Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/53D5D5682D1711EE8047AC144AD9E6FC.roa
File: 53D5D5682D1711EE8047AC144AD9E6FC.roa (raw, json)
Hash identifier: h29xKEA0+UYrzqQPEpcXzs9j7mShLzfr8ElheCwmt0k=
Subject key identifier: FA:81:07:60:F6:DE:2E:D4:0C:4E:94:DF:A3:7D:5E:26:3B:9F:9B:85
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 03C9
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/53D5D5682D1711EE8047AC144AD9E6FC.roa
Signing time: Fri 28 Jul 2023 07:21:11 +0000
ROA not before: Fri 28 Jul 2023 07:21:05 +0000
ROA not after: Sun 31 Jul 2033 07:21:05 +0000
asID: 20011
IP address blocks: 152.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 07:21:05 2023 GMT
Not After : Jul 31 07:21:05 2033 GMT
Subject: CN=64c36c67-d6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:5d:60:bc:b9:4c:59:91:81:90:7b:2f:b9:
b6:9f:a5:fc:c2:d9:6d:c6:ad:f0:84:8e:25:5f:9f:
be:0d:cd:7b:28:63:3b:f3:b4:2e:14:3b:56:bf:05:
16:01:24:b8:20:6f:62:06:c4:b7:32:f6:ea:0b:70:
1f:d3:d8:27:59:b3:84:d8:45:53:58:f1:ff:02:72:
69:3c:d8:6d:5b:8f:91:6b:ce:fa:0e:be:24:7e:db:
f2:7c:96:ca:7f:83:1c:f8:95:d4:b3:24:8a:e6:fc:
d1:ce:72:c6:a8:ce:9a:10:63:bc:bb:ad:f8:b0:b0:
3a:42:7c:e3:91:19:2d:2b:22:5a:aa:ca:5e:9d:12:
72:c2:19:5b:cc:0c:3f:fe:d0:d0:03:73:27:6d:24:
bf:4e:75:e4:0d:eb:ae:37:79:6f:24:b6:63:bf:b5:
dc:b2:c7:f1:2a:4d:c6:83:5d:45:1c:f2:a2:c4:d6:
be:c7:72:f7:6f:fa:c4:de:b0:17:24:a3:cd:70:88:
f3:64:5b:e6:e2:ff:d0:13:9d:f8:21:b6:dc:07:af:
de:53:b4:61:10:ef:f2:52:bd:c0:55:73:f7:62:45:
d3:94:43:7e:a0:d0:34:e7:f1:22:16:25:7b:1c:1c:
66:8f:b9:7d:a8:fe:02:79:aa:b3:6e:69:3f:d3:46:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:07:60:F6:DE:2E:D4:0C:4E:94:DF:A3:7D:5E:26:3B:9F:9B:85
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/53D5D5682D1711EE8047AC144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:03:2a:2f:03:ab:d0:87:a2:f9:31:bb:08:78:16:1c:5c:ab:
9a:c3:74:6e:41:e3:6f:31:a1:49:ed:54:14:36:a5:eb:20:bf:
b5:6a:31:88:f6:63:78:1e:b6:a7:60:ce:5c:04:fb:8c:fa:f6:
38:7d:86:e8:d0:23:c4:a0:27:d8:be:42:05:d1:9a:94:32:b6:
4c:f9:98:17:67:e7:7a:1b:97:f7:94:ca:c9:12:3f:29:e9:78:
a7:db:f7:a9:b6:82:b2:61:8c:8e:7a:99:15:a8:16:b4:42:ac:
36:b2:11:ec:68:e3:27:b0:45:04:2f:97:e4:2e:9b:a3:c6:af:
9b:ee:70:62:a5:38:71:91:92:18:42:a1:c3:2b:d5:88:89:1e:
36:7a:c0:72:37:93:24:fe:28:17:6a:97:bf:28:28:b2:4b:c5:
18:77:a8:7e:37:f0:03:6b:a1:18:98:13:42:14:57:4c:1f:d9:
54:c3:3a:f4:c3:18:18:01:d3:3b:b1:c9:53:0e:01:a0:9d:46:
d6:30:26:d4:2d:af:98:89:40:6f:f7:2a:df:a6:b8:1d:38:df:
e9:ce:9f:91:6d:48:d5:a7:04:17:5e:05:0b:77:ed:c9:e7:d8:
a0:f2:75:e5:eb:90:d4:00:8f:b0:df:3d:d1:4b:5f:30:24:72:
9c:33:5e:2b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
N0IyMTZBUjExMC8GA1UEBRMoNkM2MDJBMjZGQjJDNDY2NzA3MjJERkM3M0Y3MkZD
NEI2QTczRUJDNDAeFw0yMzA3MjgwNzIxMDVaFw0zMzA3MzEwNzIxMDVaMBgxFjAU
BgNVBAMTDTY0YzM2YzY3LWQ2ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE8l1gvLlMWZGBkHsvubafpfzC2W3GrfCEjiVfn74NzXsoYzvztC4UO1a/
BRYBJLggb2IGxLcy9uoLcB/T2CdZs4TYRVNY8f8Ccmk82G1bj5FrzvoOviR+2/J8
lsp/gxz4ldSzJIrm/NHOcsaozpoQY7y7rfiwsDpCfOORGS0rIlqqyl6dEnLCGVvM
DD/+0NADcydtJL9OdeQN6643eW8ktmO/tdyyx/EqTcaDXUUc8qLE1r7Hcvdv+sTe
sBcko81wiPNkW+bi/9ATnfghttwHr95TtGEQ7/JSvcBVc/diRdOUQ36g0DTn8SIW
JXscHGaPuX2o/gJ5qrNuaT/TRnxzAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU+oEH
YPbeLtQMTpTfo31eJjufm4UwHwYDVR0jBBgwFoAUbGAqJvssRmcHIt/HP3L8S2pz
68QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVBMjI4L2JHQXFK
dnNzUm1jSEl0X0hQM0w4UzJwejY4US5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2JHQXFKdnNzUm1jSEl0X0hQM0w4UzJwejY4US5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVB
MjI4LzUzRDVENTY4MkQxNzExRUU4MDQ3QUMxNDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCYbjANBgkqhkiG9w0BAQsFAAOC
AQEAHgMqLwOr0Iei+TG7CHgWHFyrmsN0bkHjbzGhSe1UFDal6yC/tWoxiPZjeB62
p2DOXAT7jPr2OH2G6NAjxKAn2L5CBdGalDK2TPmYF2fnehuX95TKyRI/Kel4p9v3
qbaCsmGMjnqZFagWtEKsNrIR7GjjJ7BFBC+X5C6bo8avm+5wYqU4cZGSGEKhwyvV
iIkeNnrAcjeTJP4oF2qXvygoskvFGHeofjfwA2uhGJgTQhRXTB/ZVMM69MMYGAHT
O7HJUw4BoJ1G1jAm1C2vmIlAb/cq36a4HTjf6c6fkW1I1acEF14FC3ftyefYoPJ1
5euQ1ACPsN890UtfMCRynDNeKw==
-----END CERTIFICATE-----
Generated at Fri May 17 02:38:34 2024 by rpki-client on console-fra.rpki-client.org