Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33C75F6A70D411EF9985AB63762E951A.roa
File: 33C75F6A70D411EF9985AB63762E951A.roa (raw, json)
Hash identifier: w3KPynJeHQbb5KYY3QHE71zC0N/DPWV5esj4jm8yFMo=
Subject key identifier: 59:4F:2F:23:E5:6A:00:26:6E:A4:16:45:6D:02:9E:89:52:9A:A0:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B4EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33C75F6A70D411EF9985AB63762E951A.roa
Signing time: Thu 12 Sep 2024 06:56:58 +0000
ROA not before: Thu 12 Sep 2024 06:56:54 +0000
ROA not after: Thu 17 Oct 2024 06:56:54 +0000
asID: 133952
IP address blocks: 156.225.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Sep 2024 00:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46315 (0xb4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 06:56:54 2024 GMT
Not After : Oct 17 06:56:54 2024 GMT
Subject: CN=66e290b9-5b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:a2:6a:d3:20:c6:0d:28:d5:55:52:8e:46:
7d:1d:67:f2:08:de:49:81:21:27:36:06:b4:c8:90:
50:2c:e2:50:bb:57:64:d5:e7:7f:50:f7:8f:39:c8:
f4:d6:7e:1e:ee:4a:5d:cf:87:fb:f7:e8:13:51:65:
e7:f5:4e:92:11:3e:15:92:7d:6f:d7:33:7e:80:1d:
3b:5e:60:5b:c4:aa:29:49:8a:02:cf:87:d8:b4:7a:
d4:de:04:e1:71:8d:60:28:e5:df:e5:f1:5f:6d:ac:
e0:48:bc:5b:9d:17:60:cb:4e:75:e1:0e:7a:0f:b5:
06:47:da:e5:02:70:fd:9e:4b:d6:d4:57:77:a5:17:
da:d7:ae:89:89:7d:39:b0:c3:d7:93:5f:f4:4f:0f:
60:4d:ea:a2:4d:f8:89:a8:27:f9:81:db:6b:6b:d8:
e4:02:c0:a8:84:78:3d:31:cb:ef:4e:eb:7d:89:b2:
40:69:ab:6a:9c:60:fc:fb:57:85:fe:fd:58:59:71:
1d:da:be:c9:31:a9:63:97:56:ad:e3:1d:23:88:37:
fc:76:5c:53:5e:47:ff:2d:b8:a9:09:b9:88:93:8e:
80:a8:c1:73:55:0a:3f:bc:53:1c:57:46:de:40:fc:
1c:95:47:80:59:2c:98:12:bf:60:0e:23:17:3e:73:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:2F:23:E5:6A:00:26:6E:A4:16:45:6D:02:9E:89:52:9A:A0:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33C75F6A70D411EF9985AB63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.130.0/24
Signature Algorithm: sha256WithRSAEncryption
71:93:e0:a7:fb:d7:75:2f:ec:c0:d9:bd:f6:dc:89:3c:ca:6a:
c5:8a:1b:dc:50:bf:bf:5d:3c:b7:d5:88:fe:26:7e:51:9c:32:
3a:7e:32:38:04:7a:3f:8c:40:5b:02:eb:bf:ef:1b:fa:88:be:
3c:22:da:b0:8f:c0:24:46:83:bc:91:23:a9:28:88:c3:f2:d8:
25:fc:3a:a6:67:13:7b:41:9f:6b:e9:99:4a:5a:ce:fd:11:53:
bd:86:9c:01:9f:7b:84:88:27:8e:95:58:ee:f7:ae:0e:58:c3:
1c:19:40:81:84:ea:b5:12:8e:b8:21:51:f2:89:d9:fe:20:27:
c6:dd:73:1f:60:97:36:c6:03:85:f5:73:22:37:e1:ff:de:c8:
15:b7:d2:03:c7:d7:5e:fe:06:a5:85:22:45:57:88:ed:bc:46:
eb:e5:7e:d8:5e:97:50:4b:48:81:d9:89:3b:11:06:70:66:4f:
90:d6:54:2f:0a:ac:c4:06:46:81:26:79:ad:2b:b6:84:86:c0:
40:6b:1d:f2:04:21:f4:40:2f:46:fb:9e:7f:9f:f8:99:71:77:
42:4c:1c:db:7f:32:0b:6b:f6:d2:3b:94:fa:08:c3:7e:f0:0c:
0c:23:05:f8:cb:72:0a:df:85:a6:bd:df:3e:a2:53:26:fc:f9:
c7:20:68:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALTrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTEyMDY1NjU0WhcNMjQxMDE3MDY1NjU0WjAYMRYw
FAYDVQQDEw02NmUyOTBiOS01YjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp/WiatMgxg0o1VVSjkZ9HWfyCN5JgSEnNga0yJBQLOJQu1dk1ed/UPeP
Ocj01n4e7kpdz4f79+gTUWXn9U6SET4Vkn1v1zN+gB07XmBbxKopSYoCz4fYtHrU
3gThcY1gKOXf5fFfbazgSLxbnRdgy0514Q56D7UGR9rlAnD9nkvW1Fd3pRfa166J
iX05sMPXk1/0Tw9gTeqiTfiJqCf5gdtra9jkAsCohHg9McvvTut9ibJAaatqnGD8
+1eF/v1YWXEd2r7JMaljl1at4x0jiDf8dlxTXkf/LbipCbmIk46AqMFzVQo/vFMc
V0beQPwclUeAWSyYEr9gDiMXPnOeuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFlP
LyPlagAmbqQWRW0CnolSmqAZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zM0M3NUY2QTcwRDQxMUVGOTk4NUFCNjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOGCMA0GCSqGSIb3DQEBCwUA
A4IBAQBxk+Cn+9d1L+zA2b323Ik8ymrFihvcUL+/XTy31Yj+Jn5RnDI6fjI4BHo/
jEBbAuu/7xv6iL48Itqwj8AkRoO8kSOpKIjD8tgl/DqmZxN7QZ9r6ZlKWs79EVO9
hpwBn3uEiCeOlVju964OWMMcGUCBhOq1Eo64IVHyidn+ICfG3XMfYJc2xgOF9XMi
N+H/3sgVt9IDx9de/galhSJFV4jtvEbr5X7YXpdQS0iB2Yk7EQZwZk+Q1lQvCqzE
BkaBJnmtK7aEhsBAax3yBCH0QC9G+55/n/iZcXdCTBzbfzILa/bSO5T6CMN+8AwM
IwX4y3IK34Wmvd8+olMm/PnHIGha
-----END CERTIFICATE-----
Generated at Wed Sep 18 08:47:05 2024 by rpki-client on console-fra.rpki-client.org