Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/185FCA12FBBF11EEA7BA0E3A017001B1.roa
File: 185FCA12FBBF11EEA7BA0E3A017001B1.roa (raw, json)
Hash identifier: SMcgLOq3/UTgNDtbIwBpqjNq4/WYedF82L0DgDtfwBQ=
Subject key identifier: DA:32:42:93:69:95:32:22:B3:80:0F:3C:07:42:A2:7A:6D:CA:83:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/185FCA12FBBF11EEA7BA0E3A017001B1.roa
Signing time: Tue 16 Apr 2024 07:01:06 +0000
ROA not before: Tue 16 Apr 2024 07:01:03 +0000
ROA not after: Wed 22 May 2024 07:01:03 +0000
asID: 141167
IP address blocks: 156.228.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33499 (0x82db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 07:01:03 2024 GMT
Not After : May 22 07:01:03 2024 GMT
Subject: CN=661e2232-f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:8a:70:72:6d:3c:a7:80:52:4b:4e:72:fd:
c4:e1:28:79:f0:fe:77:d5:e7:c5:e9:54:94:d9:c5:
fd:36:a7:f2:07:45:5a:15:5f:d9:ba:38:da:b2:0b:
46:ac:26:06:ab:3a:bc:66:70:b0:3f:9c:f1:ff:42:
89:d3:ee:cc:a3:f3:46:5b:c5:d4:73:2f:0e:e3:ae:
b3:a2:66:f8:66:33:b4:b5:07:29:55:11:76:3d:e6:
87:7f:39:3b:4d:be:6d:4a:d5:44:f8:ba:d7:ea:5d:
69:a5:18:d6:76:6c:19:7f:0b:d7:9a:9d:05:94:49:
61:dd:96:a7:75:92:6b:37:20:b1:1e:1b:73:09:5c:
da:01:b5:3e:2e:ee:aa:d6:90:ea:12:0b:cc:73:3a:
d0:79:5e:95:92:b2:e2:5c:48:73:40:b0:4c:13:2e:
d1:8a:8e:78:59:cc:07:21:26:a7:fe:83:dd:f0:0c:
fe:2b:93:aa:48:99:85:40:18:61:2e:f9:c4:f1:97:
3b:19:6d:7a:6d:21:f7:94:5c:37:65:dd:90:7d:ae:
5a:e7:d7:8c:f7:ce:b1:4e:7e:82:ee:ec:27:2f:c8:
7b:fd:6a:55:78:8e:9f:af:b2:17:28:34:9e:f9:24:
71:3b:cd:75:90:44:7c:b1:26:9b:a8:1b:08:13:50:
59:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:42:93:69:95:32:22:B3:80:0F:3C:07:42:A2:7A:6D:CA:83:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/185FCA12FBBF11EEA7BA0E3A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:64:1a:55:93:6b:af:9d:36:72:94:21:69:50:84:52:79:20:
6a:3a:b4:46:21:b4:90:1d:3d:c0:8e:c6:a1:9d:74:09:fc:49:
fa:19:00:c3:29:92:1f:79:4e:db:d1:16:a3:7e:8a:df:2f:53:
0f:30:54:b5:ae:15:ea:8c:ef:55:69:70:75:c6:0a:e1:3e:4f:
ac:0c:64:50:45:ae:e4:e6:5f:16:af:f7:9a:fd:bf:96:64:54:
0c:e1:4f:88:d8:2c:95:84:19:b8:3d:fa:7f:c6:08:bf:6a:0a:
47:c3:f2:c1:11:b1:2b:f1:f5:e6:c3:77:a7:d5:eb:81:04:b2:
03:36:54:db:89:ff:01:9b:e4:f6:46:74:84:61:61:50:fc:5d:
b4:c7:ce:f7:28:d4:b7:13:26:b2:91:0d:be:2e:54:6e:af:41:
66:fa:64:b5:35:ce:27:55:e2:73:bd:3d:df:bb:09:cc:b5:c0:
64:ec:52:33:83:25:03:ce:ef:8e:1d:64:b7:b6:1b:3d:a5:31:
81:20:bc:52:37:c9:01:50:e9:97:ec:bf:78:26:78:f5:0c:af:
65:38:93:94:3e:52:ff:dd:99:fc:b7:fe:b7:80:a9:e7:af:38:
8c:f7:e6:c0:22:2f:91:19:8a:11:85:11:a2:81:e3:b9:b9:d2:
ef:5e:62:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAILbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE2MDcwMTAzWhcNMjQwNTIyMDcwMTAzWjAYMRYw
FAYDVQQDEw02NjFlMjIzMi1mODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvqmKcHJtPKeAUktOcv3E4Sh58P531efF6VSU2cX9NqfyB0VaFV/Zujja
sgtGrCYGqzq8ZnCwP5zx/0KJ0+7Mo/NGW8XUcy8O466zomb4ZjO0tQcpVRF2PeaH
fzk7Tb5tStVE+LrX6l1ppRjWdmwZfwvXmp0FlElh3ZandZJrNyCxHhtzCVzaAbU+
Lu6q1pDqEgvMczrQeV6VkrLiXEhzQLBMEy7Rio54WcwHISan/oPd8Az+K5OqSJmF
QBhhLvnE8Zc7GW16bSH3lFw3Zd2Qfa5a59eM986xTn6C7uwnL8h7/WpVeI6fr7IX
KDSe+SRxO811kER8sSabqBsIE1BZUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNoy
QpNplTIis4APPAdConptyoN8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xODVGQ0ExMkZCQkYxMUVFQTdCQTBFM0EwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQDMA0GCSqGSIb3DQEBCwUA
A4IBAQCnZBpVk2uvnTZylCFpUIRSeSBqOrRGIbSQHT3AjsahnXQJ/En6GQDDKZIf
eU7b0RajforfL1MPMFS1rhXqjO9VaXB1xgrhPk+sDGRQRa7k5l8Wr/ea/b+WZFQM
4U+I2CyVhBm4Pfp/xgi/agpHw/LBEbEr8fXmw3en1euBBLIDNlTbif8Bm+T2RnSE
YWFQ/F20x873KNS3EyaykQ2+LlRur0Fm+mS1Nc4nVeJzvT3fuwnMtcBk7FIzgyUD
zu+OHWS3ths9pTGBILxSN8kBUOmX7L94Jnj1DK9lOJOUPlL/3Zn8t/63gKnnrziM
9+bAIi+RGYoRhRGigeO5udLvXmK3
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org