Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/117C41B2960611EFB286AA91762E951A.roa
File: 117C41B2960611EFB286AA91762E951A.roa (raw, json)
Hash identifier: k4YE65R2bmVUhrEbtUVHq8P6XYPPlEEdRdrVwEQTUXg=
Subject key identifier: 36:02:9C:29:86:2C:FA:B4:3F:7D:57:B1:44:79:0A:54:9D:F6:3B:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/117C41B2960611EFB286AA91762E951A.roa
Signing time: Tue 29 Oct 2024 14:57:08 +0000
ROA not before: Tue 29 Oct 2024 14:57:04 +0000
ROA not after: Sun 24 Nov 2024 14:57:04 +0000
asID: 59187
IP address blocks: 156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51726 (0xca0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 14:57:04 2024 GMT
Not After : Nov 24 14:57:04 2024 GMT
Subject: CN=6720f7c4-1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:09:9a:78:6e:a4:dd:dd:9f:84:7d:17:04:
63:15:3b:5f:70:58:da:e8:76:e2:da:bb:39:7d:7b:
29:8b:12:d1:0c:35:af:3e:02:b2:73:c0:a6:51:31:
c3:45:e5:87:2c:59:f7:1b:7b:bd:94:32:20:93:03:
2e:bf:3d:93:fa:6e:2f:c9:41:12:9b:71:4e:b5:9b:
5a:35:c7:4c:7a:b9:eb:4c:aa:24:2c:68:82:8b:56:
c4:18:a0:ff:ae:1c:8c:9f:94:90:8e:c5:46:a7:e1:
3e:44:a4:fc:ae:2e:a0:1e:32:c0:58:fc:9a:1c:e3:
86:03:55:aa:6b:34:30:c3:d5:cb:84:36:58:99:12:
5c:b8:64:93:a7:95:09:11:9f:d5:6c:44:6a:2f:9d:
c3:48:ea:f5:81:0f:db:5e:a2:cc:88:85:31:bd:09:
a2:28:a8:a8:e7:b8:f0:19:a2:99:c5:c4:9c:34:d9:
d4:fa:bf:b2:ef:e3:78:0d:71:32:a4:c1:a2:ec:e2:
66:82:0e:ac:c7:34:09:00:04:66:b7:d8:17:ed:79:
18:59:b8:c9:f2:86:9c:68:c6:13:a2:cf:43:e1:91:
cd:5e:ca:78:ba:ad:17:9a:94:24:68:b8:cb:81:09:
b3:6c:7a:05:a7:69:cf:15:bb:8c:71:00:be:54:e0:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:9C:29:86:2C:FA:B4:3F:7D:57:B1:44:79:0A:54:9D:F6:3B:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/117C41B2960611EFB286AA91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:8e:7d:80:6b:c1:06:4a:de:a1:83:11:ae:4a:57:f5:66:37:
df:69:34:f3:7a:51:0e:15:e8:d4:26:e0:1a:53:ac:09:52:f8:
c8:66:ec:6a:37:13:bc:c0:fe:19:20:1b:86:f8:59:e1:08:92:
50:4c:e1:5c:cb:77:15:f8:bb:82:7b:5a:0d:f9:06:13:e5:0d:
df:cb:16:57:c3:c4:a5:41:e9:b6:cf:e3:65:64:4e:29:52:01:
60:6a:2f:df:ec:26:c4:e5:27:3c:84:25:60:af:11:8d:8f:29:
28:f3:04:c4:82:56:52:9b:05:aa:23:74:9a:17:99:e9:a7:d9:
e0:1f:ad:d3:ff:4f:34:96:0a:04:83:4c:1d:dd:75:98:e6:b4:
50:d7:ec:f2:89:f0:69:5f:9e:e1:18:9b:a3:70:1f:08:5b:5f:
8f:88:6d:9d:f5:08:a3:89:a0:50:9a:af:2a:c8:6b:27:1b:03:
d9:2e:fa:fd:b3:25:00:20:8d:e5:44:34:bb:f1:0b:71:d6:b6:
f6:e6:a1:50:66:0b:f9:6a:bc:44:48:a0:9e:c0:03:80:58:7b:
0a:c3:35:fd:40:51:8a:e3:56:7f:86:26:e0:7c:d7:13:2c:80:
13:63:cc:66:90:49:1e:ba:53:0a:ab:d3:92:1b:eb:62:e7:cf:
07:bc:b1:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMoOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI5MTQ1NzA0WhcNMjQxMTI0MTQ1NzA0WjAYMRYw
FAYDVQQDEw02NzIwZjdjNC0xNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAleMJmnhupN3dn4R9FwRjFTtfcFja6Hbi2rs5fXspixLRDDWvPgKyc8Cm
UTHDReWHLFn3G3u9lDIgkwMuvz2T+m4vyUESm3FOtZtaNcdMernrTKokLGiCi1bE
GKD/rhyMn5SQjsVGp+E+RKT8ri6gHjLAWPyaHOOGA1WqazQww9XLhDZYmRJcuGST
p5UJEZ/VbERqL53DSOr1gQ/bXqLMiIUxvQmiKKio57jwGaKZxcScNNnU+r+y7+N4
DXEypMGi7OJmgg6sxzQJAARmt9gX7XkYWbjJ8oacaMYTos9D4ZHNXsp4uq0XmpQk
aLjLgQmzbHoFp2nPFbuMcQC+VOAuIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDYC
nCmGLPq0P31XsUR5ClSd9jv+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMTdDNDFCMjk2MDYxMUVGQjI4NkFBOTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5kMA0GCSqGSIb3DQEBCwUA
A4IBAQAtjn2Aa8EGSt6hgxGuSlf1ZjffaTTzelEOFejUJuAaU6wJUvjIZuxqNxO8
wP4ZIBuG+FnhCJJQTOFcy3cV+LuCe1oN+QYT5Q3fyxZXw8SlQem2z+NlZE4pUgFg
ai/f7CbE5Sc8hCVgrxGNjyko8wTEglZSmwWqI3SaF5npp9ngH63T/080lgoEg0wd
3XWY5rRQ1+zyifBpX57hGJujcB8IW1+PiG2d9QijiaBQmq8qyGsnGwPZLvr9syUA
II3lRDS78Qtx1rb25qFQZgv5arxESKCewAOAWHsKwzX9QFGK41Z/hibgfNcTLIAT
Y8xmkEkeulMKq9OSG+ti588HvLFL
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org