Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/350C0FE0539F11EEA28B235D4AD9E6FC.roa
File: 350C0FE0539F11EEA28B235D4AD9E6FC.roa (raw, json)
Hash identifier: t7VjkrAtsYO/Q0AMO4oOVinLtFsWymYoflQjmNE1VYA=
Subject key identifier: 59:9A:14:FF:61:85:2B:68:E9:10:48:C5:5B:5A:CE:7B:EF:E1:76:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3974
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/350C0FE0539F11EEA28B235D4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:09:35 +0000
ROA not before: Fri 15 Sep 2023 08:09:32 +0000
ROA not after: Sat 08 Jun 2024 08:09:32 +0000
asID: 138152
IP address blocks: 156.232.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14708 (0x3974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:09:32 2023 GMT
Not After : Jun 8 08:09:32 2024 GMT
Subject: CN=6504113f-820e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:58:e2:9f:9d:4e:a3:74:22:de:2d:c7:73:a2:
c6:06:6c:06:30:2b:e6:cf:32:df:05:a8:a9:73:26:
67:cf:28:f2:b6:5b:50:55:30:18:39:cd:0a:17:db:
c6:df:87:9f:98:12:39:ea:96:3b:fa:8a:63:45:72:
71:0e:69:2b:77:72:7a:12:5d:74:99:71:78:f1:5b:
be:d3:28:4a:37:65:2b:a5:6d:df:6a:c2:89:f8:e2:
cb:7b:1c:04:cb:8f:32:6f:6d:f4:37:4f:ba:96:08:
f8:15:64:c1:a7:15:e4:d6:fb:fb:af:6d:40:9a:5c:
3f:0b:53:61:0b:a5:99:5d:7e:9d:8d:88:ff:11:df:
1d:9c:dd:36:86:9a:c5:f9:b6:0f:43:11:ce:c0:96:
1f:a2:55:9e:64:89:fa:61:a0:8e:8b:23:0f:c8:34:
d0:3d:7e:7b:c8:0d:a5:77:28:7b:4c:1f:9b:46:ed:
35:a5:f3:47:5e:dc:6a:36:c7:23:b1:76:93:5b:cb:
7f:52:a1:2e:f0:b6:fe:2e:4c:35:bb:67:bb:0d:ba:
24:8c:b6:5c:80:3f:9a:4a:b2:48:fa:0e:89:ea:41:
91:c9:d3:76:fe:6d:3a:35:3a:b1:05:8e:81:c9:2f:
94:b7:74:a8:bb:fd:f2:85:f0:d9:0a:89:ee:f0:6e:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9A:14:FF:61:85:2B:68:E9:10:48:C5:5B:5A:CE:7B:EF:E1:76:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/350C0FE0539F11EEA28B235D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.13.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:58:e2:d2:87:02:a5:30:49:a0:07:45:aa:68:ff:af:7f:47:
a1:9f:c8:c8:d6:01:81:19:4a:8f:19:e4:98:4f:b2:a1:e6:4d:
24:a9:d5:01:fd:6c:3a:82:fe:23:60:7d:44:81:08:0b:08:1f:
5d:7f:95:1d:2e:b1:19:15:95:74:33:81:53:ab:ec:55:91:1f:
53:3b:54:4c:ef:43:2c:b6:ae:0a:de:b9:a6:e1:25:45:02:78:
b9:2f:72:a7:12:21:b4:c2:70:1f:2e:6e:84:84:a7:17:03:f4:
b5:7b:ff:c6:9a:95:43:07:5e:80:33:6b:bd:78:04:1b:82:2c:
a1:92:b8:ab:1f:65:2c:98:a0:c7:fd:49:2a:1c:e6:08:a7:4f:
9c:c9:78:ee:d6:9e:d4:ef:be:4a:dc:a5:89:71:4e:38:21:b3:
b7:1b:fc:27:8a:56:b2:1d:cb:b3:91:19:b2:10:75:68:18:3a:
8b:fe:a5:dc:20:0e:7b:27:cc:6d:e4:56:0c:62:16:63:78:0f:
08:9d:f4:ee:da:4c:88:2c:3b:da:36:14:04:d2:1e:5d:e4:0b:
83:0b:95:7d:5b:3b:0b:52:4e:ca:f7:b9:e1:e5:60:b1:ba:b5:
03:e2:da:dc:22:af:0c:f4:5d:a3:64:1b:a3:f2:24:32:bc:de:
eb:36:c7:ca
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MTUwODA5MzJaFw0yNDA2MDgwODA5MzJaMBgxFjAU
BgNVBAMTDTY1MDQxMTNmLTgyMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD8WOKfnU6jdCLeLcdzosYGbAYwK+bPMt8FqKlzJmfPKPK2W1BVMBg5zQoX
28bfh5+YEjnqljv6imNFcnEOaSt3cnoSXXSZcXjxW77TKEo3ZSulbd9qwon44st7
HATLjzJvbfQ3T7qWCPgVZMGnFeTW+/uvbUCaXD8LU2ELpZldfp2NiP8R3x2c3TaG
msX5tg9DEc7Alh+iVZ5kifphoI6LIw/INNA9fnvIDaV3KHtMH5tG7TWl80de3Go2
xyOxdpNby39SoS7wtv4uTDW7Z7sNuiSMtlyAP5pKskj6DonqQZHJ03b+bTo1OrEF
joHJL5S3dKi7/fKF8NkKie7wbhrdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUWZoU
/2GFK2jpEEjFW1rOe+/hdpcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzM1MEMwRkUwNTM5RjExRUVBMjhCMjM1RDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc6A0wDQYJKoZIhvcNAQELBQAD
ggEBAC9Y4tKHAqUwSaAHRapo/69/R6GfyMjWAYEZSo8Z5JhPsqHmTSSp1QH9bDqC
/iNgfUSBCAsIH11/lR0usRkVlXQzgVOr7FWRH1M7VEzvQyy2rgreuabhJUUCeLkv
cqcSIbTCcB8uboSEpxcD9LV7/8aalUMHXoAza714BBuCLKGSuKsfZSyYoMf9SSoc
5ginT5zJeO7WntTvvkrcpYlxTjghs7cb/CeKVrIdy7ORGbIQdWgYOov+pdwgDnsn
zG3kVgxiFmN4Dwid9O7aTIgsO9o2FATSHl3kC4MLlX1bOwtSTsr3ueHlYLG6tQPi
2twirwz0XaNkG6PyJDK83us2x8o=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org