Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15384CF4278211EEA4F7DE1D4AD9E6FC.roa
File: 15384CF4278211EEA4F7DE1D4AD9E6FC.roa (raw, json)
Hash identifier: FRJvKuQrtMXl8rt94s7tZx1qqxy2r6jmEdHwsniiXEM=
Subject key identifier: B4:27:50:D9:D2:D9:80:1A:20:A7:F8:73:3F:0D:D5:94:20:EE:E9:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15384CF4278211EEA4F7DE1D4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:50:15 +0000
ROA not before: Fri 21 Jul 2023 04:50:11 +0000
ROA not after: Thu 13 Jun 2024 04:50:11 +0000
asID: 5065
IP address blocks: 156.233.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12755 (0x31d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:50:11 2023 GMT
Not After : Jun 13 04:50:11 2024 GMT
Subject: CN=64ba0e87-5373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:d0:e5:9d:76:3b:08:1c:14:68:28:b1:bb:
7c:2d:f4:be:3a:20:52:18:ca:57:68:b8:37:2e:cd:
93:7f:5f:b4:51:47:7f:18:f0:ef:91:9e:cd:d0:26:
1d:d6:93:a8:49:08:34:1a:37:f2:b8:b1:38:94:a7:
0c:a2:98:5a:07:61:55:07:8d:76:89:96:b0:8e:2d:
4c:1b:dc:eb:62:4b:28:e8:2c:73:22:5c:8a:75:c4:
8c:c1:ff:68:08:6c:c0:3e:a6:6e:38:2e:63:74:b2:
b2:e0:ba:22:cd:69:97:f6:2d:31:92:ae:f1:26:ae:
b3:03:0b:41:f4:f4:eb:7d:5b:b8:1d:97:3b:7d:1e:
4c:70:45:2b:78:9f:f0:c0:4b:25:e4:92:65:50:03:
0d:e1:db:51:a0:8d:90:17:d8:39:b0:ee:de:86:ce:
2b:18:0a:49:40:c2:e2:f8:13:90:d5:4f:cb:e7:ff:
94:c0:1e:c1:ff:b7:c9:f9:91:c4:37:19:00:90:d0:
cd:17:59:2a:91:82:d7:82:bc:1e:b4:b3:8e:a9:e0:
9b:2d:f6:95:85:30:9a:51:df:81:4a:b8:ba:05:f2:
03:9a:d3:ee:16:80:9b:db:73:34:f7:94:1a:a1:34:
68:e7:5d:b8:11:96:5c:12:e4:07:02:4c:4c:99:a1:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:50:D9:D2:D9:80:1A:20:A7:F8:73:3F:0D:D5:94:20:EE:E9:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15384CF4278211EEA4F7DE1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:65:0d:c5:c1:17:f8:17:a7:53:7d:de:51:d9:b2:59:ff:a4:
ec:d4:22:b7:93:0c:da:6f:d8:95:cc:ea:d2:2c:73:1d:d6:57:
dc:af:ee:1a:d4:e0:4a:2a:7e:c4:77:58:14:e1:9f:61:e8:b8:
b5:ee:ff:0f:60:c5:84:90:69:f2:cc:74:17:4f:b0:bd:1d:bf:
9a:96:60:a6:34:d9:00:c7:84:d8:4b:ea:5c:98:9f:09:dd:15:
ba:3c:1d:c8:9e:d6:8d:ac:da:9a:34:46:44:93:7a:2b:33:de:
e7:ae:33:d1:73:81:14:b0:b6:61:8a:ec:b7:ce:bf:30:71:fe:
5d:1e:1b:db:6d:b1:bd:80:f1:18:4b:5a:cd:b9:df:d8:8b:41:
18:50:49:d9:7c:f4:18:4e:f2:95:40:9b:24:fc:0c:7f:83:55:
2a:81:fc:52:4f:df:1f:a6:2c:c3:4d:51:a9:97:ce:83:9e:15:
57:2a:37:2c:e4:b9:2e:14:31:66:eb:51:39:07:12:95:dc:30:
8e:ba:44:d4:63:59:b8:f8:7f:f7:87:6f:3d:b1:fa:2f:58:6e:
02:b4:4f:66:2c:f2:f6:c0:cc:e3:97:7a:b7:59:ec:94:37:2d:
43:1d:2c:f5:91:d6:4b:55:78:16:4f:c3:f3:3d:27:e2:69:f3:
78:f1:aa:89
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICMdMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA3MjEwNDUwMTFaFw0yNDA2MTMwNDUwMTFaMBgxFjAU
BgNVBAMTDTY0YmEwZTg3LTUzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQx9DlnXY7CBwUaCixu3wt9L46IFIYyldouDcuzZN/X7RRR38Y8O+Rns3Q
Jh3Wk6hJCDQaN/K4sTiUpwyimFoHYVUHjXaJlrCOLUwb3OtiSyjoLHMiXIp1xIzB
/2gIbMA+pm44LmN0srLguiLNaZf2LTGSrvEmrrMDC0H09Ot9W7gdlzt9HkxwRSt4
n/DASyXkkmVQAw3h21GgjZAX2Dmw7t6GzisYCklAwuL4E5DVT8vn/5TAHsH/t8n5
kcQ3GQCQ0M0XWSqRgteCvB60s46p4Jst9pWFMJpR34FKuLoF8gOa0+4WgJvbczT3
lBqhNGjnXbgRllwS5AcCTEyZoXz1AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUtCdQ
2dLZgBogp/hzPw3VlCDu6eAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzE1Mzg0Q0Y0Mjc4MjExRUVBNEY3REUxRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc6RQwDQYJKoZIhvcNAQELBQAD
ggEBAExlDcXBF/gXp1N93lHZsln/pOzUIreTDNpv2JXM6tIscx3WV9yv7hrU4Eoq
fsR3WBThn2HouLXu/w9gxYSQafLMdBdPsL0dv5qWYKY02QDHhNhL6lyYnwndFbo8
Hcie1o2s2po0RkSTeisz3ueuM9FzgRSwtmGK7LfOvzBx/l0eG9ttsb2A8RhLWs25
39iLQRhQSdl89BhO8pVAmyT8DH+DVSqB/FJP3x+mLMNNUamXzoOeFVcqNyzkuS4U
MWbrUTkHEpXcMI66RNRjWbj4f/eHbz2x+i9YbgK0T2Ys8vbAzOOXerdZ7JQ3LUMd
LPWR1ktVeBZPw/M9J+Jp83jxqok=
-----END CERTIFICATE-----
Generated at Sun May 5 02:33:13 2024 by rpki-client on console-fra.rpki-client.org