Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03CD22B6A43E11EFAE3F8453762E951A.roa
File: 03CD22B6A43E11EFAE3F8453762E951A.roa (raw, json)
Hash identifier: Q9ZHR/alh0g1Z+stQu7lAqInTQRwzuM+zznEHr0+SsM=
Subject key identifier: 5F:2D:86:89:4A:EF:5B:DC:60:CB:3F:33:6E:33:BE:7C:38:71:F8:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D34C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03CD22B6A43E11EFAE3F8453762E951A.roa
Signing time: Sat 16 Nov 2024 17:12:53 +0000
ROA not before: Sat 16 Nov 2024 17:12:49 +0000
ROA not after: Tue 10 Dec 2024 17:12:49 +0000
asID: 64267
IP address blocks: 156.227.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54092 (0xd34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:12:49 2024 GMT
Not After : Dec 10 17:12:49 2024 GMT
Subject: CN=6738d295-420a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:82:02:b5:ab:fb:d8:02:5b:5c:1e:33:82:
87:e7:91:97:e0:5d:9d:2e:81:5e:fb:33:72:da:06:
8f:82:e2:b0:7a:9a:f4:65:52:d0:d4:3a:e3:8a:db:
f5:95:25:fe:5b:ed:a3:98:ef:60:a9:04:11:54:88:
fa:4b:92:15:63:67:b6:01:64:1a:6c:a8:b9:b4:6e:
dc:dd:05:cf:56:6f:85:ff:f8:8b:4c:fe:da:aa:4d:
a4:ea:4a:14:89:4c:40:56:ac:98:b9:f4:35:bd:c2:
2b:9d:36:fa:30:ed:d3:58:a4:b1:8a:ae:0c:30:e3:
5a:2d:7f:c1:4b:eb:58:3a:24:26:cd:16:4f:f5:ed:
8b:1e:1c:87:30:27:41:f6:80:01:a9:a1:97:d9:3e:
f8:4b:1d:f7:12:c9:4f:84:6c:a5:1e:cc:b6:34:40:
ad:e6:af:cf:2a:0d:01:01:87:cf:e7:e8:36:0b:5f:
c8:ce:92:c9:b2:3d:76:a5:52:83:d9:f0:1f:77:f7:
c3:a3:d5:b9:86:49:34:c9:1a:a6:7b:25:50:87:be:
8d:30:c6:29:c0:ee:0b:ea:c7:a8:43:a2:cc:fc:08:
fb:dc:f5:0f:65:0d:0a:19:b1:53:46:fa:0d:b4:75:
ae:4a:d4:ec:b7:33:fe:02:2c:38:ad:6d:da:f3:b9:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2D:86:89:4A:EF:5B:DC:60:CB:3F:33:6E:33:BE:7C:38:71:F8:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03CD22B6A43E11EFAE3F8453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.12.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f7:83:e7:4b:65:6b:8d:e4:8e:16:09:f6:f3:d4:61:53:8f:
d3:c5:46:b2:74:f8:9b:d7:45:0f:53:40:ca:6a:01:42:25:cb:
2d:8a:48:d6:90:b3:79:7d:b7:01:c7:9e:ed:b9:56:5c:8e:9e:
f5:b0:6d:f1:54:6a:6a:67:df:47:3b:d3:b8:52:70:ca:2f:4a:
a7:54:ad:01:e0:2b:34:58:22:41:1f:a9:da:58:a6:f5:2a:ac:
47:9d:df:52:a2:7f:32:62:94:d1:f9:58:89:a7:a1:33:b6:4b:
2a:ba:02:ff:5b:37:a9:ca:5c:c4:b7:fc:6c:cb:cc:a8:47:6f:
84:66:df:5a:32:ba:07:8f:c0:ee:0c:32:32:ac:a2:9a:b4:4b:
a4:c0:48:ef:78:38:cb:70:30:3b:b4:c5:f9:9d:7b:09:a8:ff:
6d:f6:20:c5:0a:09:b3:19:9d:73:88:46:07:3f:50:88:68:1e:
f6:e0:8e:03:b4:bb:eb:46:af:63:4e:13:43:3f:c1:25:b7:5a:
10:e7:c4:e3:ff:0e:87:28:d5:6f:a4:b7:be:4c:2a:32:89:c4:
0d:c2:34:d8:a7:eb:fb:36:69:90:6b:dc:61:dc:4e:3c:93:7d:
65:3a:96:e5:d0:63:2b:bc:3f:63:94:3e:ac:08:98:e2:e5:64:
a3:eb:11:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANNMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTcxMjQ5WhcNMjQxMjEwMTcxMjQ5WjAYMRYw
FAYDVQQDEw02NzM4ZDI5NS00MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsM2CArWr+9gCW1weM4KH55GX4F2dLoFe+zNy2gaPguKwepr0ZVLQ1Drj
itv1lSX+W+2jmO9gqQQRVIj6S5IVY2e2AWQabKi5tG7c3QXPVm+F//iLTP7aqk2k
6koUiUxAVqyYufQ1vcIrnTb6MO3TWKSxiq4MMONaLX/BS+tYOiQmzRZP9e2LHhyH
MCdB9oABqaGX2T74Sx33EslPhGylHsy2NECt5q/PKg0BAYfP5+g2C1/IzpLJsj12
pVKD2fAfd/fDo9W5hkk0yRqmeyVQh76NMMYpwO4L6seoQ6LM/Aj73PUPZQ0KGbFT
RvoNtHWuStTstzP+Aiw4rW3a87n1MQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF8t
holK71vcYMs/M24zvnw4cfjeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wM0NEMjJCNkE0M0UxMUVGQUUzRjg0NTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOMMMA0GCSqGSIb3DQEBCwUA
A4IBAQBz94PnS2VrjeSOFgn289RhU4/TxUaydPib10UPU0DKagFCJcstikjWkLN5
fbcBx57tuVZcjp71sG3xVGpqZ99HO9O4UnDKL0qnVK0B4Cs0WCJBH6naWKb1KqxH
nd9Son8yYpTR+ViJp6EztksqugL/WzepylzEt/xsy8yoR2+EZt9aMroHj8DuDDIy
rKKatEukwEjveDjLcDA7tMX5nXsJqP9t9iDFCgmzGZ1ziEYHP1CIaB724I4DtLvr
Rq9jThNDP8Elt1oQ58Tj/w6HKNVvpLe+TCoyicQNwjTYp+v7NmmQa9xh3E48k31l
Opbl0GMrvD9jlD6sCJji5WSj6xG7
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org