Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CDEA5CAFEA211ED92B1066C4AD9E6FC.roa
File: 0CDEA5CAFEA211ED92B1066C4AD9E6FC.roa (raw, json)
Hash identifier: hPdVcA8nDQSGV2wZT8OzFewSndebdpFx7S3imVKwh7I=
Subject key identifier: EE:02:D8:E1:A3:19:1A:75:2E:25:53:D9:84:43:61:EF:14:E9:1D:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2839
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CDEA5CAFEA211ED92B1066C4AD9E6FC.roa
Signing time: Tue 30 May 2023 04:25:47 +0000
ROA not before: Tue 30 May 2023 04:25:44 +0000
ROA not after: Wed 15 May 2024 04:25:44 +0000
asID: 63888
IP address blocks: 156.255.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10297 (0x2839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 04:25:44 2023 GMT
Not After : May 15 04:25:44 2024 GMT
Subject: CN=64757acb-850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:0c:c4:dc:ce:f5:c5:c3:6a:82:ca:07:8d:
a8:05:64:50:a1:ed:27:82:90:4a:75:3c:ff:2f:5a:
63:44:23:de:53:69:07:83:63:67:74:9c:01:39:e0:
b9:be:ce:7d:40:ca:e8:94:c5:e7:63:5c:03:00:02:
0c:e1:dd:6b:99:9f:e5:47:a0:4f:a6:5b:ff:bf:3f:
61:be:da:7b:c1:47:02:01:f4:ee:69:83:8f:14:a4:
8c:d0:a3:cd:ce:57:b4:ca:4b:e6:d1:b7:ca:ed:c1:
5d:92:cb:ad:ab:0e:12:f7:db:d6:18:75:cd:e4:d8:
fe:bd:c0:5d:0b:e3:37:db:9d:6e:c7:fc:9e:3c:fc:
c2:75:94:27:78:75:d4:51:c5:72:69:13:82:88:e3:
2f:78:03:5d:2d:cc:e8:5f:5b:3d:c3:49:d1:d6:5a:
ad:70:0f:da:ac:da:fc:35:2d:81:4d:4c:0f:58:b3:
03:fd:9b:aa:0b:61:ca:0d:05:9a:85:32:ae:9f:8e:
a3:73:33:e7:1d:41:18:1b:1c:85:4e:d8:fd:90:c5:
fc:ed:74:5d:3e:a5:33:88:11:7f:92:03:5c:ca:a0:
5b:8d:8c:21:7d:63:88:2d:58:1f:d0:7f:a4:e4:76:
be:aa:22:b6:50:53:a3:c2:ca:9d:09:eb:3f:4b:1a:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:02:D8:E1:A3:19:1A:75:2E:25:53:D9:84:43:61:EF:14:E9:1D:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CDEA5CAFEA211ED92B1066C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.69.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ae:32:ea:03:0e:59:15:5d:2b:73:cf:5d:35:17:cc:ee:e1:
fd:1f:98:f6:06:c1:d4:03:40:fc:e9:53:6f:44:9d:fa:25:c8:
b5:77:6a:f9:6a:4c:54:c6:d2:cb:d7:7b:67:ea:88:61:a9:28:
6f:a6:d1:04:9a:7c:92:3a:96:85:6c:dd:ac:f5:84:8f:0a:53:
a2:5b:9d:58:8a:37:c4:a2:b0:24:7b:a1:14:5f:a9:41:19:02:
c2:91:ea:cd:e1:db:93:b4:fe:34:c1:3e:62:3a:88:d9:64:9c:
33:4b:1b:de:6f:68:98:db:e8:46:7d:3f:41:70:e3:4f:c0:2b:
6c:37:81:13:7c:3e:09:29:76:3c:15:de:f3:63:3a:07:ae:41:
7d:e6:70:b7:0d:fc:d0:37:cd:0b:fa:20:f6:fd:14:7c:bd:e9:
7b:51:da:c8:f2:1b:2d:66:66:91:51:79:3a:f4:0b:82:b7:66:
e1:eb:4b:d5:8f:06:bb:66:54:c7:43:28:8d:45:4f:04:ed:2a:
b6:1b:da:ab:3d:48:13:c9:f5:65:dd:88:0c:6c:5e:4a:e0:20:
74:d3:d9:3a:e7:8d:e7:65:43:cf:17:56:de:33:dd:7e:07:ce:
c5:71:0f:ab:7c:53:80:da:de:64:d3:3a:e1:f6:0a:7b:55:92:
16:18:90:85
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICKDkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MzAwNDI1NDRaFw0yNDA1MTUwNDI1NDRaMBgxFjAU
BgNVBAMTDTY0NzU3YWNiLTg1MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVbgzE3M71xcNqgsoHjagFZFCh7SeCkEp1PP8vWmNEI95TaQeDY2d0nAE5
4Lm+zn1AyuiUxedjXAMAAgzh3WuZn+VHoE+mW/+/P2G+2nvBRwIB9O5pg48UpIzQ
o83OV7TKS+bRt8rtwV2Sy62rDhL329YYdc3k2P69wF0L4zfbnW7H/J48/MJ1lCd4
ddRRxXJpE4KI4y94A10tzOhfWz3DSdHWWq1wD9qs2vw1LYFNTA9YswP9m6oLYcoN
BZqFMq6fjqNzM+cdQRgbHIVO2P2QxfztdF0+pTOIEX+SA1zKoFuNjCF9Y4gtWB/Q
f6Tkdr6qIrZQU6PCyp0J6z9LGi2ZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU7gLY
4aMZGnUuJVPZhENh7xTpHa0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzBDREVBNUNBRkVBMjExRUQ5MkIxMDY2QzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/0UwDQYJKoZIhvcNAQELBQAD
ggEBAJGuMuoDDlkVXStzz101F8zu4f0fmPYGwdQDQPzpU29EnfolyLV3avlqTFTG
0svXe2fqiGGpKG+m0QSafJI6loVs3az1hI8KU6JbnViKN8SisCR7oRRfqUEZAsKR
6s3h25O0/jTBPmI6iNlknDNLG95vaJjb6EZ9P0Fw40/AK2w3gRN8PgkpdjwV3vNj
OgeuQX3mcLcN/NA3zQv6IPb9FHy96XtR2sjyGy1mZpFReTr0C4K3ZuHrS9WPBrtm
VMdDKI1FTwTtKrYb2qs9SBPJ9WXdiAxsXkrgIHTT2TrnjedlQ88XVt4z3X4HzsVx
D6t8U4Da3mTTOuH2CntVkhYYkIU=
-----END CERTIFICATE-----
Generated at Tue May 7 02:00:43 2024 by rpki-client on console-ams.rpki-client.org