Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018E74D2038511EFBAFEBB15017001B1.roa
File: 018E74D2038511EFBAFEBB15017001B1.roa (raw, json)
Hash identifier: lyeC5CEjTNHZfslLxwHV7dkrMe5c+gKptLy1E64xN08=
Subject key identifier: DF:62:09:D0:4A:93:D1:C8:9A:44:B0:A0:04:8E:BF:06:C8:5A:2E:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8596
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018E74D2038511EFBAFEBB15017001B1.roa
Signing time: Fri 26 Apr 2024 04:25:26 +0000
ROA not before: Fri 26 Apr 2024 04:25:23 +0000
ROA not after: Tue 03 Sep 2024 04:25:23 +0000
asID: 138195
IP address blocks: 156.234.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34198 (0x8596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:25:23 2024 GMT
Not After : Sep 3 04:25:23 2024 GMT
Subject: CN=662b2cb6-fe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:7d:4f:d6:ff:4b:e9:56:58:f1:47:1b:43:
70:c7:ee:92:89:f5:f7:ff:d9:b4:ae:f1:e1:a6:e7:
ed:f0:a3:7f:8b:44:5f:9b:42:e0:e3:58:70:95:cd:
cd:a1:80:f3:3a:0f:aa:50:20:77:e2:2d:9c:51:73:
1b:85:86:ba:9d:e3:15:a1:39:e6:79:1a:d2:4e:83:
87:0c:06:1d:c2:c8:05:e7:67:ac:07:f6:33:35:2c:
99:55:d2:8f:ec:ca:90:8c:ad:76:f2:c9:38:09:35:
a0:de:ac:fa:26:0f:eb:fd:65:5b:01:d4:93:6c:1e:
fe:b1:9f:ce:b7:be:a9:f6:48:ff:ff:49:60:1a:03:
97:01:04:47:b9:6e:f2:7d:26:c9:7e:62:b9:d6:52:
ef:53:4c:64:cf:a1:8f:a0:9e:99:5b:d7:0b:55:1e:
c7:dc:7f:3c:e3:14:f3:0f:78:4f:cc:00:0d:6a:5d:
18:d5:70:03:af:25:45:ca:d4:23:b6:f6:c4:fe:8f:
c6:04:a6:07:4d:04:60:3d:cc:69:c8:04:8d:39:39:
91:9d:4c:d6:7d:fe:3b:6e:e6:ae:96:98:84:62:c8:
4e:90:7f:0c:9d:c3:16:63:ec:4e:51:28:b9:8e:06:
0a:55:32:d6:a2:c6:a3:08:d5:c1:8f:46:48:b9:e8:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:09:D0:4A:93:D1:C8:9A:44:B0:A0:04:8E:BF:06:C8:5A:2E:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/018E74D2038511EFBAFEBB15017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.62.0/24
Signature Algorithm: sha256WithRSAEncryption
00:32:29:c9:06:95:eb:74:36:56:02:d2:b4:c0:2d:4a:be:74:
8c:e6:9e:99:eb:6a:e5:fc:91:69:ff:a7:28:8a:f1:d3:2e:2c:
1f:83:7e:4e:0f:fe:d5:ce:a9:ee:3c:b8:03:68:42:65:33:65:
07:6f:61:d2:38:c9:46:82:ed:7e:69:5a:f2:dd:7e:d0:e5:75:
a2:e0:54:6e:ff:fb:f1:e3:5a:96:c3:4e:eb:2a:71:e0:95:20:
b6:f7:77:98:89:96:26:c5:d3:49:68:83:c1:42:c1:9d:ea:89:
a8:af:5d:c4:90:fe:91:f9:0f:87:5f:c7:a7:4e:c3:b7:93:fb:
70:1f:b0:66:d8:1a:da:4e:3c:d2:ba:ef:f3:96:bd:73:f7:12:
0c:84:ec:0b:46:1f:2c:d9:17:05:f9:3b:01:02:40:b6:e5:1f:
3f:8a:e1:b2:8c:44:7d:6f:c2:cb:c6:1b:e0:da:57:15:03:0a:
b0:75:3e:4f:e2:9f:7a:37:73:94:60:a5:da:00:1f:40:41:62:
06:95:55:97:30:fa:f3:ae:6a:1d:12:21:e5:6e:81:27:9f:9a:
22:66:94:88:e8:5d:90:18:8d:72:84:79:31:1c:9c:55:93:b7:
3e:e4:43:2b:d7:56:08:2b:2f:3d:e7:e4:32:d6:d2:d8:68:31:
8d:5c:2f:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIWWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDQyNTIzWhcNMjQwOTAzMDQyNTIzWjAYMRYw
FAYDVQQDEw02NjJiMmNiNi1mZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArBJ9T9b/S+lWWPFHG0Nwx+6SifX3/9m0rvHhpuft8KN/i0Rfm0Lg41hw
lc3NoYDzOg+qUCB34i2cUXMbhYa6neMVoTnmeRrSToOHDAYdwsgF52esB/YzNSyZ
VdKP7MqQjK128sk4CTWg3qz6Jg/r/WVbAdSTbB7+sZ/Ot76p9kj//0lgGgOXAQRH
uW7yfSbJfmK51lLvU0xkz6GPoJ6ZW9cLVR7H3H884xTzD3hPzAANal0Y1XADryVF
ytQjtvbE/o/GBKYHTQRgPcxpyASNOTmRnUzWff47buaulpiEYshOkH8MncMWY+xO
USi5jgYKVTLWosajCNXBj0ZIuej+mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN9i
CdBKk9HImkSwoASOvwbIWi4dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMThFNzREMjAzODUxMUVGQkFGRUJCMTUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOo+MA0GCSqGSIb3DQEBCwUA
A4IBAQAAMinJBpXrdDZWAtK0wC1KvnSM5p6Z62rl/JFp/6coivHTLiwfg35OD/7V
zqnuPLgDaEJlM2UHb2HSOMlGgu1+aVry3X7Q5XWi4FRu//vx41qWw07rKnHglSC2
93eYiZYmxdNJaIPBQsGd6omor13EkP6R+Q+HX8enTsO3k/twH7Bm2BraTjzSuu/z
lr1z9xIMhOwLRh8s2RcF+TsBAkC25R8/iuGyjER9b8LLxhvg2lcVAwqwdT5P4p96
N3OUYKXaAB9AQWIGlVWXMPrzrmodEiHlboEnn5oiZpSI6F2QGI1yhHkxHJxVk7c+
5EMr11YIKy895+Qy1tLYaDGNXC9O
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org