Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC9E3F45EF611EF988B67B4762E951A.roa
File: 3AC9E3F45EF611EF988B67B4762E951A.roa (raw, json)
Hash identifier: e9y2ZsPQQtyTZSIfDdW0PNgmKiyJT8hcns60ms0zVF0=
Subject key identifier: 20:39:AC:C1:CC:CF:91:4B:80:5F:17:AA:D9:40:A4:14:D1:C7:22:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC9E3F45EF611EF988B67B4762E951A.roa
Signing time: Tue 20 Aug 2024 13:15:11 +0000
ROA not before: Tue 20 Aug 2024 13:15:08 +0000
ROA not after: Tue 27 May 2025 13:15:08 +0000
asID: 399077
IP address blocks: 156.251.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43556 (0xaa24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:15:08 2024 GMT
Not After : May 27 13:15:08 2025 GMT
Subject: CN=66c496df-6d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:ae:56:ff:f7:ef:44:59:ab:49:45:1d:6f:
4c:44:e4:8c:fa:ae:53:e5:32:13:4f:5f:ed:87:18:
5d:5c:fe:4b:a8:d2:c3:a1:10:f3:9f:03:66:66:11:
b5:07:94:f6:86:55:a6:65:67:fd:6a:2e:62:1f:62:
76:11:d1:73:6d:02:29:58:61:7c:36:fc:65:2d:df:
ea:91:28:9a:34:c0:93:48:2a:46:dc:10:da:7f:3e:
5d:be:bb:85:89:de:6f:78:1b:1a:e2:b6:96:0c:4d:
34:a6:a3:ba:56:55:d7:20:02:cc:62:c1:18:ae:2c:
a3:02:36:f0:f3:43:65:39:f6:07:d1:28:a6:b6:02:
b8:68:c8:d2:4d:33:39:76:3c:bb:c1:03:fd:c0:9a:
23:21:81:42:c6:43:91:6b:b7:cc:70:7e:83:88:84:
65:44:b5:bf:15:24:c1:8c:87:08:2d:f8:6a:4a:55:
48:e9:19:61:c9:b2:96:83:f1:7a:e4:1d:dd:8c:1c:
62:ce:06:88:3c:18:c6:b7:3d:22:ed:71:cd:4b:07:
79:d0:5d:a8:7b:e2:51:35:8e:54:df:8b:90:75:2a:
22:61:9c:38:83:da:08:b4:a5:54:08:04:04:be:67:
4e:4e:87:7d:bb:d5:9c:f6:6d:eb:da:f9:aa:7c:ca:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:AC:C1:CC:CF:91:4B:80:5F:17:AA:D9:40:A4:14:D1:C7:22:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC9E3F45EF611EF988B67B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.5.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b7:0a:38:2c:a3:b9:d1:aa:af:c7:af:6e:55:3c:40:87:b2:
15:60:a6:9a:a0:e4:fa:b7:fb:aa:59:0e:20:e2:39:93:85:d5:
02:0e:dc:6f:8c:37:c8:c8:a0:3e:4f:be:7e:18:aa:ad:ac:db:
72:b6:57:54:d2:39:0a:2d:83:7f:bd:8e:d3:80:61:fe:fc:f2:
3f:1f:18:09:fa:35:63:1d:27:3e:a7:4e:7c:ee:cf:25:94:49:
14:db:c1:93:d4:48:fe:29:47:ef:0c:97:e1:e6:4a:2a:45:d5:
e7:9f:48:be:5f:8c:7a:b6:0c:5b:e3:56:d5:54:59:83:0e:fc:
dd:73:dd:76:0f:a7:30:24:65:67:78:39:19:bf:95:38:ab:fd:
51:00:3e:0e:13:ec:94:f3:e6:6b:be:d7:94:17:3a:67:91:bb:
71:f1:b7:ec:ba:00:3e:74:52:2e:da:15:bd:e6:25:be:c2:40:
bf:13:9e:3e:ed:40:d8:c1:db:86:f9:8e:89:3e:c1:ec:7f:ec:
50:fd:6f:9d:bf:4b:80:7d:1b:14:ca:72:d0:26:84:c6:de:43:
a1:97:ae:c5:44:31:ab:72:db:d8:b3:91:22:39:2c:bd:c6:4b:
24:f9:0d:1b:83:d9:14:32:50:8e:0d:69:c5:17:4a:c6:0e:9e:
c7:26:12:17
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKokMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTMxNTA4WhcNMjUwNTI3MTMxNTA4WjAYMRYw
FAYDVQQDEw02NmM0OTZkZi02ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtyuuVv/370RZq0lFHW9MROSM+q5T5TITT1/thxhdXP5LqNLDoRDznwNm
ZhG1B5T2hlWmZWf9ai5iH2J2EdFzbQIpWGF8NvxlLd/qkSiaNMCTSCpG3BDafz5d
vruFid5veBsa4raWDE00pqO6VlXXIALMYsEYriyjAjbw80NlOfYH0SimtgK4aMjS
TTM5djy7wQP9wJojIYFCxkORa7fMcH6DiIRlRLW/FSTBjIcILfhqSlVI6RlhybKW
g/F65B3djBxizgaIPBjGtz0i7XHNSwd50F2oe+JRNY5U34uQdSoiYZw4g9oItKVU
CAQEvmdOTod9u9Wc9m3r2vmqfMq3NwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCA5
rMHMz5FLgF8XqtlApBTRxyKOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQUM5RTNGNDVFRjYxMUVGOTg4QjY3QjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPsFMA0GCSqGSIb3DQEBCwUA
A4IBAQB0two4LKO50aqvx69uVTxAh7IVYKaaoOT6t/uqWQ4g4jmThdUCDtxvjDfI
yKA+T75+GKqtrNtytldU0jkKLYN/vY7TgGH+/PI/HxgJ+jVjHSc+p0587s8llEkU
28GT1Ej+KUfvDJfh5koqRdXnn0i+X4x6tgxb41bVVFmDDvzdc912D6cwJGVneDkZ
v5U4q/1RAD4OE+yU8+ZrvteUFzpnkbtx8bfsugA+dFIu2hW95iW+wkC/E54+7UDY
wduG+Y6JPsHsf+xQ/W+dv0uAfRsUynLQJoTG3kOhl67FRDGrctvYs5EiOSy9xksk
+Q0bg9kUMlCODWnFF0rGDp7HJhIX
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:25 2024 by rpki-client on console-fra.rpki-client.org