Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33C991E6A26011EF9BE47490762E951A.roa
File: 33C991E6A26011EF9BE47490762E951A.roa (raw, json)
Hash identifier: Weku78tJkGigFV+VCMKVtvZ6e5yhR9EKRlW3TjTXCTI=
Subject key identifier: 28:52:7D:81:E8:C6:44:CE:EF:B0:6F:86:DA:BE:13:DD:B6:AF:76:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D295
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33C991E6A26011EF9BE47490762E951A.roa
Signing time: Thu 14 Nov 2024 08:12:34 +0000
ROA not before: Thu 14 Nov 2024 08:12:30 +0000
ROA not after: Wed 27 Nov 2024 08:12:30 +0000
asID: 61112
IP address blocks: 156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53909 (0xd295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 08:12:30 2024 GMT
Not After : Nov 27 08:12:30 2024 GMT
Subject: CN=6735b0f2-d154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:88:fa:06:ac:ec:2c:37:6e:9b:a8:b5:6f:
cb:24:b2:9a:5f:b6:17:2d:30:c9:f7:b8:d2:1f:80:
cf:a8:5e:62:d7:53:e3:f1:9a:d8:b4:ee:3d:a5:5f:
aa:91:29:5d:30:3a:f2:09:1f:7f:e1:96:92:ab:53:
3b:42:d3:16:c6:0e:9b:a8:2c:97:30:96:da:86:25:
5e:c6:6f:c5:42:64:e2:e9:aa:a1:fa:16:9a:e9:ee:
7b:49:59:b0:d0:a1:33:27:00:d1:ab:9f:10:af:21:
91:cb:40:2e:fe:fd:54:cd:13:2c:81:72:fa:4c:57:
10:20:f4:f6:33:51:8b:5a:ef:ea:92:fe:c9:75:99:
c6:9b:1b:7f:fd:06:49:b0:1b:c4:ba:87:bb:de:a4:
c6:81:ac:c8:e4:60:51:4d:d8:58:0f:95:6e:80:50:
2c:57:50:88:3c:bb:1d:7e:93:ca:e0:d5:b6:b6:29:
50:bc:33:8d:20:f8:31:a4:d0:8b:df:47:60:f2:28:
55:c2:29:69:28:33:c2:ad:d6:82:68:99:06:0c:a4:
29:68:bf:5d:df:00:62:af:f9:cc:6b:56:5f:1a:db:
ba:e8:83:b0:83:37:f0:8b:e8:5f:6a:36:d0:3f:10:
4c:0c:4d:84:94:e5:5d:3b:0f:10:f5:91:4e:59:57:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:7D:81:E8:C6:44:CE:EF:B0:6F:86:DA:BE:13:DD:B6:AF:76:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33C991E6A26011EF9BE47490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ae:9f:3e:c0:2d:b8:88:fa:3e:ea:ec:b9:30:7a:0a:21:cd:
48:78:bc:f8:e6:d8:07:32:6a:d2:de:f9:dd:9a:0d:ce:01:0c:
53:c8:12:66:67:c6:11:d8:13:22:67:41:cc:39:58:2a:42:a0:
3e:eb:60:35:30:9e:dc:75:a7:19:71:92:55:cd:44:97:43:e9:
1d:e7:58:00:98:68:00:b7:85:5f:79:4d:c5:40:0a:38:00:e8:
66:48:ad:62:0d:dc:5b:39:21:df:b7:32:4b:96:6e:21:3c:ab:
ae:7c:b8:21:13:2c:96:1c:85:f0:f0:6c:a7:66:7d:b9:07:96:
3c:53:4d:6b:e2:a2:f8:a6:09:55:09:69:cc:fd:8c:93:52:dc:
c7:26:1a:44:03:e5:9f:2f:c3:d4:89:1d:e1:3b:bb:69:7a:3f:
75:f2:0e:11:4f:d3:bf:ff:fb:f1:49:9f:4a:01:c1:38:27:69:
82:71:52:c3:6b:b5:35:e8:b5:a1:c4:a5:c4:d6:ec:cd:75:35:
c4:98:17:71:a1:83:05:c6:f3:2d:46:4f:6e:2a:52:9e:79:0a:
1b:a9:1f:3e:a7:82:36:e3:f3:30:9f:b4:dc:6a:2d:9b:51:35:
fa:8b:78:04:b5:9f:aa:bc:13:00:60:85:ec:5b:8f:84:c1:3b:
bf:ce:62:49
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANKVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE0MDgxMjMwWhcNMjQxMTI3MDgxMjMwWjAYMRYw
FAYDVQQDEw02NzM1YjBmMi1kMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2pKI+gas7Cw3bpuotW/LJLKaX7YXLTDJ97jSH4DPqF5i11Pj8ZrYtO49
pV+qkSldMDryCR9/4ZaSq1M7QtMWxg6bqCyXMJbahiVexm/FQmTi6aqh+haa6e57
SVmw0KEzJwDRq58QryGRy0Au/v1UzRMsgXL6TFcQIPT2M1GLWu/qkv7JdZnGmxt/
/QZJsBvEuoe73qTGgazI5GBRTdhYD5VugFAsV1CIPLsdfpPK4NW2tilQvDONIPgx
pNCL30dg8ihVwilpKDPCrdaCaJkGDKQpaL9d3wBir/nMa1ZfGtu66IOwgzfwi+hf
ajbQPxBMDE2ElOVdOw8Q9ZFOWVfCAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFChS
fYHoxkTO77Bvhtq+E922r3ZnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zM0M5OTFFNkEyNjAxMUVGOUJFNDc0OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPP0MA0GCSqGSIb3DQEBCwUA
A4IBAQAcrp8+wC24iPo+6uy5MHoKIc1IeLz45tgHMmrS3vndmg3OAQxTyBJmZ8YR
2BMiZ0HMOVgqQqA+62A1MJ7cdacZcZJVzUSXQ+kd51gAmGgAt4VfeU3FQAo4AOhm
SK1iDdxbOSHftzJLlm4hPKuufLghEyyWHIXw8GynZn25B5Y8U01r4qL4pglVCWnM
/YyTUtzHJhpEA+WfL8PUiR3hO7tpej918g4RT9O///vxSZ9KAcE4J2mCcVLDa7U1
6LWhxKXE1uzNdTXEmBdxoYMFxvMtRk9uKlKeeQobqR8+p4I24/Mwn7Tcai2bUTX6
i3gEtZ+qvBMAYIXsW4+EwTu/zmJJ
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org