Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3E340E344B11EFBA128B82762E951A.roa
File: 1E3E340E344B11EFBA128B82762E951A.roa (raw, json)
Hash identifier: u8u+dgvU1jOv4ubgDofy2cy4rRBIyh4OYnp1uHDvxpI=
Subject key identifier: AC:90:99:66:95:9E:7F:D7:DF:5B:20:6D:C0:25:D1:2E:1B:EA:EE:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 959C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3E340E344B11EFBA128B82762E951A.roa
Signing time: Thu 27 Jun 2024 06:04:31 +0000
ROA not before: Thu 27 Jun 2024 06:04:27 +0000
ROA not after: Mon 30 Dec 2024 06:04:27 +0000
asID: 984
IP address blocks: 156.249.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38300 (0x959c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 06:04:27 2024 GMT
Not After : Dec 30 06:04:27 2024 GMT
Subject: CN=667d00ef-d965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:45:35:ae:55:40:26:59:2a:cc:72:be:5f:
f9:58:61:69:2f:b3:cf:f0:68:06:c4:ef:5d:6d:90:
67:bd:aa:3c:71:22:d4:22:d2:cc:ea:68:11:d7:51:
a9:db:5f:27:d5:79:59:d7:19:37:a8:3a:4d:af:be:
50:17:29:35:7a:6e:d3:34:23:4c:70:25:8a:4e:16:
5a:a8:cd:ad:05:3f:c2:40:15:f6:a4:b5:c8:26:7e:
6f:d3:52:ce:cd:29:79:05:ac:41:b8:cd:ae:3f:cc:
78:93:4b:38:96:c5:22:63:86:43:65:06:5b:c7:94:
10:bd:a7:da:d7:d8:6c:55:4b:20:dc:77:56:56:b1:
0e:26:dd:7f:47:99:d3:74:08:85:b1:b4:c4:27:9b:
4a:fb:dc:8c:b6:68:90:6e:90:0b:41:4e:a4:ee:71:
aa:e7:cf:26:41:5b:33:55:ee:bb:f0:77:68:32:a3:
57:ae:15:01:31:a6:2f:1c:77:a2:ef:40:be:3d:7f:
3f:8a:62:6b:54:13:0b:96:13:ac:ec:8c:48:06:49:
32:23:48:8d:88:7c:60:95:68:5f:01:ac:8f:d4:a2:
75:9b:1f:d4:e2:f0:60:d3:c2:48:a5:c5:83:95:4b:
67:ad:88:b2:cc:72:b4:dc:28:81:63:c8:00:7a:4d:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:99:66:95:9E:7F:D7:DF:5B:20:6D:C0:25:D1:2E:1B:EA:EE:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3E340E344B11EFBA128B82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
29:a7:9a:2b:61:fa:c5:3c:89:69:0a:07:8e:29:c8:69:7e:44:
4e:03:9d:0e:5a:3d:54:c7:e4:9c:49:95:4c:93:13:2b:19:47:
89:51:b6:1c:4d:28:64:67:bd:34:d4:bc:19:20:14:22:6a:40:
ef:18:7c:36:70:f5:e5:30:05:d7:f5:c6:f0:d7:97:c1:fb:5f:
9b:f7:e8:53:ab:4c:d2:44:5d:c1:18:24:8f:60:66:88:52:b9:
99:73:59:c3:ea:42:82:7a:22:d4:a8:6c:52:ac:49:73:d4:b9:
20:cd:fe:56:16:c1:6f:c2:77:ef:a4:e0:b9:dd:a0:51:b3:8e:
c7:ed:1e:9b:a0:02:2b:d5:1c:5b:c1:be:10:97:a7:48:4a:55:
d4:4f:b9:5c:1c:3c:a8:e6:4d:3f:0a:1f:80:6b:3f:08:3c:6b:
1a:4d:53:74:d4:82:e8:bc:bd:12:10:d6:5a:c1:ba:d0:9b:b7:
a2:71:e7:25:46:aa:9d:6b:a2:33:06:77:bc:28:bd:37:d9:da:
ca:3b:b0:66:46:1f:e9:24:b4:56:86:48:bb:c3:18:29:94:09:
e2:c1:79:e5:90:18:94:b0:63:9b:ac:0b:bf:82:40:b5:ba:e2:
a2:56:a6:f5:51:74:ce:44:8a:30:20:a9:01:9a:9c:50:ec:51:
68:af:3f:01
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJWcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjI3MDYwNDI3WhcNMjQxMjMwMDYwNDI3WjAYMRYw
FAYDVQQDEw02NjdkMDBlZi1kOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA25lFNa5VQCZZKsxyvl/5WGFpL7PP8GgGxO9dbZBnvao8cSLUItLM6mgR
11Gp218n1XlZ1xk3qDpNr75QFyk1em7TNCNMcCWKThZaqM2tBT/CQBX2pLXIJn5v
01LOzSl5BaxBuM2uP8x4k0s4lsUiY4ZDZQZbx5QQvafa19hsVUsg3HdWVrEOJt1/
R5nTdAiFsbTEJ5tK+9yMtmiQbpALQU6k7nGq588mQVszVe678HdoMqNXrhUBMaYv
HHei70C+PX8/imJrVBMLlhOs7IxIBkkyI0iNiHxglWhfAayP1KJ1mx/U4vBg08JI
pcWDlUtnrYiyzHK03CiBY8gAek1W+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKyQ
mWaVnn/X31sgbcAl0S4b6u5fMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRTNFMzQwRTM0NEIxMUVGQkExMjhCODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnPmAMA0GCSqGSIb3DQEBCwUA
A4IBAQApp5orYfrFPIlpCgeOKchpfkROA50OWj1Ux+ScSZVMkxMrGUeJUbYcTShk
Z7001LwZIBQiakDvGHw2cPXlMAXX9cbw15fB+1+b9+hTq0zSRF3BGCSPYGaIUrmZ
c1nD6kKCeiLUqGxSrElz1Lkgzf5WFsFvwnfvpOC53aBRs47H7R6boAIr1Rxbwb4Q
l6dISlXUT7lcHDyo5k0/Ch+Aaz8IPGsaTVN01ILovL0SENZawbrQm7eiceclRqqd
a6IzBne8KL032drKO7BmRh/pJLRWhki7wxgplAniwXnlkBiUsGObrAu/gkC1uuKi
Vqb1UXTORIowIKkBmpxQ7FForz8B
-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:28 2024 by rpki-client on console-fra.rpki-client.org