Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22289D4C76CE11EEA2F50B174AD9E6FC.roa
File: 22289D4C76CE11EEA2F50B174AD9E6FC.roa (raw, json)
Hash identifier: hnh8dJfXT9YckYE7q4hgHfNaEwtWeO5ML1Fi+ZhoSII=
Subject key identifier: CE:49:2E:E3:C8:EF:57:5B:EA:5D:A8:E2:96:EB:59:71:B5:67:EB:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4250
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22289D4C76CE11EEA2F50B174AD9E6FC.roa
Signing time: Mon 30 Oct 2023 02:43:40 +0000
ROA not before: Mon 30 Oct 2023 02:43:37 +0000
ROA not after: Thu 19 Dec 2024 02:43:37 +0000
asID: 141190
IP address blocks: 156.240.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16976 (0x4250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 02:43:37 2023 GMT
Not After : Dec 19 02:43:37 2024 GMT
Subject: CN=653f185c-98f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:3c:c3:03:98:af:43:ab:34:28:69:2a:bd:
1a:01:e2:5c:38:86:9d:76:45:ac:77:60:73:0f:ad:
36:46:2e:21:47:82:5a:f8:92:d5:ee:a4:9f:7d:3d:
63:29:56:c1:58:18:f6:7a:31:00:fe:1b:4f:7b:06:
7e:5f:aa:75:5d:dd:dd:1e:c1:e4:16:bc:ca:ad:cd:
f1:af:85:88:f9:fe:d6:82:ed:e8:7a:b6:16:78:84:
47:18:6f:f8:94:29:15:46:29:bf:7f:7a:34:94:ec:
84:ea:8a:bd:e7:8b:d7:c4:26:fc:9e:3a:eb:c2:43:
e3:17:48:fd:b2:33:9c:2c:83:0a:06:5a:d1:70:ef:
25:6a:8f:92:c9:58:9e:bf:fd:91:a7:d3:fa:1b:ef:
9b:60:8d:0d:cd:8b:2a:f8:8f:b7:f1:9e:14:17:34:
3a:bb:ae:74:3c:8f:47:f0:0f:ba:96:29:cc:51:b9:
1c:1e:e9:6d:6a:29:d4:1f:4f:9c:4b:58:63:aa:8a:
aa:88:05:49:81:d5:99:e5:2a:1f:9c:d6:c5:de:e9:
d6:df:f9:35:2a:0e:52:95:e2:3d:99:b5:f9:b2:d9:
24:77:91:00:4c:55:dd:cd:b2:67:d5:c9:35:dd:36:
ef:e4:84:43:42:8b:90:e6:53:c8:c8:cc:97:81:ec:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:2E:E3:C8:EF:57:5B:EA:5D:A8:E2:96:EB:59:71:B5:67:EB:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22289D4C76CE11EEA2F50B174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.64.0/23
Signature Algorithm: sha256WithRSAEncryption
21:22:2a:8d:6a:de:fa:3a:d2:94:3a:45:2f:88:1f:ae:06:ba:
3e:13:06:23:43:c5:10:0e:2c:e9:8c:17:60:3a:71:4c:e2:8b:
93:bb:8e:44:a8:65:64:37:e9:51:40:c7:b0:01:b2:ae:f2:dd:
33:58:95:e8:64:da:d0:fe:9f:78:4b:ee:c3:94:5e:f5:2d:28:
42:1f:bf:04:65:ce:0b:48:9c:4a:01:36:1f:81:e7:fc:9f:07:
f8:35:b6:69:1e:20:8c:4d:3c:fc:25:77:cc:bf:7c:61:e9:be:
ce:de:8a:4f:ed:42:2a:af:d7:97:1f:c4:16:5f:54:92:c0:f4:
fe:a3:21:61:d9:53:aa:34:bf:79:42:78:d4:fb:d4:53:19:2b:
0d:5e:ab:d0:92:c5:f4:ef:b0:a4:92:df:18:03:c8:63:cf:25:
eb:50:8c:0f:ff:0f:ef:ba:4f:06:f1:c9:db:03:30:5a:0f:3e:
66:87:8e:9a:67:d6:53:cc:db:0d:4f:9c:90:bf:35:79:35:95:
e8:61:8d:fc:bf:04:27:21:2e:27:24:ee:88:80:4f:f4:b1:06:
54:a7:21:80:ec:0a:03:14:ba:b1:f0:14:f2:9b:04:78:24:72:
bd:0e:e5:46:fc:c7:4a:c8:e0:7b:7a:c4:ce:67:a9:cb:aa:21:
d6:da:07:49
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICQlAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEwMzAwMjQzMzdaFw0yNDEyMTkwMjQzMzdaMBgxFjAU
BgNVBAMTDTY1M2YxODVjLTk4ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1VDzDA5ivQ6s0KGkqvRoB4lw4hp12Rax3YHMPrTZGLiFHglr4ktXupJ99
PWMpVsFYGPZ6MQD+G097Bn5fqnVd3d0eweQWvMqtzfGvhYj5/taC7eh6thZ4hEcY
b/iUKRVGKb9/ejSU7ITqir3ni9fEJvyeOuvCQ+MXSP2yM5wsgwoGWtFw7yVqj5LJ
WJ6//ZGn0/ob75tgjQ3Niyr4j7fxnhQXNDq7rnQ8j0fwD7qWKcxRuRwe6W1qKdQf
T5xLWGOqiqqIBUmB1ZnlKh+c1sXe6dbf+TUqDlKV4j2Ztfmy2SR3kQBMVd3NsmfV
yTXdNu/khENCi5DmU8jIzJeB7HfPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzkku
48jvV1vqXajilutZcbVn63QwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzIyMjg5RDRDNzZDRTExRUVBMkY1MEIxNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc8EAwDQYJKoZIhvcNAQELBQAD
ggEBACEiKo1q3vo60pQ6RS+IH64Guj4TBiNDxRAOLOmMF2A6cUzii5O7jkSoZWQ3
6VFAx7ABsq7y3TNYlehk2tD+n3hL7sOUXvUtKEIfvwRlzgtInEoBNh+B5/yfB/g1
tmkeIIxNPPwld8y/fGHpvs7eik/tQiqv15cfxBZfVJLA9P6jIWHZU6o0v3lCeNT7
1FMZKw1eq9CSxfTvsKSS3xgDyGPPJetQjA//D++6TwbxydsDMFoPPmaHjppn1lPM
2w1PnJC/NXk1lehhjfy/BCchLick7oiAT/SxBlSnIYDsCgMUurHwFPKbBHgkcr0O
5Ub8x0rI4Ht6xM5nqcuqIdbaB0k=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:27 2024 by rpki-client on console-ams.rpki-client.org