Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CB8524F74A11EEA634815D017001B1.roa
File: 53CB8524F74A11EEA634815D017001B1.roa (raw, json)
Hash identifier: CDb2HWOj5IPEHfzAmdpARdxVWNHMz1XM7K1AAO8wu30=
Subject key identifier: B5:46:BF:CD:DC:2D:20:DB:13:2C:09:3C:FA:81:B2:42:D3:30:70:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 821F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CB8524F74A11EEA634815D017001B1.roa
Signing time: Wed 10 Apr 2024 14:55:10 +0000
ROA not before: Wed 10 Apr 2024 14:55:07 +0000
ROA not after: Thu 28 Nov 2024 14:55:07 +0000
asID: 152450
IP address blocks: 156.253.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33311 (0x821f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 14:55:07 2024 GMT
Not After : Nov 28 14:55:07 2024 GMT
Subject: CN=6616a84e-eb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:ed:cc:0b:bb:2b:9b:69:19:6a:fb:0d:9d:
90:05:5e:8e:2f:84:78:2b:3b:50:57:75:89:eb:09:
3c:6c:7f:82:a8:a0:cb:de:3a:1c:7a:b6:56:b9:b3:
4a:c0:26:53:dd:3f:42:a7:3d:9a:55:84:58:4c:b1:
a8:9b:81:a5:64:2b:70:60:90:c2:71:6e:27:f2:73:
d6:b9:56:73:fc:b6:80:c1:c0:32:07:bf:a4:88:2d:
7f:b7:c5:69:73:7d:8f:9c:14:1c:52:ac:86:3a:84:
14:c9:f8:a0:2f:14:4f:d5:1c:54:1b:23:e3:de:69:
a8:44:5d:14:54:35:ba:95:59:4b:2c:c7:20:85:fa:
3d:b2:44:0f:fd:9d:25:64:53:b5:23:00:ba:4f:47:
fa:29:39:19:46:ae:23:5e:4a:68:f7:ff:a3:bd:c6:
08:8c:ae:7f:2b:a7:18:1b:29:2b:11:b9:c2:79:39:
0a:6c:43:ee:e1:2c:09:72:a2:80:df:72:ac:07:cd:
d5:7c:ae:b7:58:2a:be:56:1b:34:b4:dd:7a:2b:20:
62:3c:57:a3:02:97:de:a1:9a:2f:9c:54:bb:d9:e4:
12:67:95:65:93:e4:67:5d:35:20:b0:eb:57:dd:11:
69:48:cb:3c:71:73:f6:59:3d:2c:0b:19:7a:38:98:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:BF:CD:DC:2D:20:DB:13:2C:09:3C:FA:81:B2:42:D3:30:70:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CB8524F74A11EEA634815D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:42:a4:94:ff:0d:82:51:e2:ce:bc:e2:81:3b:15:69:f2:87:
99:05:de:c6:fc:2c:fc:ec:ab:0b:6b:0f:8e:21:ea:9e:81:b1:
dc:7b:e6:fa:24:a4:03:85:2f:87:94:cb:c2:9d:f3:dc:de:7e:
b4:25:74:85:f3:01:14:72:3c:9a:a5:9d:ba:32:be:3e:60:c5:
2d:7a:57:d1:3a:45:35:9e:1d:7f:82:f2:62:00:f2:08:3f:17:
af:ee:7b:42:3b:fa:7a:31:18:a4:fc:e1:e4:d2:95:c4:85:8d:
36:ee:90:dd:48:3f:9c:c9:3d:65:77:69:aa:e6:50:5b:fe:23:
7f:7b:5c:87:40:1e:d3:27:bf:f2:8d:4a:e8:39:71:15:85:a6:
cd:72:5a:cd:c4:cc:39:0c:bd:cf:6d:bc:72:a7:cd:fb:1b:ec:
67:88:5a:76:2c:25:a3:c7:dd:a0:74:8f:4c:e1:0c:f3:78:50:
ea:40:db:46:95:87:68:fa:e3:5b:8e:6e:bd:b6:bb:9d:e5:72:
fb:be:5d:38:55:e1:3a:8f:e2:45:8b:2e:ec:2f:94:71:21:9d:
da:72:8a:bf:db:41:24:79:8e:44:d9:e6:20:aa:62:08:46:96:
58:f6:d4:ff:65:12:16:6a:5d:74:8e:7c:5e:b8:c5:f0:13:16:
3f:f9:49:f1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIIfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEwMTQ1NTA3WhcNMjQxMTI4MTQ1NTA3WjAYMRYw
FAYDVQQDEw02NjE2YTg0ZS1lYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6nrtzAu7K5tpGWr7DZ2QBV6OL4R4KztQV3WJ6wk8bH+CqKDL3jocerZW
ubNKwCZT3T9Cpz2aVYRYTLGom4GlZCtwYJDCcW4n8nPWuVZz/LaAwcAyB7+kiC1/
t8Vpc32PnBQcUqyGOoQUyfigLxRP1RxUGyPj3mmoRF0UVDW6lVlLLMcghfo9skQP
/Z0lZFO1IwC6T0f6KTkZRq4jXkpo9/+jvcYIjK5/K6cYGykrEbnCeTkKbEPu4SwJ
cqKA33KsB83VfK63WCq+Vhs0tN16KyBiPFejApfeoZovnFS72eQSZ5Vlk+RnXTUg
sOtX3RFpSMs8cXP2WT0sCxl6OJiLvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLVG
v83cLSDbEywJPPqBskLTMHDlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81M0NCODUyNEY3NEExMUVFQTYzNDgxNUQwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnP0IMA0GCSqGSIb3DQEBCwUA
A4IBAQB8QqSU/w2CUeLOvOKBOxVp8oeZBd7G/Cz87KsLaw+OIeqegbHce+b6JKQD
hS+HlMvCnfPc3n60JXSF8wEUcjyapZ26Mr4+YMUtelfROkU1nh1/gvJiAPIIPxev
7ntCO/p6MRik/OHk0pXEhY027pDdSD+cyT1ld2mq5lBb/iN/e1yHQB7TJ7/yjUro
OXEVhabNclrNxMw5DL3Pbbxyp837G+xniFp2LCWjx92gdI9M4QzzeFDqQNtGlYdo
+uNbjm69trud5XL7vl04VeE6j+JFiy7sL5RxIZ3acoq/20EkeY5E2eYgqmIIRpZY
9tT/ZRIWal10jnxeuMXwExY/+Unx
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org