Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CE2BA9C976511EFA5C336BD762E951A.roa
File: 3CE2BA9C976511EFA5C336BD762E951A.roa (raw, json)
Hash identifier: nryGzm34qaw6bx5Xerjtzee/Xz2lqEVvS8SgJbqgw5s=
Subject key identifier: 20:30:DD:B1:88:30:0B:E0:A5:8C:7F:F8:21:4D:1A:49:77:3C:44:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CAF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CE2BA9C976511EFA5C336BD762E951A.roa
Signing time: Thu 31 Oct 2024 08:50:54 +0000
ROA not before: Thu 31 Oct 2024 08:50:50 +0000
ROA not after: Tue 31 Dec 2024 08:50:50 +0000
asID: 135377
IP address blocks: 156.232.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51958 (0xcaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:50:50 2024 GMT
Not After : Dec 31 08:50:50 2024 GMT
Subject: CN=672344ee-2dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:37:4d:14:5b:db:ca:f3:d9:f5:84:b2:61:
a9:05:7f:0c:ef:10:6a:19:e5:a9:e3:79:97:88:3e:
1b:62:53:df:70:9e:75:7c:6f:30:05:79:cf:f5:11:
af:8a:4b:8f:25:4b:a5:04:ee:b1:26:78:14:87:38:
3c:d8:60:61:46:47:68:3e:65:e6:8c:6d:c1:62:51:
eb:da:4d:b1:0d:72:37:37:be:7e:f9:a8:92:17:a6:
1e:d9:a5:a4:5e:ee:b7:b7:aa:39:6a:be:dc:34:6a:
34:7b:6a:38:d3:91:72:6a:d3:dc:25:32:c8:d6:25:
d7:88:b7:dd:ba:82:93:02:00:bb:e1:e9:57:f2:ad:
79:67:26:a9:05:19:64:11:cd:21:5b:1a:f0:14:af:
dc:f5:4c:3d:89:18:f3:df:0d:36:3f:ac:66:37:30:
12:6d:ed:81:89:97:db:2e:1c:0e:88:e0:40:2f:e7:
14:9a:10:7f:e4:02:7b:6e:48:f1:44:79:9c:22:ae:
00:4f:b5:26:c5:1e:e4:91:d5:97:9a:b4:b5:4b:67:
d2:7f:88:59:f5:32:ed:c8:4b:08:1a:94:9b:ed:79:
b5:c9:08:4a:52:a0:a4:a5:cb:e4:9a:97:be:51:7d:
61:30:8c:7d:1c:a5:41:1b:d2:77:8f:89:2e:8f:07:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:30:DD:B1:88:30:0B:E0:A5:8C:7F:F8:21:4D:1A:49:77:3C:44:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CE2BA9C976511EFA5C336BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
61:34:78:7a:70:43:d4:a8:cf:53:e3:cd:e1:01:75:33:f3:ae:
ca:a5:2f:47:81:06:ea:92:05:a8:c9:c6:2c:04:e3:14:63:03:
33:80:1b:5e:9e:ab:4e:f2:93:66:2b:b5:49:7e:67:52:da:14:
11:bf:28:53:95:24:00:cf:a4:bd:f5:00:4a:d6:23:c2:05:ba:
31:f5:f2:9d:c5:e8:0e:f3:4f:3a:99:07:e0:b4:bd:86:e3:44:
69:15:a6:0b:4d:61:6a:9e:2a:2d:d6:bd:47:59:cd:45:dd:c9:
1f:74:a0:20:ce:87:8f:7d:06:5d:6e:f0:16:a4:f1:60:f6:fa:
cd:b7:9e:33:29:4c:1e:83:f7:58:84:b8:ae:3f:66:a8:3e:ea:
b8:8b:55:d9:ad:bd:1d:2f:95:de:e2:a0:1c:c1:73:e4:11:9e:
c8:c4:95:e2:be:1e:54:65:60:9d:ae:83:8e:47:de:26:b1:dd:
9b:d8:43:fe:50:ec:2e:35:a3:ec:f8:6b:db:80:e2:f6:dd:8e:
d9:38:70:72:7a:4d:e6:50:73:64:2d:0c:a3:b1:ca:cc:04:30:
f1:0f:05:15:60:a2:d6:7a:21:59:5d:33:dc:7f:23:9b:92:80:
6c:a6:e9:a8:db:22:2c:0b:34:fe:23:86:0e:1d:3d:b9:48:59:
2c:71:09:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMr2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDMxMDg1MDUwWhcNMjQxMjMxMDg1MDUwWjAYMRYw
FAYDVQQDEw02NzIzNDRlZS0yZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2sY3TRRb28rz2fWEsmGpBX8M7xBqGeWp43mXiD4bYlPfcJ51fG8wBXnP
9RGvikuPJUulBO6xJngUhzg82GBhRkdoPmXmjG3BYlHr2k2xDXI3N75++aiSF6Ye
2aWkXu63t6o5ar7cNGo0e2o405FyatPcJTLI1iXXiLfduoKTAgC74elX8q15Zyap
BRlkEc0hWxrwFK/c9Uw9iRjz3w02P6xmNzASbe2BiZfbLhwOiOBAL+cUmhB/5AJ7
bkjxRHmcIq4AT7UmxR7kkdWXmrS1S2fSf4hZ9TLtyEsIGpSb7Xm1yQhKUqCkpcvk
mpe+UX1hMIx9HKVBG9J3j4kujwdL/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCAw
3bGIMAvgpYx/+CFNGkl3PEQpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQ0UyQkE5Qzk3NjUxMUVGQTVDMzM2QkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOhcMA0GCSqGSIb3DQEBCwUA
A4IBAQBhNHh6cEPUqM9T483hAXUz867KpS9HgQbqkgWoycYsBOMUYwMzgBtenqtO
8pNmK7VJfmdS2hQRvyhTlSQAz6S99QBK1iPCBbox9fKdxegO8086mQfgtL2G40Rp
FaYLTWFqniot1r1HWc1F3ckfdKAgzoePfQZdbvAWpPFg9vrNt54zKUweg/dYhLiu
P2aoPuq4i1XZrb0dL5Xe4qAcwXPkEZ7IxJXivh5UZWCdroOOR94msd2b2EP+UOwu
NaPs+GvbgOL23Y7ZOHByek3mUHNkLQyjscrMBDDxDwUVYKLWeiFZXTPcfyObkoBs
pumo2yIsCzT+I4YOHT25SFkscQmU
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org