Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10FCE448769011EFB9F2F74F762E951A.roa
File: 10FCE448769011EFB9F2F74F762E951A.roa (raw, json)
Hash identifier: ciCwuWmPfTX0zbyQIWYDGUqhtDvvWE2JFCHok93C6P8=
Subject key identifier: EA:F8:32:34:76:C2:22:54:97:7C:26:15:F0:98:37:B1:17:8A:1B:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B857
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10FCE448769011EFB9F2F74F762E951A.roa
Signing time: Thu 19 Sep 2024 14:04:20 +0000
ROA not before: Thu 19 Sep 2024 14:04:17 +0000
ROA not after: Sat 13 Sep 2025 14:04:17 +0000
asID: 24875
IP address blocks: 156.225.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47191 (0xb857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 14:04:17 2024 GMT
Not After : Sep 13 14:04:17 2025 GMT
Subject: CN=66ec2f64-46c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:56:bd:fc:8d:7d:1c:1c:b0:73:02:90:f5:
15:99:54:9c:a1:04:7e:00:55:77:21:db:63:de:c5:
0c:66:3b:70:12:4e:1b:4d:7a:11:ae:10:c6:48:b3:
c8:17:f4:56:69:13:ee:ff:f8:0d:57:d6:f4:e8:de:
dc:05:43:26:bc:18:d1:fb:95:09:21:44:ac:cc:e1:
38:52:d4:23:12:a1:bd:83:03:fd:4f:32:0d:74:30:
33:85:62:cb:1b:3c:b2:4e:2b:d6:27:37:34:c9:b5:
a6:3e:7a:17:a2:36:7e:3a:c1:f3:bd:13:2d:be:e8:
02:89:31:d9:e1:76:c1:20:09:c3:71:b4:f5:d5:00:
81:74:5b:a3:0a:7a:e4:a3:74:4d:8f:f6:d9:a2:46:
1a:a8:5f:61:4d:e0:6c:31:fc:bf:8c:0f:44:38:26:
77:88:ba:89:d0:b7:cf:3b:45:96:8b:9f:6a:c6:0c:
90:fe:37:8e:39:10:37:98:bd:e2:32:d9:80:56:4b:
d7:69:ed:a5:f9:f4:68:dd:8c:03:4d:0f:7f:76:c4:
f6:b6:29:d8:98:2b:0a:58:7e:4f:0d:83:77:55:cc:
88:75:66:0b:0a:6b:ac:29:5b:46:57:13:a1:cb:63:
80:db:0c:e0:f9:ee:54:4c:64:16:d4:47:5f:03:30:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:32:34:76:C2:22:54:97:7C:26:15:F0:98:37:B1:17:8A:1B:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10FCE448769011EFB9F2F74F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:63:42:a0:b9:e2:1b:e4:95:9c:46:cf:e1:ef:06:1c:a1:68:
91:0f:39:4a:1c:e8:43:ed:bd:c3:5f:a3:8c:97:d5:db:9d:91:
b3:c0:56:43:22:0f:1a:35:19:ae:73:5e:f9:0f:b2:af:61:52:
c1:07:27:3b:47:5a:57:dd:63:d1:bb:4c:22:42:00:5c:14:81:
12:74:5f:8d:03:9e:a3:b8:6b:e7:32:ac:77:5f:a1:76:4f:50:
c7:6d:ef:6f:1f:50:13:c0:0a:eb:5a:da:e3:ad:a6:97:fd:f6:
10:0a:4f:3a:fe:2b:0e:e4:5f:27:ae:d7:6d:72:b5:b3:92:54:
d3:b8:b8:e9:49:9a:0b:90:33:86:b4:c8:e7:7f:7e:c5:dd:03:
69:97:0d:ef:39:bc:c4:8d:cf:54:45:7c:0b:f9:0c:62:be:e0:
2d:0c:d6:32:7f:a6:72:31:84:28:a3:9d:2d:97:7b:f3:1c:16:
6e:40:a2:2f:57:09:2c:74:e7:c8:c2:20:95:56:ca:c8:18:81:
4c:41:0e:0e:f3:49:dc:9c:c5:f9:39:4e:cc:9f:5c:4f:6e:ab:
b0:7a:64:b7:de:d3:e9:41:44:e9:f3:96:46:f7:d2:84:09:f5:
bc:86:2f:40:57:32:b2:dd:b9:54:d7:85:d2:d2:04:d0:fd:6a:
f3:9f:a6:1b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALhXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE5MTQwNDE3WhcNMjUwOTEzMTQwNDE3WjAYMRYw
FAYDVQQDEw02NmVjMmY2NC00NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbpWvfyNfRwcsHMCkPUVmVScoQR+AFV3Idtj3sUMZjtwEk4bTXoRrhDG
SLPIF/RWaRPu//gNV9b06N7cBUMmvBjR+5UJIUSszOE4UtQjEqG9gwP9TzINdDAz
hWLLGzyyTivWJzc0ybWmPnoXojZ+OsHzvRMtvugCiTHZ4XbBIAnDcbT11QCBdFuj
Cnrko3RNj/bZokYaqF9hTeBsMfy/jA9EOCZ3iLqJ0LfPO0WWi59qxgyQ/jeOORA3
mL3iMtmAVkvXae2l+fRo3YwDTQ9/dsT2tinYmCsKWH5PDYN3VcyIdWYLCmusKVtG
VxOhy2OA2wzg+e5UTGQW1EdfAzDRlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOr4
MjR2wiJUl3wmFfCYN7EXihufMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMEZDRTQ0ODc2OTAxMUVGQjlGMkY3NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFDMA0GCSqGSIb3DQEBCwUA
A4IBAQBOY0KgueIb5JWcRs/h7wYcoWiRDzlKHOhD7b3DX6OMl9XbnZGzwFZDIg8a
NRmuc175D7KvYVLBByc7R1pX3WPRu0wiQgBcFIESdF+NA56juGvnMqx3X6F2T1DH
be9vH1ATwArrWtrjraaX/fYQCk86/isO5F8nrtdtcrWzklTTuLjpSZoLkDOGtMjn
f37F3QNplw3vObzEjc9URXwL+QxivuAtDNYyf6ZyMYQoo50tl3vzHBZuQKIvVwks
dOfIwiCVVsrIGIFMQQ4O80ncnMX5OU7Mn1xPbquwemS33tPpQUTp85ZG99KECfW8
hi9AVzKy3blU14XS0gTQ/Wrzn6Yb
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org