Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF97A5A68C411EE9762B13D4AD9E6FC.roa
File: 0AF97A5A68C411EE9762B13D4AD9E6FC.roa (raw, json)
Hash identifier: oSLtYu1Y2MuFDYdIULnWWgJCFO5vl5s5unK/ilMubp0=
Subject key identifier: 09:E2:11:83:FA:E5:E0:72:88:51:B0:FB:07:F4:10:08:D6:09:20:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3E4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF97A5A68C411EE9762B13D4AD9E6FC.roa
Signing time: Thu 12 Oct 2023 05:56:10 +0000
ROA not before: Thu 12 Oct 2023 05:56:07 +0000
ROA not after: Tue 27 Aug 2024 05:56:07 +0000
asID: 138995
IP address blocks: 156.245.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15949 (0x3e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 05:56:07 2023 GMT
Not After : Aug 27 05:56:07 2024 GMT
Subject: CN=65278a7a-5014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:ad:a4:64:c7:80:d0:c8:6d:2a:7f:9b:f4:
70:5c:2d:71:f4:8f:3c:3a:bf:64:b0:a7:ee:8e:43:
d6:2c:df:2a:83:de:dd:94:84:3c:46:1a:c7:7c:c8:
b6:41:35:94:88:13:75:75:4d:41:1d:31:f5:72:11:
1e:0f:44:ec:7f:d1:77:4c:47:2e:d3:5b:32:c0:a8:
58:2d:09:93:c4:93:40:cd:f2:2a:64:83:ef:58:55:
a3:cf:85:3f:47:6a:d2:92:5f:d4:cb:d3:c6:20:e8:
7e:41:7d:a3:d0:e1:d3:1c:cc:04:34:ab:c2:c8:f7:
da:7e:88:93:c7:13:5f:02:ea:d1:bd:84:05:a3:cb:
66:53:23:d4:bc:5f:41:d0:ec:bc:65:eb:aa:bc:43:
2e:50:60:81:f8:fa:27:dd:ae:70:60:5b:d2:33:4a:
7a:6a:47:74:d5:76:5e:ec:15:32:63:51:1e:14:0d:
75:7e:d9:b9:32:0b:80:33:d3:76:dc:9a:c9:d5:0a:
8b:cd:3e:88:03:20:b5:eb:5b:da:6e:37:e4:10:bc:
64:58:c9:44:2a:f6:57:6d:68:78:60:20:24:16:fb:
7e:f8:16:1d:f6:86:fd:d2:86:e9:59:f3:37:fb:f0:
bd:25:91:db:ab:18:d6:10:92:52:7a:01:07:3e:a4:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:11:83:FA:E5:E0:72:88:51:B0:FB:07:F4:10:08:D6:09:20:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AF97A5A68C411EE9762B13D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.30.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cf:cd:0d:0c:af:a8:56:9f:0e:a0:96:0b:3a:5c:40:67:33:
23:fa:f2:9a:c3:5a:6f:48:f7:4a:cd:f1:62:c3:fc:74:77:13:
32:14:f8:c0:49:92:c9:6a:cc:dd:fd:c3:06:47:11:f7:af:67:
c0:ee:c8:ad:f3:97:38:28:a1:99:ec:53:82:57:2f:4e:8b:4c:
5e:7d:32:cb:55:16:3f:60:4a:3b:24:c9:79:5b:4a:4a:51:51:
e7:10:80:cf:09:4a:bb:d6:74:fc:a9:f2:42:27:3b:e0:ca:6e:
21:8e:8b:77:60:67:62:63:d9:71:0b:a0:ff:a8:cc:44:6a:8a:
4c:ec:0a:5b:24:2a:ef:ff:10:be:a1:81:c6:2f:1c:8d:ae:53:
31:39:ba:43:5e:02:37:1d:7a:48:b1:20:1e:11:4b:73:11:15:
05:9a:db:ad:c5:f2:a7:c0:af:ca:0b:d1:a7:2c:cb:06:77:bc:
82:36:bb:54:95:2e:41:40:47:59:0d:1e:dc:cf:96:23:6a:be:
66:d6:df:e4:b3:6c:56:51:5b:32:fd:cb:44:4b:64:8a:7c:a3:
ad:24:ee:09:95:c1:dc:92:f0:e3:b8:13:35:37:55:04:3b:68:
6b:e5:da:5c:e5:d4:c0:5d:3e:32:c3:40:03:8f:eb:60:e1:81:
06:1c:57:8e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICPk0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEwMTIwNTU2MDdaFw0yNDA4MjcwNTU2MDdaMBgxFjAU
BgNVBAMTDTY1Mjc4YTdhLTUwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA1q2kZMeA0MhtKn+b9HBcLXH0jzw6v2Swp+6OQ9Ys3yqD3t2UhDxGGsd8
yLZBNZSIE3V1TUEdMfVyER4PROx/0XdMRy7TWzLAqFgtCZPEk0DN8ipkg+9YVaPP
hT9HatKSX9TL08Yg6H5BfaPQ4dMczAQ0q8LI99p+iJPHE18C6tG9hAWjy2ZTI9S8
X0HQ7Lxl66q8Qy5QYIH4+ifdrnBgW9IzSnpqR3TVdl7sFTJjUR4UDXV+2bkyC4Az
03bcmsnVCovNPogDILXrW9puN+QQvGRYyUQq9ldtaHhgICQW+374Fh32hv3ShulZ
8zf78L0lkdurGNYQklJ6AQc+pMA3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCeIR
g/rl4HKIUbD7B/QQCNYJIBIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzBBRjk3QTVBNjhDNDExRUU5NzYyQjEzRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9R4wDQYJKoZIhvcNAQELBQAD
ggEBACPPzQ0Mr6hWnw6glgs6XEBnMyP68prDWm9I90rN8WLD/HR3EzIU+MBJkslq
zN39wwZHEfevZ8DuyK3zlzgooZnsU4JXL06LTF59MstVFj9gSjskyXlbSkpRUecQ
gM8JSrvWdPyp8kInO+DKbiGOi3dgZ2Jj2XELoP+ozERqikzsClskKu//EL6hgcYv
HI2uUzE5ukNeAjcdekixIB4RS3MRFQWa263F8qfAr8oL0acsywZ3vII2u1SVLkFA
R1kNHtzPliNqvmbW3+SzbFZRWzL9y0RLZIp8o60k7gmVwdyS8OO4EzU3VQQ7aGvl
2lzl1MBdPjLDQAOP62DhgQYcV44=
-----END CERTIFICATE-----
Generated at Sun May 5 02:33:12 2024 by rpki-client on console-fra.rpki-client.org