Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32DC1C3C9F8011EFBA166A51762E951A.roa
File: 32DC1C3C9F8011EFBA166A51762E951A.roa (raw, json)
Hash identifier: bfBnsLMlpxRv5QjTpgvZJVNshYtE+6lK0Ijf0gag1vE=
Subject key identifier: 1A:71:D5:8F:79:86:36:2D:04:1E:76:97:1B:A1:16:FE:AA:C6:42:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D112
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32DC1C3C9F8011EFBA166A51762E951A.roa
Signing time: Sun 10 Nov 2024 16:24:03 +0000
ROA not before: Sun 10 Nov 2024 16:23:59 +0000
ROA not after: Fri 17 Oct 2025 16:23:59 +0000
asID: 132813
IP address blocks: 156.226.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53522 (0xd112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:23:59 2024 GMT
Not After : Oct 17 16:23:59 2025 GMT
Subject: CN=6730de23-ba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:d3:f0:5e:d1:91:56:81:41:ae:e9:30:e0:
8a:e8:fd:d1:48:7a:9e:68:f2:71:b6:42:e4:d9:78:
b2:63:6a:12:8a:ad:26:9a:e3:14:c7:47:ed:c1:e9:
47:07:d6:a1:38:aa:f8:1f:df:69:94:cb:4b:ae:4e:
b0:46:bd:97:b1:81:e2:d4:1a:84:c0:66:84:20:8c:
4d:bc:ff:8f:52:3e:85:4a:58:1c:1f:04:fa:d4:99:
fa:03:d7:05:55:76:a0:e5:93:fe:ec:24:9f:b1:aa:
ff:86:6f:7a:b9:48:8d:70:c5:cf:f7:da:69:87:ea:
b7:5e:a7:56:a3:76:86:9f:50:2a:7d:23:ac:fc:c7:
ff:40:b0:b2:2c:3c:a9:52:05:6c:89:a3:58:c7:f3:
78:05:77:0f:65:f2:22:ed:6b:1e:37:54:95:84:0a:
03:90:b9:5e:4a:d6:14:04:f9:55:6e:4a:e7:1d:96:
58:31:1b:71:ea:26:29:4b:a5:24:a5:c0:09:92:a6:
cc:58:92:f1:8c:58:5b:36:aa:c7:51:ff:16:f5:2e:
08:eb:80:3f:dc:fb:20:6c:31:68:c8:dc:a6:b6:19:
76:94:14:e4:04:89:ef:7d:58:20:43:eb:5f:ee:55:
d1:0e:6b:8c:03:18:ce:c6:3e:60:e5:cf:3b:8f:1f:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:D5:8F:79:86:36:2D:04:1E:76:97:1B:A1:16:FE:AA:C6:42:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32DC1C3C9F8011EFBA166A51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:b5:bb:0b:85:3a:17:d1:b3:db:83:b0:02:2c:96:12:d1:c7:
56:84:d5:30:0d:ee:1f:26:22:e2:50:20:0f:49:80:42:47:66:
d8:74:bb:1e:05:b3:4d:32:c4:14:ce:80:d3:09:8a:84:a0:da:
89:44:fa:eb:0d:d2:3d:55:b9:7d:47:36:59:2e:35:1e:11:e0:
43:3a:86:78:28:86:77:2d:ad:8b:0a:95:a3:a3:43:9f:3e:8a:
62:a1:74:61:b8:27:16:54:d8:fa:44:6e:db:c0:06:f6:ba:2f:
9f:17:b9:3c:68:6e:82:25:4e:b9:0c:23:0f:93:b1:2e:7a:b9:
19:70:6d:52:d0:44:60:f6:db:5d:ae:c5:3f:57:92:a6:57:8e:
c4:79:3d:3e:b5:af:81:c5:56:5a:19:a8:1a:2c:64:55:84:17:
6b:1a:46:aa:c6:e6:b5:85:4a:8b:b2:c2:a9:d9:12:bc:cb:6b:
5e:88:6c:63:d7:a7:0b:59:1e:74:41:e2:16:df:79:82:c0:77:
d0:d1:c1:6f:0d:43:08:20:61:df:03:55:07:36:06:db:34:5f:
a9:6f:41:6c:a5:e0:35:1a:bf:32:53:e7:4e:1a:7e:fc:c8:88:
05:7b:db:f1:36:85:94:2c:53:9c:ab:c0:c3:47:46:3a:b1:e4:
49:d5:2f:82
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANESMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEwMTYyMzU5WhcNMjUxMDE3MTYyMzU5WjAYMRYw
FAYDVQQDEw02NzMwZGUyMy1iYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsSvT8F7RkVaBQa7pMOCK6P3RSHqeaPJxtkLk2XiyY2oSiq0mmuMUx0ft
welHB9ahOKr4H99plMtLrk6wRr2XsYHi1BqEwGaEIIxNvP+PUj6FSlgcHwT61Jn6
A9cFVXag5ZP+7CSfsar/hm96uUiNcMXP99pph+q3XqdWo3aGn1AqfSOs/Mf/QLCy
LDypUgVsiaNYx/N4BXcPZfIi7WseN1SVhAoDkLleStYUBPlVbkrnHZZYMRtx6iYp
S6UkpcAJkqbMWJLxjFhbNqrHUf8W9S4I64A/3PsgbDFoyNymthl2lBTkBInvfVgg
Q+tf7lXRDmuMAxjOxj5g5c87jx/hewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBpx
1Y95hjYtBB52lxuhFv6qxkKRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMkRDMUMzQzlGODAxMUVGQkExNjZBNTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOIQMA0GCSqGSIb3DQEBCwUA
A4IBAQCdtbsLhToX0bPbg7ACLJYS0cdWhNUwDe4fJiLiUCAPSYBCR2bYdLseBbNN
MsQUzoDTCYqEoNqJRPrrDdI9Vbl9RzZZLjUeEeBDOoZ4KIZ3La2LCpWjo0OfPopi
oXRhuCcWVNj6RG7bwAb2ui+fF7k8aG6CJU65DCMPk7EuerkZcG1S0ERg9ttdrsU/
V5KmV47EeT0+ta+BxVZaGagaLGRVhBdrGkaqxua1hUqLssKp2RK8y2teiGxj16cL
WR50QeIW33mCwHfQ0cFvDUMIIGHfA1UHNgbbNF+pb0FspeA1Gr8yU+dOGn78yIgF
e9vxNoWULFOcq8DDR0Y6seRJ1S+C
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org