Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310E0B287FF011EEAC62FB3D4AD9E6FC.roa
File: 310E0B287FF011EEAC62FB3D4AD9E6FC.roa (raw, json)
Hash identifier: iGeA/uky3nOmxwPz0YlzBXSm9uNPtugcXDCxVzYtM30=
Subject key identifier: 4E:11:9A:5E:09:62:E2:38:75:78:BE:B9:FF:F3:3E:59:6D:60:F0:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4674
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310E0B287FF011EEAC62FB3D4AD9E6FC.roa
Signing time: Fri 10 Nov 2023 17:40:09 +0000
ROA not before: Fri 10 Nov 2023 17:40:05 +0000
ROA not after: Sun 03 Nov 2024 17:40:05 +0000
asID: 63199
IP address blocks: 156.227.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18036 (0x4674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 17:40:05 2023 GMT
Not After : Nov 3 17:40:05 2024 GMT
Subject: CN=654e6af9-5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:80:8e:5a:0e:a4:01:bf:44:50:99:9b:37:
b0:db:1c:42:e4:3f:bf:fb:d7:91:94:68:e4:70:94:
a6:ea:cb:18:19:6e:35:07:ca:b1:16:43:a2:08:68:
90:91:34:f2:79:ce:52:fb:61:f1:2f:3b:95:b8:e3:
c0:81:92:e3:12:b5:7e:40:78:07:8e:fd:bc:67:93:
43:81:79:9f:99:f1:ae:27:2c:62:4a:19:ef:17:fc:
87:80:fc:0d:00:22:e4:58:06:3d:6a:1b:66:c8:dd:
7b:71:d0:0b:b8:40:74:29:74:ba:aa:5f:6d:39:ef:
9c:8d:00:9a:98:80:fc:96:cf:66:1b:e4:4b:e8:46:
8a:d5:91:5f:bd:92:ac:a3:a8:be:8d:77:6d:a1:3a:
9a:81:f5:da:57:42:9a:98:bc:7a:8e:53:a2:23:82:
f6:ef:70:37:01:4b:1e:e6:ff:5d:05:5a:c2:fa:52:
a2:6a:4a:9c:e3:5b:41:91:99:a0:cc:52:b8:5b:3c:
d1:89:7a:73:eb:79:6a:74:80:46:79:fa:90:63:5b:
cc:48:61:3d:df:51:f2:27:7b:5f:9c:56:bf:38:a2:
d8:0a:6e:8d:3c:b7:e3:1e:b2:3e:26:00:a5:84:28:
05:00:2f:31:63:07:d3:7d:cc:c5:25:38:c4:ca:59:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:9A:5E:09:62:E2:38:75:78:BE:B9:FF:F3:3E:59:6D:60:F0:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/310E0B287FF011EEAC62FB3D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.241.0/24
Signature Algorithm: sha256WithRSAEncryption
30:78:a1:d8:9e:1a:38:60:08:a2:98:05:a6:39:b1:75:bd:1b:
21:41:fa:2f:a5:09:6a:e1:2a:26:7c:aa:e8:e1:c8:13:18:80:
a1:9a:f5:a7:93:7c:4a:6b:f7:3f:2c:14:dd:4c:f0:aa:e7:c1:
b8:a4:79:9f:82:55:ca:54:8e:77:17:1e:d7:9f:ca:04:d5:18:
db:fb:b9:e2:2d:66:68:ef:17:48:f8:0d:ce:a8:04:30:29:06:
2e:59:65:01:95:12:86:84:2c:a6:bd:aa:70:b3:c8:25:a3:df:
18:34:80:19:36:79:20:85:f3:96:9c:7f:75:a9:a2:37:0e:f4:
46:eb:61:01:21:06:cb:2c:d7:3c:67:1b:ab:1d:a9:e3:2e:00:
58:df:74:de:7c:ed:c3:16:6b:20:eb:1a:c5:53:48:f2:2a:39:
a2:f3:3e:ed:d6:ce:a1:0d:2f:6b:fa:51:b1:7a:a4:91:86:33:
ff:9c:f6:07:d5:85:1c:f3:ea:7a:fc:4b:cd:a6:91:62:37:cc:
4d:1d:44:1c:88:85:e6:5d:31:03:e2:35:34:e3:24:c1:67:2f:
d9:de:b9:31:bc:33:8a:29:8f:28:5f:07:6f:3b:00:f9:c4:7d:
37:dc:f9:3d:3f:4e:22:7a:ee:aa:27:2e:85:f5:0d:fa:b8:35:
b5:4b:1f:d7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRnQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMTAxNzQwMDVaFw0yNDExMDMxNzQwMDVaMBgxFjAU
BgNVBAMTDTY1NGU2YWY5LTU3NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEj4COWg6kAb9EUJmbN7DbHELkP7/715GUaORwlKbqyxgZbjUHyrEWQ6II
aJCRNPJ5zlL7YfEvO5W448CBkuMStX5AeAeO/bxnk0OBeZ+Z8a4nLGJKGe8X/IeA
/A0AIuRYBj1qG2bI3Xtx0Au4QHQpdLqqX20575yNAJqYgPyWz2Yb5EvoRorVkV+9
kqyjqL6Nd22hOpqB9dpXQpqYvHqOU6IjgvbvcDcBSx7m/10FWsL6UqJqSpzjW0GR
maDMUrhbPNGJenPreWp0gEZ5+pBjW8xIYT3fUfIne1+cVr84otgKbo08t+Mesj4m
AKWEKAUALzFjB9N9zMUlOMTKWY6dAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUThGa
Xgli4jh1eL65//M+WW1g8G0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzMxMEUwQjI4N0ZGMDExRUVBQzYyRkIzRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4/EwDQYJKoZIhvcNAQELBQAD
ggEBADB4odieGjhgCKKYBaY5sXW9GyFB+i+lCWrhKiZ8qujhyBMYgKGa9aeTfEpr
9z8sFN1M8KrnwbikeZ+CVcpUjncXHtefygTVGNv7ueItZmjvF0j4Dc6oBDApBi5Z
ZQGVEoaELKa9qnCzyCWj3xg0gBk2eSCF85acf3WpojcO9EbrYQEhBsss1zxnG6sd
qeMuAFjfdN587cMWayDrGsVTSPIqOaLzPu3WzqENL2v6UbF6pJGGM/+c9gfVhRzz
6nr8S82mkWI3zE0dRByIheZdMQPiNTTjJMFnL9neuTG8M4opjyhfB287APnEfTfc
+T0/TiJ67qonLoX1Dfq4NbVLH9c=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org