Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50CC7D4427E011EFAF06B9F37CDC24C2.roa
File: 50CC7D4427E011EFAF06B9F37CDC24C2.roa (raw, json)
Hash identifier: j+2KP/D2zcLgzshOCIB5FHpMPQVqapG5l1+MB9sBgdw=
Subject key identifier: 51:11:BE:72:8F:E8:03:7A:04:A3:8F:0F:8B:E8:98:97:70:76:68:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50CC7D4427E011EFAF06B9F37CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:49:45 +0000
ROA not before: Tue 11 Jun 2024 10:49:42 +0000
ROA not after: Mon 12 May 2025 10:49:42 +0000
asID: 140951
IP address blocks: 156.227.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37040 (0x90b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 10:49:42 2024 GMT
Not After : May 12 10:49:42 2025 GMT
Subject: CN=66682bc9-9116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:b9:25:4f:f6:53:01:98:4b:09:79:8c:06:
ba:c2:ad:78:6b:16:56:5c:3e:f5:b1:6c:a5:b0:61:
f7:c7:0f:c9:6c:63:ac:45:30:58:4d:ea:c6:10:91:
4a:44:ef:43:9c:16:37:b9:eb:ac:81:50:97:5b:1d:
b9:84:4f:a6:52:56:1d:fc:59:b9:2e:66:4f:69:81:
9b:14:c6:02:73:00:bc:82:de:54:c1:97:3d:00:39:
64:32:b7:b7:c3:f9:f7:3c:6a:a6:f8:7d:c0:fa:9a:
57:4e:ca:45:a9:81:aa:70:ba:d0:33:63:c0:b6:10:
dd:2a:cf:37:3d:35:7d:40:9b:9f:cf:7b:48:26:2e:
13:af:77:cf:82:fa:19:02:ac:5b:b2:1e:69:0f:98:
a7:ec:93:9d:7e:a3:a1:77:e2:89:65:43:ca:93:ee:
f5:1a:58:b4:ec:08:69:3c:3a:ec:b1:59:f4:da:fb:
7b:63:44:eb:10:b5:d7:71:c7:7f:b2:23:ad:b2:f5:
b8:e6:b0:3e:7b:01:df:26:67:71:e5:47:9d:9c:16:
57:9e:fd:9a:83:bb:15:ec:5d:f7:88:22:96:ae:78:
16:b1:9f:68:d8:1d:8b:0c:13:c1:f3:8c:52:1e:74:
3d:0a:fa:6f:70:55:d7:75:50:97:b8:5a:a4:5a:ea:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:BE:72:8F:E8:03:7A:04:A3:8F:0F:8B:E8:98:97:70:76:68:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50CC7D4427E011EFAF06B9F37CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.218.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:cb:26:6d:5b:2f:20:94:46:60:ae:7c:d8:c0:10:56:f6:76:
b0:7b:5e:9b:5a:5c:b0:00:2e:79:04:ff:4e:00:2c:d8:db:c3:
5a:25:55:9b:1b:79:e0:0c:75:0f:d7:eb:6d:c7:ab:83:b3:1d:
1c:90:9e:b5:43:a3:27:dc:6d:19:56:c5:f3:ed:f8:e2:41:6c:
e4:6a:16:89:c6:09:61:12:d7:b1:3e:3b:21:55:0d:86:36:49:
6c:57:ec:c9:50:01:9b:d9:28:9b:c9:15:6c:51:41:11:42:c2:
36:ac:1d:4b:c9:e4:36:7e:06:b7:17:b0:02:ff:99:bb:91:c7:
f9:7a:33:d8:58:d0:44:7e:fd:8a:9d:fd:2f:fd:2e:33:a4:b3:
13:e8:d8:51:84:84:71:52:a2:15:74:e9:39:82:4a:b3:c3:5c:
c8:a6:54:46:d0:df:42:cf:b4:d4:c8:77:87:65:87:1b:c1:63:
6d:dd:4d:25:f9:b1:16:ea:ca:6b:3a:4f:ac:ef:df:22:ec:0a:
87:ca:9c:37:52:bc:cd:69:3e:97:a1:6b:18:f1:fa:90:7b:ce:
20:12:7d:78:f2:06:af:9b:7a:7a:fb:1d:e2:0e:8c:12:de:25:
ad:e7:2c:36:7c:e5:10:fa:28:28:70:7e:c8:2f:aa:10:ca:44:
a0:3a:d2:65
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJCwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjExMTA0OTQyWhcNMjUwNTEyMTA0OTQyWjAYMRYw
FAYDVQQDEw02NjY4MmJjOS05MTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr9i5JU/2UwGYSwl5jAa6wq14axZWXD71sWylsGH3xw/JbGOsRTBYTerG
EJFKRO9DnBY3ueusgVCXWx25hE+mUlYd/Fm5LmZPaYGbFMYCcwC8gt5UwZc9ADlk
Mre3w/n3PGqm+H3A+ppXTspFqYGqcLrQM2PAthDdKs83PTV9QJufz3tIJi4Tr3fP
gvoZAqxbsh5pD5in7JOdfqOhd+KJZUPKk+71Gli07AhpPDrssVn02vt7Y0TrELXX
ccd/siOtsvW45rA+ewHfJmdx5UednBZXnv2ag7sV7F33iCKWrngWsZ9o2B2LDBPB
84xSHnQ9CvpvcFXXdVCXuFqkWup9/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFER
vnKP6AN6BKOPD4vomJdwdmimMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MENDN0Q0NDI3RTAxMUVGQUYwNkI5RjM3Q0RDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOPaMA0GCSqGSIb3DQEBCwUA
A4IBAQCwyyZtWy8glEZgrnzYwBBW9nawe16bWlywAC55BP9OACzY28NaJVWbG3ng
DHUP1+ttx6uDsx0ckJ61Q6Mn3G0ZVsXz7fjiQWzkahaJxglhEtexPjshVQ2GNkls
V+zJUAGb2SibyRVsUUERQsI2rB1LyeQ2fga3F7AC/5m7kcf5ejPYWNBEfv2Knf0v
/S4zpLMT6NhRhIRxUqIVdOk5gkqzw1zIplRG0N9Cz7TUyHeHZYcbwWNt3U0l+bEW
6sprOk+s798i7AqHypw3UrzNaT6XoWsY8fqQe84gEn148gavm3p6+x3iDowS3iWt
5yw2fOUQ+igocH7IL6oQykSgOtJl
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:03 2024 by rpki-client on console-ams.rpki-client.org