Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EEF1C4CF65411EE8A5AE59B775412E6.roa
File: 4EEF1C4CF65411EE8A5AE59B775412E6.roa (raw, json)
Hash identifier: sIE4xviXIGSBnCZhk90NElLOMfnExOaR1hlzlFev9ZE=
Subject key identifier: 2F:8B:77:E5:B0:13:A6:5F:91:4E:32:4B:73:37:97:DC:C6:E0:4F:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EEF1C4CF65411EE8A5AE59B775412E6.roa
Signing time: Tue 09 Apr 2024 09:34:06 +0000
ROA not before: Tue 09 Apr 2024 09:34:02 +0000
ROA not after: Mon 13 May 2024 09:34:02 +0000
asID: 64267
IP address blocks: 156.248.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33238 (0x81d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:34:02 2024 GMT
Not After : May 13 09:34:02 2024 GMT
Subject: CN=66150b8e-075d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:98:a2:b2:2f:3f:95:fa:a1:72:05:36:96:
61:63:bd:a5:fc:b3:6a:aa:4f:51:08:7e:23:67:1c:
04:7c:45:32:5a:0c:45:09:b9:e0:4b:70:dd:44:a2:
d6:88:93:82:6f:68:1f:ea:55:99:8c:e2:89:22:3b:
38:37:ad:ed:4f:c3:c8:90:65:d0:7c:fc:19:8b:21:
63:11:c6:2d:a1:ea:66:af:15:1d:59:f9:4b:15:ba:
55:4c:d5:dd:fc:90:89:22:e1:50:68:66:67:b9:a4:
3b:be:c2:4b:f4:a7:52:a0:eb:15:66:de:73:f7:df:
02:f3:78:12:44:35:75:e6:c4:eb:33:fa:ff:1f:46:
6a:97:28:25:ae:81:9b:8d:4e:f9:da:ea:d6:a4:9b:
f8:4f:ea:75:40:b5:ce:56:3b:95:b6:e0:86:f5:51:
b8:b3:c8:c2:ed:66:83:8f:48:75:31:27:d1:36:76:
c1:0f:fc:06:2d:a1:ca:83:96:4a:6c:b6:26:6a:a5:
4f:59:b8:de:c1:a5:92:88:5a:04:75:ec:28:e5:78:
1a:81:26:01:8f:60:c5:09:c3:1c:3b:28:99:2d:1c:
59:e2:05:eb:44:42:b4:92:c2:89:d3:1c:fe:8a:28:
a8:41:46:cb:42:34:4b:17:61:b1:a5:0e:da:e0:b5:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:77:E5:B0:13:A6:5F:91:4E:32:4B:73:37:97:DC:C6:E0:4F:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EEF1C4CF65411EE8A5AE59B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.97.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ed:94:8e:23:fd:b2:e1:b0:a7:db:c1:43:f4:ee:f4:7e:b8:
6e:93:52:7a:96:52:2a:19:aa:05:dd:cc:4b:15:5b:e2:cb:1d:
af:ce:22:f0:4a:7c:c1:83:97:ec:29:24:61:56:d5:0f:dc:22:
88:fc:9f:74:80:cf:a1:37:6d:fb:70:dc:d0:35:db:a4:63:e0:
c3:db:89:6d:3f:f8:b8:dc:54:2f:d4:39:23:7f:c7:89:71:1f:
9e:d0:ab:cd:d0:68:95:d8:4b:76:d7:59:18:ff:4e:67:c3:fc:
f5:d5:2e:04:85:77:1c:47:c1:e4:9b:52:2f:e8:7b:b9:0a:7b:
c2:c8:07:3e:6b:9e:3b:9e:1e:91:6f:da:d2:c4:15:de:41:b4:
f6:6c:8a:09:12:57:4e:5c:fe:ec:58:0a:e9:d8:4e:47:f0:a5:
5f:8c:e6:ad:c5:25:81:33:7b:0e:09:96:12:53:c3:af:9c:15:
68:ea:61:eb:4a:c8:78:f5:ae:8f:1f:29:96:a3:74:21:c1:81:
e3:b7:c4:c2:08:6a:7d:76:82:dd:04:55:67:32:40:f1:8c:e2:
38:92:b4:a4:ad:3d:b4:cf:85:ba:73:14:2c:07:a8:a9:60:c8:
a1:a1:b7:7b:02:e8:5a:f0:9a:c7:66:87:47:9c:81:04:bb:6b:
a0:59:12:16
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIHWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDA5MDkzNDAyWhcNMjQwNTEzMDkzNDAyWjAYMRYw
FAYDVQQDEw02NjE1MGI4ZS0wNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1MyYorIvP5X6oXIFNpZhY72l/LNqqk9RCH4jZxwEfEUyWgxFCbngS3Dd
RKLWiJOCb2gf6lWZjOKJIjs4N63tT8PIkGXQfPwZiyFjEcYtoepmrxUdWflLFbpV
TNXd/JCJIuFQaGZnuaQ7vsJL9KdSoOsVZt5z998C83gSRDV15sTrM/r/H0Zqlygl
roGbjU752urWpJv4T+p1QLXOVjuVtuCG9VG4s8jC7WaDj0h1MSfRNnbBD/wGLaHK
g5ZKbLYmaqVPWbjewaWSiFoEdewo5XgagSYBj2DFCcMcOyiZLRxZ4gXrREK0ksKJ
0xz+iiioQUbLQjRLF2GxpQ7a4LU3PQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC+L
d+WwE6ZfkU4yS3M3l9zG4E+PMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RUVGMUM0Q0Y2NTQxMUVFOEE1QUU1OUI3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhhMA0GCSqGSIb3DQEBCwUA
A4IBAQBA7ZSOI/2y4bCn28FD9O70frhuk1J6llIqGaoF3cxLFVviyx2vziLwSnzB
g5fsKSRhVtUP3CKI/J90gM+hN237cNzQNdukY+DD24ltP/i43FQv1Dkjf8eJcR+e
0KvN0GiV2Et211kY/05nw/z11S4EhXccR8Hkm1Iv6Hu5CnvCyAc+a547nh6Rb9rS
xBXeQbT2bIoJEldOXP7sWArp2E5H8KVfjOatxSWBM3sOCZYSU8OvnBVo6mHrSsh4
9a6PHymWo3QhwYHjt8TCCGp9doLdBFVnMkDxjOI4krSkrT20z4W6cxQsB6ipYMih
obd7Auha8JrHZodHnIEEu2ugWRIW
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org