Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/367441F89DA011EF944C798F762E951A.roa
File: 367441F89DA011EF944C798F762E951A.roa (raw, json)
Hash identifier: rsMN/oype7XMAuilbU54iy2xay2Hc682v2CrnnyHm/4=
Subject key identifier: 55:BC:74:EB:14:1E:51:BE:71:40:7F:B4:83:F3:9A:A7:3E:6E:0B:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D016
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/367441F89DA011EF944C798F762E951A.roa
Signing time: Fri 08 Nov 2024 07:08:11 +0000
ROA not before: Fri 08 Nov 2024 07:08:07 +0000
ROA not after: Thu 12 Dec 2024 07:08:07 +0000
asID: 398993
IP address blocks: 156.231.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53270 (0xd016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 8 07:08:07 2024 GMT
Not After : Dec 12 07:08:07 2024 GMT
Subject: CN=672db8da-e2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f3:4a:f0:fa:b8:08:57:2c:33:e8:7a:ee:4a:
bd:62:04:40:19:29:bf:8d:a5:44:fa:3b:ce:0a:92:
52:d0:5d:35:5c:a0:3a:1f:bc:9e:09:6f:a6:e5:b5:
18:83:7e:9e:22:4a:cd:79:73:12:7e:f0:e4:c3:3c:
3d:17:70:f5:94:0e:57:46:09:41:44:d8:f9:c4:ef:
42:02:a6:f0:6e:b7:06:da:86:df:cd:9d:b8:b2:8b:
d6:0d:b9:4b:00:8b:8d:fe:62:ab:97:57:25:72:90:
57:4c:d0:7f:07:25:ec:6d:8e:14:b0:20:76:12:93:
e5:44:b3:af:09:db:03:5f:32:4b:57:83:e3:27:5f:
4d:c6:f7:c2:03:31:df:2b:55:f4:26:e9:59:58:73:
2e:3d:86:cd:d9:56:5d:17:c9:9e:da:38:89:53:30:
1e:66:73:4f:cf:5a:59:66:33:bc:b0:8b:3b:38:8f:
86:a4:b7:c6:ae:45:20:48:bf:3c:0a:a1:53:60:40:
0c:42:32:f5:5a:09:24:e5:e0:bd:1a:bc:12:17:16:
20:73:8f:de:b3:80:19:ab:de:4d:4a:07:38:e1:9e:
18:65:c7:9b:21:e8:14:37:60:02:fb:44:cb:fb:b0:
aa:08:b1:c2:37:e5:4d:24:df:c2:b4:34:44:62:78:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BC:74:EB:14:1E:51:BE:71:40:7F:B4:83:F3:9A:A7:3E:6E:0B:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/367441F89DA011EF944C798F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.88.0/21
Signature Algorithm: sha256WithRSAEncryption
71:27:4d:09:d0:e4:26:fa:42:20:8b:69:0f:51:a9:1c:e0:da:
26:34:45:07:b4:95:dd:1d:02:66:5f:50:d9:db:20:7a:09:5a:
43:8f:5f:c2:de:93:74:d6:b0:98:70:cf:5c:44:1a:b7:4c:c7:
33:fc:de:7c:d9:d9:d7:40:07:97:58:d7:4e:6c:14:84:00:c0:
5f:df:e1:94:51:9a:6b:26:ee:0e:6d:03:c2:13:eb:ac:31:01:
74:92:75:7b:55:e0:37:2f:61:82:7c:8a:64:e7:4c:71:e9:36:
00:40:d8:0d:36:fe:09:ae:00:60:6d:3e:b1:40:77:56:39:b8:
13:f2:0f:29:2d:7b:c5:2d:c2:70:26:b4:2e:0b:1d:fb:31:a0:
b7:64:7f:35:74:02:a2:21:04:43:9e:16:87:61:5d:1e:38:ce:
8a:08:f2:79:03:2f:17:96:03:c3:cd:35:b0:d8:bc:3b:55:ef:
98:24:75:6d:37:a4:ee:e4:78:9a:76:b5:a3:5b:b3:f6:96:c7:
0f:d6:45:c0:1e:6f:8a:6e:f4:f6:39:b5:e8:48:77:9b:ae:2f:
9f:d5:0d:a3:c1:1f:bf:9e:c9:a8:74:eb:1c:87:01:58:f6:9a:
f6:97:49:54:45:b5:b0:24:07:fb:f7:b9:e4:6a:70:b0:f8:2a:
59:12:68:92
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANAWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA4MDcwODA3WhcNMjQxMjEyMDcwODA3WjAYMRYw
FAYDVQQDEw02NzJkYjhkYS1lMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8fNK8Pq4CFcsM+h67kq9YgRAGSm/jaVE+jvOCpJS0F01XKA6H7yeCW+m
5bUYg36eIkrNeXMSfvDkwzw9F3D1lA5XRglBRNj5xO9CAqbwbrcG2obfzZ24sovW
DblLAIuN/mKrl1clcpBXTNB/ByXsbY4UsCB2EpPlRLOvCdsDXzJLV4PjJ19NxvfC
AzHfK1X0JulZWHMuPYbN2VZdF8me2jiJUzAeZnNPz1pZZjO8sIs7OI+GpLfGrkUg
SL88CqFTYEAMQjL1Wgkk5eC9GrwSFxYgc4/es4AZq95NSgc44Z4YZcebIegUN2AC
+0TL+7CqCLHCN+VNJN/CtDREYngRAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFW8
dOsUHlG+cUB/tIPzmqc+bgu4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNjc0NDFGODlEQTAxMUVGOTQ0Qzc5OEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOdYMA0GCSqGSIb3DQEBCwUA
A4IBAQBxJ00J0OQm+kIgi2kPUakc4NomNEUHtJXdHQJmX1DZ2yB6CVpDj1/C3pN0
1rCYcM9cRBq3TMcz/N582dnXQAeXWNdObBSEAMBf3+GUUZprJu4ObQPCE+usMQF0
knV7VeA3L2GCfIpk50xx6TYAQNgNNv4JrgBgbT6xQHdWObgT8g8pLXvFLcJwJrQu
Cx37MaC3ZH81dAKiIQRDnhaHYV0eOM6KCPJ5Ay8XlgPDzTWw2Lw7Ve+YJHVtN6Tu
5HiadrWjW7P2lscP1kXAHm+KbvT2ObXoSHebri+f1Q2jwR+/nsmodOschwFY9pr2
l0lURbWwJAf797nkanCw+CpZEmiS
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org