Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0583B126ABB311EEA99359BA775412E6.roa
File: 0583B126ABB311EEA99359BA775412E6.roa (raw, json)
Hash identifier: gYAQwSWArKBJopJ0VmpEXG3k/9s/VCIxUbIMx+kf+4I=
Subject key identifier: 39:F6:0A:D6:C8:4E:EC:4C:21:69:FF:5B:D1:11:E8:77:51:F0:3D:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5C9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0583B126ABB311EEA99359BA775412E6.roa
Signing time: Fri 05 Jan 2024 10:13:08 +0000
ROA not before: Fri 05 Jan 2024 10:13:04 +0000
ROA not after: Thu 12 Dec 2024 10:13:04 +0000
asID: 4809
IP address blocks: 156.242.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23709 (0x5c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 5 10:13:04 2024 GMT
Not After : Dec 12 10:13:04 2024 GMT
Subject: CN=6597d633-e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:94:95:07:59:6b:63:6b:34:ff:97:fa:9c:
ff:1e:a0:6d:3b:2b:33:bf:86:78:36:7e:d5:5a:5e:
aa:1a:96:72:3d:d9:09:e8:32:8e:e8:db:55:df:e5:
34:3a:46:bd:56:3b:ab:c4:d0:92:f4:16:d0:30:cf:
eb:2a:a5:ad:40:d4:e4:72:06:83:95:5f:7d:2d:aa:
ce:ec:1f:cf:18:18:98:d8:1f:c7:a8:aa:16:44:9a:
24:ed:88:e9:a5:d6:5b:62:31:ca:99:0c:fd:b4:9c:
a1:dc:3a:49:78:cd:86:a6:1a:13:70:0b:78:10:3a:
c4:3c:bc:80:5a:16:32:d7:8d:3f:df:32:33:e7:0a:
c6:e6:21:7e:6c:94:fc:ac:0a:a9:fc:56:ae:58:81:
fa:63:74:50:c2:4f:a8:ef:97:eb:9b:34:98:18:65:
2a:9a:fd:79:80:b7:e3:ed:6a:34:13:8b:ac:35:c3:
c1:3e:f4:a4:7f:9b:b1:ba:ca:3c:f9:33:6a:41:8f:
d4:20:77:12:a6:64:23:a6:dc:2c:f8:71:c9:ff:65:
36:e5:d6:c0:ec:15:ba:52:66:89:52:ff:15:d4:ff:
bc:59:d1:24:7c:56:2c:fc:a5:a9:94:22:08:9a:c5:
4e:db:1d:3e:07:05:46:4b:f5:7e:f3:1c:19:72:7c:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F6:0A:D6:C8:4E:EC:4C:21:69:FF:5B:D1:11:E8:77:51:F0:3D:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0583B126ABB311EEA99359BA775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.8.0/24
Signature Algorithm: sha256WithRSAEncryption
79:da:72:68:52:56:a2:1b:65:dd:3c:83:da:b5:0e:ce:82:01:
c4:ee:c6:89:a8:ee:a5:92:28:6e:3c:8f:8a:c2:9e:59:d9:09:
ac:f1:6f:95:3a:81:0d:9f:99:6a:cd:22:ef:10:f8:81:f3:25:
6e:a1:a4:59:cf:38:75:dd:48:14:e8:80:d7:32:34:cc:7d:d9:
b5:98:27:ae:91:7c:22:f8:5a:46:a6:09:5d:92:90:e0:53:90:
2e:dd:f4:3c:e9:48:e5:31:33:ac:a4:00:1b:53:37:a7:a0:cf:
48:a5:ad:af:7c:c4:25:44:b5:e5:47:11:d3:99:c9:9d:42:6f:
7f:70:99:a9:62:32:fd:94:25:53:d8:f5:96:48:88:b0:d2:a9:
f2:dd:ac:05:e2:0b:80:27:c8:d9:0a:63:1f:08:80:9b:aa:c9:
02:71:2c:25:b9:35:bd:8d:16:2e:4e:0d:bc:58:e1:51:64:f9:
96:46:23:0f:8c:ae:67:63:5b:13:58:e7:5d:85:23:86:11:70:
e1:1e:12:2f:9c:08:7f:92:ed:8b:d5:18:96:e8:c4:fc:57:f6:
78:e3:89:36:12:da:e3:b7:c6:dd:a1:56:31:24:67:af:18:db:
a4:31:33:15:27:c5:44:85:42:91:d2:87:6c:01:84:c9:78:3b:
2f:e2:cb:5c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICXJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAxMDUxMDEzMDRaFw0yNDEyMTIxMDEzMDRaMBgxFjAU
BgNVBAMTDTY1OTdkNjMzLWU4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/zZSVB1lrY2s0/5f6nP8eoG07KzO/hng2ftVaXqoalnI92QnoMo7o21Xf
5TQ6Rr1WO6vE0JL0FtAwz+sqpa1A1ORyBoOVX30tqs7sH88YGJjYH8eoqhZEmiTt
iOml1ltiMcqZDP20nKHcOkl4zYamGhNwC3gQOsQ8vIBaFjLXjT/fMjPnCsbmIX5s
lPysCqn8Vq5YgfpjdFDCT6jvl+ubNJgYZSqa/XmAt+PtajQTi6w1w8E+9KR/m7G6
yjz5M2pBj9QgdxKmZCOm3Cz4ccn/ZTbl1sDsFbpSZolS/xXU/7xZ0SR8Viz8pamU
IgiaxU7bHT4HBUZL9X7zHBlyfEHhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOfYK
1shO7Ewhaf9b0RHod1HwPdEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzA1ODNCMTI2QUJCMzExRUVBOTkzNTlCQTc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8ggwDQYJKoZIhvcNAQELBQAD
ggEBAHnacmhSVqIbZd08g9q1Ds6CAcTuxomo7qWSKG48j4rCnlnZCazxb5U6gQ2f
mWrNIu8Q+IHzJW6hpFnPOHXdSBTogNcyNMx92bWYJ66RfCL4WkamCV2SkOBTkC7d
9DzpSOUxM6ykABtTN6egz0ilra98xCVEteVHEdOZyZ1Cb39wmaliMv2UJVPY9ZZI
iLDSqfLdrAXiC4AnyNkKYx8IgJuqyQJxLCW5Nb2NFi5ODbxY4VFk+ZZGIw+Mrmdj
WxNY512FI4YRcOEeEi+cCH+S7YvVGJboxPxX9njjiTYS2uO3xt2hVjEkZ68Y26Qx
MxUnxUSFQpHSh2wBhMl4Oy/iy1w=
-----END CERTIFICATE-----
Generated at Sun May 5 02:12:42 2024 by rpki-client on console-ams.rpki-client.org