Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F336E2678AE11EEA8375E8B4AD9E6FC.roa
File: 3F336E2678AE11EEA8375E8B4AD9E6FC.roa (raw, json)
Hash identifier: KHuQnMF/L7MI48DeQR/VsxwbAISeAcA3L5zfaoet/ac=
Subject key identifier: 7C:04:8E:1D:45:D3:3A:26:A6:90:52:C5:97:40:5B:56:DD:47:70:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 42E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F336E2678AE11EEA8375E8B4AD9E6FC.roa
Signing time: Wed 01 Nov 2023 12:00:28 +0000
ROA not before: Wed 01 Nov 2023 12:00:24 +0000
ROA not after: Fri 01 Nov 2024 12:00:24 +0000
asID: 132813
IP address blocks: 156.254.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17125 (0x42e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 12:00:24 2023 GMT
Not After : Nov 1 12:00:24 2024 GMT
Subject: CN=65423ddb-efcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:43:e5:e3:19:59:cf:4c:1a:7d:fb:02:07:
6c:34:0f:73:d7:41:73:fe:58:d1:0e:d8:da:0e:3c:
74:b9:e7:bd:0c:8d:db:70:0d:22:a3:9d:e5:2e:bf:
9a:81:8f:5b:b4:7f:62:e0:11:a7:a9:bc:26:f0:6d:
64:dc:68:51:24:46:69:15:95:47:20:ba:9c:f1:0a:
8c:bb:96:30:46:dc:8b:c8:11:40:3b:e3:14:2c:4d:
27:15:cc:56:5b:48:9b:b0:36:c0:90:4c:bc:5a:fb:
20:c8:21:a3:08:ac:69:df:76:5c:35:2a:a7:70:be:
10:85:c5:b5:0e:dd:f1:8f:f0:42:97:b0:47:72:31:
ac:47:64:41:ab:5c:ac:cc:83:c0:fd:46:77:95:2b:
ad:71:b2:92:fd:e2:8e:56:40:99:e8:5c:41:a6:cc:
25:25:f0:10:a4:eb:c8:ea:56:bb:2c:31:25:65:9b:
84:b7:61:99:a3:11:77:56:c1:e5:90:fe:a1:1e:66:
5d:5c:2b:68:96:2a:d0:c8:8c:f4:4a:f5:35:7f:12:
e5:c5:f8:c3:0c:f6:6a:d7:7d:49:ba:35:b4:33:81:
25:5b:94:f2:d3:f2:7e:cf:cb:4f:92:80:fd:93:21:
0f:50:e7:e2:15:64:d7:38:da:7e:15:af:6c:33:7e:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:8E:1D:45:D3:3A:26:A6:90:52:C5:97:40:5B:56:DD:47:70:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F336E2678AE11EEA8375E8B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.126.0/23
Signature Algorithm: sha256WithRSAEncryption
28:51:69:9f:c2:13:17:3a:97:20:e3:e4:a7:96:43:41:99:53:
bd:63:0e:5d:94:2e:c2:8e:e8:d2:cb:b8:e8:36:3b:51:39:49:
74:26:79:7a:20:47:c9:36:e6:df:86:ea:12:82:22:fe:59:57:
c3:5d:87:85:0e:fc:3e:78:cc:74:20:72:df:f8:0e:be:68:a0:
b3:e7:2d:23:64:05:77:b3:ee:65:18:71:0e:6a:ab:0e:6f:39:
b0:e3:ac:0c:bc:fa:f1:78:80:06:4a:30:bd:b2:83:ce:42:11:
68:39:7d:cb:6e:0c:3e:35:f1:97:8e:40:d7:1c:d7:fa:21:50:
52:fd:82:05:30:c6:07:5e:8b:03:2e:af:c6:54:d9:e6:64:b1:
7f:f8:1e:83:50:4f:25:73:30:40:4f:f8:6e:cc:69:ff:27:41:
80:58:8d:7d:7f:4d:76:ea:c7:4d:cf:30:37:24:f3:74:59:3f:
55:6c:70:4a:03:a6:84:8b:42:97:43:09:08:cd:cf:8c:86:32:
c9:a1:cf:9f:ac:a5:9c:fb:b5:24:04:50:8d:cd:f8:5e:48:21:
4c:32:94:c1:2c:b0:17:2a:61:3c:35:0d:25:44:f7:93:48:e2:
35:80:77:e6:88:bb:85:2c:cb:92:e3:17:bf:4c:18:92:08:7d:
0d:d2:cb:ae
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICQuUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDExMjAwMjRaFw0yNDExMDExMjAwMjRaMBgxFjAU
BgNVBAMTDTY1NDIzZGRiLWVmY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx0UPl4xlZz0waffsCB2w0D3PXQXP+WNEO2NoOPHS5570MjdtwDSKjneUu
v5qBj1u0f2LgEaepvCbwbWTcaFEkRmkVlUcgupzxCoy7ljBG3IvIEUA74xQsTScV
zFZbSJuwNsCQTLxa+yDIIaMIrGnfdlw1KqdwvhCFxbUO3fGP8EKXsEdyMaxHZEGr
XKzMg8D9RneVK61xspL94o5WQJnoXEGmzCUl8BCk68jqVrssMSVlm4S3YZmjEXdW
weWQ/qEeZl1cK2iWKtDIjPRK9TV/EuXF+MMM9mrXfUm6NbQzgSVblPLT8n7Py0+S
gP2TIQ9Q5+IVZNc42n4Vr2wzfsMNAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfASO
HUXTOiamkFLFl0BbVt1HcG8wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzNGMzM2RTI2NzhBRTExRUVBODM3NUU4QjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGc/n4wDQYJKoZIhvcNAQELBQAD
ggEBAChRaZ/CExc6lyDj5KeWQ0GZU71jDl2ULsKO6NLLuOg2O1E5SXQmeXogR8k2
5t+G6hKCIv5ZV8Ndh4UO/D54zHQgct/4Dr5ooLPnLSNkBXez7mUYcQ5qqw5vObDj
rAy8+vF4gAZKML2yg85CEWg5fctuDD418ZeOQNcc1/ohUFL9ggUwxgdeiwMur8ZU
2eZksX/4HoNQTyVzMEBP+G7Maf8nQYBYjX1/TXbqx03PMDck83RZP1VscEoDpoSL
QpdDCQjNz4yGMsmhz5+spZz7tSQEUI3N+F5IIUwylMEssBcqYTw1DSVE95NI4jWA
d+aIu4Usy5LjF79MGJIIfQ3Sy64=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:51 2024 by rpki-client on console-ams.rpki-client.org