Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B67A44E7E4111EF97591146762E951A.roa
File: 3B67A44E7E4111EF97591146762E951A.roa (raw, json)
Hash identifier: P/1Ek+N7Boy4+VRhCTVrmFxGr6p3xjKlIYaCiNirc3E=
Subject key identifier: A9:E0:00:65:57:A4:E8:4E:93:44:1A:52:22:66:5F:58:F8:A1:45:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BCB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B67A44E7E4111EF97591146762E951A.roa
Signing time: Sun 29 Sep 2024 09:00:11 +0000
ROA not before: Sun 29 Sep 2024 09:00:07 +0000
ROA not after: Mon 30 Dec 2024 09:00:07 +0000
asID: 17561
IP address blocks: 156.232.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48308 (0xbcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 09:00:07 2024 GMT
Not After : Dec 30 09:00:07 2024 GMT
Subject: CN=66f9171b-32d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:73:16:e3:c9:bf:7d:90:51:1b:17:a2:79:
1b:31:01:65:e8:8f:ea:58:b4:a2:a0:62:48:7b:d0:
ed:4f:b6:07:c0:71:a7:31:ef:82:85:1a:9e:8c:25:
5f:24:24:b7:f3:a2:16:07:2b:21:39:9f:1f:7c:94:
18:2f:59:e8:cb:c3:26:66:b9:2e:37:a6:70:0f:d4:
41:da:59:bf:ad:ae:a9:19:1f:70:1a:f5:40:30:59:
56:a0:6e:0c:01:6c:54:81:0a:45:16:d2:4f:01:3c:
52:35:79:71:99:0a:1c:0b:b3:35:06:3d:05:4e:94:
44:ee:6f:f2:42:c3:e0:d7:ef:0e:95:38:8b:70:9b:
77:41:5a:e2:0d:28:8d:32:89:d6:61:f1:39:de:79:
db:ed:c0:1c:e3:d8:5a:42:3d:f3:ae:51:59:0c:7f:
03:b4:fe:f5:da:06:f4:ae:6f:2f:95:99:7c:d9:c5:
b9:2d:a8:1a:59:b6:c7:c0:e7:a5:dc:03:4e:75:90:
a9:6a:3b:76:af:1b:43:5d:4e:1e:4d:fd:be:c3:14:
7b:0e:14:50:69:20:9c:63:fc:ce:bd:d2:e3:d2:e1:
b0:e4:0a:c8:de:69:2e:79:b1:b6:32:a9:d4:04:5f:
b9:dc:6a:3d:95:da:06:8f:8f:d7:4e:c7:9a:58:0b:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:00:65:57:A4:E8:4E:93:44:1A:52:22:66:5F:58:F8:A1:45:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B67A44E7E4111EF97591146762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.12.0/24
Signature Algorithm: sha256WithRSAEncryption
13:57:39:29:f6:e7:91:d5:ca:a1:e0:57:c6:84:01:6c:aa:29:
43:45:df:a5:b8:71:d8:1e:ff:7d:6f:1d:ed:7e:02:1b:b4:88:
a4:80:a6:5f:e4:eb:50:4a:2b:04:7e:18:32:ca:3e:0d:da:ce:
0f:af:39:c6:f3:8e:13:f8:9c:f7:88:1a:30:31:33:aa:a3:14:
45:ac:30:37:3c:dc:bc:91:3e:f6:19:80:f8:39:aa:e0:4d:31:
48:44:18:30:a8:c6:d8:23:24:c9:b7:cc:ca:24:74:9f:c7:ad:
2d:d7:a0:1c:83:86:f7:cb:cc:4c:5a:fb:bb:7b:f4:42:5f:d6:
a6:f4:f7:20:ed:2d:60:68:16:e1:16:38:e4:1f:38:3e:1d:d5:
00:a6:27:21:fd:fa:da:48:cd:06:89:37:49:42:45:41:0e:12:
a0:cf:33:72:02:be:c3:dd:24:8d:1b:85:b9:21:d3:e4:f3:c7:
98:68:ff:86:13:85:79:68:a4:a7:5a:44:24:35:56:f0:b8:42:
ca:ee:05:35:42:fe:ec:72:28:a0:ab:f0:1a:ea:d1:70:62:26:
80:94:a9:fd:b3:14:0e:b5:9f:8a:30:8f:40:31:0f:cd:d5:ac:
a0:fa:a5:d8:42:6c:5c:c5:71:ba:24:61:7f:19:a0:b2:fa:a6:
50:3c:be:f3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALy0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTI5MDkwMDA3WhcNMjQxMjMwMDkwMDA3WjAYMRYw
FAYDVQQDEw02NmY5MTcxYi0zMmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4JVzFuPJv32QURsXonkbMQFl6I/qWLSioGJIe9DtT7YHwHGnMe+ChRqe
jCVfJCS386IWByshOZ8ffJQYL1noy8MmZrkuN6ZwD9RB2lm/ra6pGR9wGvVAMFlW
oG4MAWxUgQpFFtJPATxSNXlxmQocC7M1Bj0FTpRE7m/yQsPg1+8OlTiLcJt3QVri
DSiNMonWYfE53nnb7cAc49haQj3zrlFZDH8DtP712gb0rm8vlZl82cW5LagaWbbH
wOel3ANOdZCpajt2rxtDXU4eTf2+wxR7DhRQaSCcY/zOvdLj0uGw5ArI3mkuebG2
MqnUBF+53Go9ldoGj4/XTseaWAuhvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKng
AGVXpOhOk0QaUiJmX1j4oUX0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjY3QTQ0RTdFNDExMUVGOTc1OTExNDY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOgMMA0GCSqGSIb3DQEBCwUA
A4IBAQATVzkp9ueR1cqh4FfGhAFsqilDRd+luHHYHv99bx3tfgIbtIikgKZf5OtQ
SisEfhgyyj4N2s4PrznG844T+Jz3iBowMTOqoxRFrDA3PNy8kT72GYD4OargTTFI
RBgwqMbYIyTJt8zKJHSfx60t16Acg4b3y8xMWvu7e/RCX9am9Pcg7S1gaBbhFjjk
Hzg+HdUApich/fraSM0GiTdJQkVBDhKgzzNyAr7D3SSNG4W5IdPk88eYaP+GE4V5
aKSnWkQkNVbwuELK7gU1Qv7sciigq/Aa6tFwYiaAlKn9sxQOtZ+KMI9AMQ/N1ayg
+qXYQmxcxXG6JGF/GaCy+qZQPL7z
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:25 2024 by rpki-client on console-fra.rpki-client.org