExRURBMUZCMEZCMEYxMjIy
NDY4LzNGMERDQzg0RDUzODExRUU5RjE2MDg3NDc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOLGhgwDQYJKoZIhvcNAQELBQAD
ggEBAG9lTXDgCdvbTJxLnQ2zRdCzFqHYTIEsxFd3WmttS2zUoMiD7Pfo4S+gvAdG
+KSw/zlLfSMHTisLH7lBhz5s+oGQMJjzwqP3u8b4X9dv0Th5iUvxo7WObazk/3Rw
SGzKocsDZgWN1WupHk6Zb+PEHBn1ZkiIDNraNHB6nCTf2dZzRBEWe2CMhRS9/bxn
NpCAYZtufMQnBeahA2PmRaHYgcHREjjAqw9psMB9N/vw2/K2EsLDpOzqwJ3VGiD1
1oq2BzXodj2JwHQOl5YCqx6ZBgSuf6ozgZddER4p00PV2SuElxX4r1Ma2iiix2Ak
rrlv+9RMRXXXaykWyK35564xbPM=
-----END CERTIFICATE-----
Generated at Sun May 19 02:58:50 2024 by rpki-client on console-ams.rpki-client.org