Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F48E509B7C11EFA9836487762E951A.roa
File: 14F48E509B7C11EFA9836487762E951A.roa (raw, json)
Hash identifier: 0F/Glq/o32sJ40nOhzt7TkAy/KS9w1yC0n5vks3oVcI=
Subject key identifier: D5:E0:59:47:E9:95:CB:AF:43:14:22:BE:E9:CB:E8:6B:9E:83:C9:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F48E509B7C11EFA9836487762E951A.roa
Signing time: Tue 05 Nov 2024 13:44:30 +0000
ROA not before: Tue 05 Nov 2024 13:44:26 +0000
ROA not after: Mon 13 Jan 2025 13:44:26 +0000
asID: 22773
IP address blocks: 156.236.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52849 (0xce71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:44:26 2024 GMT
Not After : Jan 13 13:44:26 2025 GMT
Subject: CN=672a213e-8ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:e4:d8:ae:10:2b:4a:68:73:96:b0:ed:b5:
e2:b2:66:e5:18:7f:4f:91:c8:ad:c3:fb:df:5f:02:
b2:bd:e1:8f:0a:5c:03:b8:e9:a3:3d:bc:9e:f7:04:
f9:19:b0:38:99:48:82:c9:f8:4e:0a:73:55:c4:99:
2c:14:7e:15:ed:69:96:ea:da:e1:da:37:4c:56:41:
dd:9e:9f:3d:ec:92:8b:6d:f5:9a:8a:79:3e:22:43:
ea:a0:d1:36:e0:74:d2:d2:75:85:60:d3:c2:a1:5f:
84:73:fb:3b:2f:2b:9f:65:27:b6:37:7a:c6:31:32:
0e:3c:7f:68:d0:bb:8e:3b:c2:cd:f9:fc:a2:ed:1c:
00:fd:53:dc:13:6d:7a:d3:8e:8c:78:c7:91:d7:05:
54:ed:88:e2:2f:78:d7:6a:cb:cc:76:89:35:ec:8d:
7a:f9:b5:5a:d9:76:fd:36:b6:7b:3c:12:2e:fa:5b:
11:b9:29:ea:b1:52:74:01:cc:a9:db:e2:f8:cf:f7:
d3:4e:a9:08:ca:00:80:d7:43:a3:99:c8:0f:40:0f:
2d:d0:a1:1a:0d:42:0e:ba:9b:49:d2:85:5a:80:d6:
e7:21:41:af:a0:7a:4c:f5:0f:a4:13:61:bf:8f:83:
9b:49:dc:13:e2:c5:4d:df:07:72:fe:23:ac:2e:cb:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:59:47:E9:95:CB:AF:43:14:22:BE:E9:CB:E8:6B:9E:83:C9:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F48E509B7C11EFA9836487762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.0.0/23
Signature Algorithm: sha256WithRSAEncryption
33:10:4d:70:99:c0:76:4e:23:d0:af:15:1b:99:4d:76:95:a6:
3e:b0:d7:bd:c7:12:d6:94:fc:26:96:f0:ba:7d:59:d2:b7:5f:
63:a2:ec:aa:5f:c4:3f:a9:eb:2f:07:1f:43:d7:8e:bc:1c:bf:
f6:9d:57:59:bf:18:5e:36:f6:3d:c8:44:cb:64:08:09:39:d0:
a4:0c:e3:50:40:93:f4:7a:62:82:37:45:3f:8e:72:27:c0:45:
9e:ca:a2:86:2b:a4:ed:7f:21:0d:ed:93:c5:03:27:62:a8:c7:
8c:c0:a9:d2:61:9a:ce:04:9b:e7:39:73:6b:d2:a3:6c:ff:ad:
33:17:ac:86:23:bf:f9:e1:69:84:4d:10:53:9b:e6:d3:94:e0:
5a:43:57:69:2c:ed:17:c1:28:9d:6f:2f:ed:1f:d9:8b:bf:f5:
ea:ed:6f:e1:e1:98:87:86:f5:44:f6:5e:46:57:51:ca:64:2c:
bd:07:7d:b8:49:0f:4b:73:38:e8:4e:ed:3b:ef:75:d4:73:1e:
c1:49:07:1e:34:ce:7c:de:5e:f7:69:90:c3:06:f9:15:02:db:
a5:6d:48:71:bc:95:5f:03:28:f5:84:7d:94:53:91:a9:a0:36:
bd:bc:67:fb:5f:c9:01:40:0d:a8:7d:f0:e4:5e:9d:11:88:21:
37:cb:7b:f3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAM5xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA1MTM0NDI2WhcNMjUwMTEzMTM0NDI2WjAYMRYw
FAYDVQQDEw02NzJhMjEzZS04YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvfvk2K4QK0poc5aw7bXismblGH9Pkcitw/vfXwKyveGPClwDuOmjPbye
9wT5GbA4mUiCyfhOCnNVxJksFH4V7WmW6trh2jdMVkHdnp897JKLbfWaink+IkPq
oNE24HTS0nWFYNPCoV+Ec/s7LyufZSe2N3rGMTIOPH9o0LuOO8LN+fyi7RwA/VPc
E216046MeMeR1wVU7YjiL3jXasvMdok17I16+bVa2Xb9NrZ7PBIu+lsRuSnqsVJ0
Acyp2+L4z/fTTqkIygCA10OjmcgPQA8t0KEaDUIOuptJ0oVagNbnIUGvoHpM9Q+k
E2G/j4ObSdwT4sVN3wdy/iOsLssCYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNXg
WUfplcuvQxQivunL6Gueg8l0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEY0OEU1MDlCN0MxMUVGQTk4MzY0ODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOwAMA0GCSqGSIb3DQEBCwUA
A4IBAQAzEE1wmcB2TiPQrxUbmU12laY+sNe9xxLWlPwmlvC6fVnSt19jouyqX8Q/
qesvBx9D1468HL/2nVdZvxheNvY9yETLZAgJOdCkDONQQJP0emKCN0U/jnInwEWe
yqKGK6TtfyEN7ZPFAydiqMeMwKnSYZrOBJvnOXNr0qNs/60zF6yGI7/54WmETRBT
m+bTlOBaQ1dpLO0XwSidby/tH9mLv/Xq7W/h4ZiHhvVE9l5GV1HKZCy9B324SQ9L
czjoTu0773XUcx7BSQceNM583l73aZDDBvkVAtulbUhxvJVfAyj1hH2UU5GpoDa9
vGf7X8kBQA2offDkXp0RiCE3y3vz
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:19 2024 by rpki-client on console-fra.rpki-client.org