Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59115294277E11EEBEF6D8124AD9E6FC.roa
File: 59115294277E11EEBEF6D8124AD9E6FC.roa (raw, json)
Hash identifier: Ft45RlIJ+PNrWrZ9JGv2ieDeOs6A5b6qOQG4KndLO0Q=
Subject key identifier: F8:E7:C1:D7:F6:09:94:8C:5E:BA:ED:10:37:8B:27:2B:E0:E4:CE:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59115294277E11EEBEF6D8124AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:23:31 +0000
ROA not before: Fri 21 Jul 2023 04:23:27 +0000
ROA not after: Thu 13 Jun 2024 04:23:27 +0000
asID: 22773
IP address blocks: 156.237.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12717 (0x31ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:23:27 2023 GMT
Not After : Jun 13 04:23:27 2024 GMT
Subject: CN=64ba0843-587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:b8:e0:a2:99:1e:84:34:d1:98:4a:d0:d4:
90:df:b0:21:86:07:16:16:d8:b7:ee:5c:4b:34:f4:
b1:d0:8b:f4:b0:16:6d:06:3e:7c:18:8a:54:30:2d:
4c:22:07:af:f4:46:8d:87:4a:23:73:8e:c2:c9:eb:
f0:1e:41:f4:2f:b3:a3:c5:ac:0b:fd:b2:57:6f:a3:
61:53:ee:f6:7e:a6:45:61:2d:e1:97:c2:08:fc:25:
b1:23:3d:9a:f7:ab:e3:35:3a:96:a2:df:51:86:47:
8d:00:b3:6c:7e:4d:ea:7a:58:6f:07:2f:25:7e:d6:
c6:6c:ed:3f:7b:d0:77:6d:e5:3e:d8:16:f5:fd:99:
ae:1c:d1:dc:98:e0:fb:83:c3:58:78:ac:fe:da:ea:
c9:a7:4b:45:39:3c:13:79:6d:00:ca:09:0f:24:39:
f7:6d:e6:17:66:b1:90:fa:e2:aa:82:ae:9a:10:e6:
9b:86:84:88:6d:30:7d:af:65:c9:5a:d1:4b:75:4e:
c2:a7:08:37:ca:8f:03:6a:89:a2:f2:18:ec:98:5e:
b6:c8:02:0f:a9:cd:e5:88:5a:0a:2b:0c:1e:af:be:
d7:d8:2f:79:3f:91:5f:5e:81:49:81:52:9f:14:70:
98:9c:87:6a:b3:d9:20:f3:a6:e8:37:1a:61:e8:64:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:C1:D7:F6:09:94:8C:5E:BA:ED:10:37:8B:27:2B:E0:E4:CE:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59115294277E11EEBEF6D8124AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.0.0/24
Signature Algorithm: sha256WithRSAEncryption
19:91:a3:05:35:ec:59:3f:3f:7f:c3:6d:d8:7d:61:50:34:7d:
2e:9d:8f:8c:67:e9:11:1e:11:be:b6:65:00:fd:2b:65:f2:4e:
4c:3b:90:63:94:b6:f4:9e:7d:84:24:88:38:ff:c3:1c:93:f9:
50:9e:e1:1d:91:c7:4e:f0:36:84:86:7b:1f:d6:6c:09:cb:1b:
ef:96:28:e8:cc:dd:6c:14:fa:23:a1:13:a0:db:8a:bf:0c:2e:
25:fe:ef:bf:4b:37:bd:c8:78:52:fa:01:56:0a:00:51:8f:0d:
6f:fb:6d:94:dd:2c:86:fb:b2:e7:4d:1b:c7:d0:18:8a:79:07:
d9:dd:9a:62:07:a5:13:83:bb:48:a3:04:d5:4b:fc:ad:90:a2:
01:7f:12:fa:35:aa:c8:47:b6:bc:e7:d3:f5:85:88:ed:5f:92:
2c:06:cc:da:ac:1f:fe:cb:48:65:2d:c8:17:ea:12:31:ea:fe:
23:29:42:ee:00:ec:43:89:7e:a6:a5:57:43:5f:f6:4e:0d:05:
36:0b:6a:81:00:27:a7:85:c3:80:23:94:e4:69:d7:65:ae:92:
b1:69:7f:b3:bc:27:be:df:f8:6f:42:82:70:e8:ab:d2:72:98:
9a:27:8d:ca:91:f1:31:50:ef:e5:2e:3d:52:ba:ce:fc:f0:08:
c0:4d:12:ad
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICMa0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA3MjEwNDIzMjdaFw0yNDA2MTMwNDIzMjdaMBgxFjAU
BgNVBAMTDTY0YmEwODQzLTU4N2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKibjgopkehDTRmErQ1JDfsCGGBxYW2LfuXEs09LHQi/SwFm0GPnwYilQw
LUwiB6/0Ro2HSiNzjsLJ6/AeQfQvs6PFrAv9sldvo2FT7vZ+pkVhLeGXwgj8JbEj
PZr3q+M1Opai31GGR40As2x+Tep6WG8HLyV+1sZs7T970Hdt5T7YFvX9ma4c0dyY
4PuDw1h4rP7a6smnS0U5PBN5bQDKCQ8kOfdt5hdmsZD64qqCrpoQ5puGhIhtMH2v
Zcla0Ut1TsKnCDfKjwNqiaLyGOyYXrbIAg+pzeWIWgorDB6vvtfYL3k/kV9egUmB
Up8UcJich2qz2SDzpug3GmHoZEnZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU+OfB
1/YJlIxeuu0QN4snK+DkzkMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzU5MTE1Mjk0Mjc3RTExRUVCRUY2RDgxMjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7QAwDQYJKoZIhvcNAQELBQAD
ggEBABmRowU17Fk/P3/Dbdh9YVA0fS6dj4xn6REeEb62ZQD9K2XyTkw7kGOUtvSe
fYQkiDj/wxyT+VCe4R2Rx07wNoSGex/WbAnLG++WKOjM3WwU+iOhE6Dbir8MLiX+
779LN73IeFL6AVYKAFGPDW/7bZTdLIb7sudNG8fQGIp5B9ndmmIHpRODu0ijBNVL
/K2QogF/Evo1qshHtrzn0/WFiO1fkiwGzNqsH/7LSGUtyBfqEjHq/iMpQu4A7EOJ
fqalV0Nf9k4NBTYLaoEAJ6eFw4AjlORp12WukrFpf7O8J77f+G9CgnDoq9JymJon
jcqR8TFQ7+UuPVK6zvzwCMBNEq0=
-----END CERTIFICATE-----
Generated at Sat May 4 01:53:06 2024 by rpki-client on console-ams.rpki-client.org