Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525CE974A45D11EF91EDE994762E951A.roa
File: 525CE974A45D11EF91EDE994762E951A.roa (raw, json)
Hash identifier: BrjaqoAxogslMdZnEMB8hq3aZhXAo96m3JrBna0T7/U=
Subject key identifier: 67:93:74:F9:52:F6:D1:B6:5B:88:F4:0B:F2:1D:C1:23:B2:C9:D7:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D43A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525CE974A45D11EF91EDE994762E951A.roa
Signing time: Sat 16 Nov 2024 20:56:59 +0000
ROA not before: Sat 16 Nov 2024 20:56:56 +0000
ROA not after: Fri 29 Nov 2024 20:56:56 +0000
asID: 147302
IP address blocks: 156.238.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54330 (0xd43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:56:56 2024 GMT
Not After : Nov 29 20:56:56 2024 GMT
Subject: CN=6739071b-153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:c7:ff:bf:63:62:bb:a2:25:ec:c2:41:0a:
bc:fa:10:8b:2e:ff:11:33:b2:29:0b:cf:29:1a:65:
65:d9:f2:a0:8b:70:da:ca:a3:12:40:6a:df:c0:7b:
4d:9d:e3:1f:4b:05:96:7f:0a:8e:43:48:6f:ef:0b:
ee:f0:87:ad:f0:fd:aa:5a:f6:29:63:b2:a8:1a:76:
05:88:9a:19:5c:34:ad:76:90:f8:32:8c:a1:ba:ff:
3b:8b:c7:59:19:47:b9:26:7e:9f:6f:52:6f:31:9f:
42:31:2a:36:1f:39:60:a8:3b:e1:38:94:00:3d:6c:
d9:22:de:1c:df:6b:51:5c:fd:dc:f0:3c:8c:33:0d:
dc:00:e8:16:8d:29:37:93:13:ed:1e:33:ba:2e:62:
0d:e1:12:c6:d0:c4:2c:54:80:77:a3:f8:ed:cf:4e:
bf:55:7d:0e:d0:74:c5:ef:22:b6:f9:7e:35:f0:f0:
16:1f:fc:a1:fe:02:02:d3:b3:23:27:2d:24:2d:8e:
2e:38:52:fc:ab:c4:01:f5:e9:d7:67:db:a0:ba:d3:
6d:3f:13:cd:ea:47:47:e6:7b:7d:35:d4:dd:f5:be:
ad:d8:5c:84:e5:a9:25:0d:77:6a:a0:33:7e:ec:d0:
89:c8:66:f4:0c:80:ac:56:9c:b8:68:a6:1f:7b:c7:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:74:F9:52:F6:D1:B6:5B:88:F4:0B:F2:1D:C1:23:B2:C9:D7:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525CE974A45D11EF91EDE994762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:05:93:c6:01:4a:ff:98:82:b5:ca:f7:11:12:ef:a7:fa:01:
62:4e:cc:ac:52:3e:a4:ba:e7:04:ff:59:99:e1:14:93:42:2a:
5b:7d:8a:04:24:27:9e:79:51:44:c4:fe:f7:0f:31:c9:e2:cd:
87:ed:33:64:cc:09:b7:f6:d1:11:e4:7b:05:6d:07:53:a9:7c:
78:85:00:1a:99:1a:09:1e:fa:c8:95:19:e9:4d:c5:95:ac:f2:
46:6a:6d:b7:b1:8e:d1:42:41:9e:de:40:87:7b:30:e3:ba:f9:
87:66:ce:c9:66:a9:f0:07:86:51:a0:1c:4b:41:a0:32:56:66:
a5:90:29:28:67:f2:c1:74:45:6b:ae:1e:ac:6c:db:b3:79:de:
a4:52:ea:43:8c:ac:a6:47:71:30:e3:a5:e5:ea:34:51:ff:6e:
cc:83:00:3e:7b:86:89:a6:c9:4d:15:12:84:97:a5:fa:f9:e9:
18:1e:b7:51:a1:84:8a:a5:90:3c:93:61:89:d1:f2:a5:b4:05:
d4:90:f6:a1:76:7f:4d:89:b6:4d:87:6f:bc:94:56:1e:29:33:
f3:44:09:51:80:4d:a4:bb:74:63:21:17:29:21:80:e9:2d:91:
59:9b:93:a3:f1:1a:58:6f:c6:9f:fb:5b:1d:e5:77:19:4a:01:
88:cb:c4:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANQ6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MjA1NjU2WhcNMjQxMTI5MjA1NjU2WjAYMRYw
FAYDVQQDEw02NzM5MDcxYi0xNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqTfH/79jYruiJezCQQq8+hCLLv8RM7IpC88pGmVl2fKgi3DayqMSQGrf
wHtNneMfSwWWfwqOQ0hv7wvu8Iet8P2qWvYpY7KoGnYFiJoZXDStdpD4Moyhuv87
i8dZGUe5Jn6fb1JvMZ9CMSo2HzlgqDvhOJQAPWzZIt4c32tRXP3c8DyMMw3cAOgW
jSk3kxPtHjO6LmIN4RLG0MQsVIB3o/jtz06/VX0O0HTF7yK2+X418PAWH/yh/gIC
07MjJy0kLY4uOFL8q8QB9enXZ9ugutNtPxPN6kdH5nt9NdTd9b6t2FyE5aklDXdq
oDN+7NCJyGb0DICsVpy4aKYfe8d3tQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGeT
dPlS9tG2W4j0C/IdwSOyydfBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MjVDRTk3NEE0NUQxMUVGOTFFREU5OTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5GMA0GCSqGSIb3DQEBCwUA
A4IBAQCiBZPGAUr/mIK1yvcREu+n+gFiTsysUj6kuucE/1mZ4RSTQipbfYoEJCee
eVFExP73DzHJ4s2H7TNkzAm39tER5HsFbQdTqXx4hQAamRoJHvrIlRnpTcWVrPJG
am23sY7RQkGe3kCHezDjuvmHZs7JZqnwB4ZRoBxLQaAyVmalkCkoZ/LBdEVrrh6s
bNuzed6kUupDjKymR3Ew46Xl6jRR/27MgwA+e4aJpslNFRKEl6X6+ekYHrdRoYSK
pZA8k2GJ0fKltAXUkPahdn9NibZNh2+8lFYeKTPzRAlRgE2ku3RjIRcpIYDpLZFZ
m5Oj8RpYb8af+1sd5XcZSgGIy8Sa
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org