Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AE7F140D69A11EE9554C0A8775412E6.roa
File: 2AE7F140D69A11EE9554C0A8775412E6.roa (raw, json)
Hash identifier: N0mGHT79OmGhq/VJ/n1gIIW+UYwo19xX+NJFN7i1UOs=
Subject key identifier: 20:B4:6E:38:04:21:31:C8:46:90:0C:50:A7:61:A4:02:DB:53:1A:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 77DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AE7F140D69A11EE9554C0A8775412E6.roa
Signing time: Thu 29 Feb 2024 00:33:33 +0000
ROA not before: Thu 29 Feb 2024 00:00:27 +0000
ROA not after: Thu 13 Jun 2024 00:00:27 +0000
asID: 5065
IP address blocks: 156.239.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30683 (0x77db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 29 00:00:27 2024 GMT
Not After : Jun 13 00:00:27 2024 GMT
Subject: CN=65dfd0dd-18eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:e5:b5:91:0b:14:ce:47:c1:94:04:9f:09:
8d:71:de:cf:33:d2:9f:27:5d:6b:a1:cd:56:6e:2e:
f8:f9:b9:9d:89:1d:85:37:bf:26:30:57:e3:73:71:
c2:5f:ac:19:e4:36:27:fa:5b:ea:36:21:6b:23:4b:
a7:89:0f:8d:11:f7:ca:5d:88:b4:bc:a1:aa:1e:4f:
0b:21:38:e8:38:8c:ed:3b:4d:31:fe:62:66:12:30:
01:4d:49:ca:e4:a6:c4:e3:4b:07:bb:13:2e:f3:7a:
52:00:61:92:25:53:e7:7a:3a:15:53:f8:fd:f5:be:
39:2d:d3:e4:81:ae:f3:91:f7:b8:24:ec:2e:22:75:
04:19:2f:10:27:ed:c7:60:7e:eb:f1:94:62:80:14:
0d:80:da:ea:05:e1:dd:ee:dd:83:65:99:8d:72:51:
0b:cb:a3:dd:db:6c:cb:95:1a:40:d9:8b:b9:ee:a9:
c7:60:d0:72:7a:f4:49:62:90:2e:2c:c2:5b:c8:4f:
73:2d:cc:64:cf:d7:eb:1b:7f:c3:4f:3b:4b:84:42:
b9:d0:42:05:ac:7a:22:e9:d3:70:f9:e9:af:e9:cf:
2b:53:3a:72:31:01:c2:35:8d:8d:2d:7d:ff:82:8f:
3d:13:a2:8a:63:3d:8d:52:78:97:dc:92:1a:61:f1:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:6E:38:04:21:31:C8:46:90:0C:50:A7:61:A4:02:DB:53:1A:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AE7F140D69A11EE9554C0A8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:96:6a:12:2e:22:f3:ee:0e:25:c6:78:36:a1:12:4e:8c:51:
02:06:19:a6:3e:17:6d:7d:84:d5:cb:b5:35:f1:8d:6c:f5:05:
19:2d:a2:e0:03:b5:c1:e3:f0:fa:f4:c1:e0:05:ae:66:44:3d:
bc:e0:ab:5a:3d:08:0e:07:83:97:76:cc:82:1c:c9:b5:0c:07:
53:eb:22:29:c6:60:3b:34:15:4c:75:04:69:29:65:d3:08:30:
4a:43:43:75:91:c8:6f:d9:80:af:be:f5:f6:23:78:58:52:7f:
c3:03:5c:6a:13:a5:0d:81:8d:2f:36:cb:9c:ef:49:3e:8c:45:
2c:db:c2:19:f1:69:15:20:4c:34:6f:ad:e7:fb:8a:55:3a:d2:
8b:99:57:35:0d:56:dd:54:c9:89:5a:cb:7f:69:9c:fc:a8:2e:
bb:28:8f:fc:8d:15:4b:e7:25:28:47:1f:aa:79:c4:3d:4d:6f:
37:1c:f3:b3:93:65:e9:80:83:45:66:4f:78:50:00:1d:64:eb:
8f:c9:7e:d7:09:ab:6a:53:98:2e:5a:1d:28:4e:9e:0c:94:53:
cc:15:90:10:8d:83:9d:37:08:fc:28:7f:06:63:7a:0b:aa:54:
14:d3:77:79:6b:2b:97:af:e9:25:ee:94:06:36:1a:e0:98:80:
fc:fd:f3:f2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICd9swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAyMjkwMDAwMjdaFw0yNDA2MTMwMDAwMjdaMBgxFjAU
BgNVBAMTDTY1ZGZkMGRkLTE4ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrRuW1kQsUzkfBlASfCY1x3s8z0p8nXWuhzVZuLvj5uZ2JHYU3vyYwV+Nz
ccJfrBnkNif6W+o2IWsjS6eJD40R98pdiLS8oaoeTwshOOg4jO07TTH+YmYSMAFN
ScrkpsTjSwe7Ey7zelIAYZIlU+d6OhVT+P31vjkt0+SBrvOR97gk7C4idQQZLxAn
7cdgfuvxlGKAFA2A2uoF4d3u3YNlmY1yUQvLo93bbMuVGkDZi7nuqcdg0HJ69Eli
kC4swlvIT3MtzGTP1+sbf8NPO0uEQrnQQgWseiLp03D56a/pzytTOnIxAcI1jY0t
ff+Cjz0ToopjPY1SeJfckhph8QBjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUILRu
OAQhMchGkAxQp2GkAttTGk0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzJBRTdGMTQwRDY5QTExRUU5NTU0QzBBODc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7xIwDQYJKoZIhvcNAQELBQAD
ggEBAByWahIuIvPuDiXGeDahEk6MUQIGGaY+F219hNXLtTXxjWz1BRktouADtcHj
8Pr0weAFrmZEPbzgq1o9CA4Hg5d2zIIcybUMB1PrIinGYDs0FUx1BGkpZdMIMEpD
Q3WRyG/ZgK++9fYjeFhSf8MDXGoTpQ2BjS82y5zvST6MRSzbwhnxaRUgTDRvref7
ilU60ouZVzUNVt1UyYlay39pnPyoLrsoj/yNFUvnJShHH6p5xD1Nbzcc87OTZemA
g0VmT3hQAB1k64/JftcJq2pTmC5aHShOngyUU8wVkBCNg503CPwofwZjeguqVBTT
d3lrK5ev6SXulAY2GuCYgPz98/I=
-----END CERTIFICATE-----
Generated at Sun May 5 02:33:14 2024 by rpki-client on console-fra.rpki-client.org