Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A9E7E08FE1911EE81659A63017001B1.roa
File: 5A9E7E08FE1911EE81659A63017001B1.roa (raw, json)
Hash identifier: myhNyENh/U/26q3Zj1eVDhmmFbIg1mWwQfinrfl8L7o=
Subject key identifier: 4D:C9:2F:A5:18:BB:8A:7E:66:69:64:59:64:14:26:86:37:28:4A:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8372
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A9E7E08FE1911EE81659A63017001B1.roa
Signing time: Fri 19 Apr 2024 06:52:14 +0000
ROA not before: Fri 19 Apr 2024 06:52:11 +0000
ROA not after: Tue 21 May 2024 06:52:11 +0000
asID: 141718
IP address blocks: 156.230.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33650 (0x8372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 06:52:11 2024 GMT
Not After : May 21 06:52:11 2024 GMT
Subject: CN=6622149e-755d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:68:21:bb:ca:32:75:b8:be:db:f4:58:9a:51:
b9:1a:32:11:fb:00:f4:ec:ed:bf:f1:95:70:79:97:
3c:56:41:c9:99:27:73:48:ce:ef:e1:16:68:50:9e:
77:3a:f1:c6:ef:9c:47:7f:73:64:32:ae:95:03:ba:
e3:b4:b2:81:61:32:06:c9:e8:9f:69:56:3a:16:6d:
a7:ee:f5:e3:37:ae:d5:fb:7b:1a:e1:4d:74:c5:30:
90:3a:64:d4:fa:6d:8d:10:af:2c:84:c6:0b:8b:7a:
ba:3f:3c:31:4b:86:b7:0d:bf:39:08:cf:1b:f8:44:
fc:38:6f:b9:c3:14:8c:6f:c6:2d:e6:ec:a4:15:c3:
2b:48:1e:7f:bb:2b:d9:fe:5c:69:51:b6:15:9e:a0:
98:20:da:35:02:d2:e8:c1:03:df:c0:39:3a:4b:32:
7c:e5:26:37:18:6f:e6:bf:8d:f6:29:2c:5b:f0:88:
cf:58:55:55:8e:13:39:f6:59:50:7c:d4:d6:24:0e:
4c:9c:cc:ae:3f:d8:07:22:86:61:b4:63:d4:ca:ca:
cc:0a:d8:14:d3:2f:b0:01:a1:e2:f5:02:4e:82:f9:
04:a3:d9:fa:ad:ac:4c:6c:db:61:7c:0a:14:c6:6a:
b4:3e:43:ad:a0:93:fe:ad:cc:2f:c4:af:85:3b:bd:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:2F:A5:18:BB:8A:7E:66:69:64:59:64:14:26:86:37:28:4A:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A9E7E08FE1911EE81659A63017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c1:89:65:ac:22:05:4c:d2:e2:43:19:ca:a0:60:5d:2f:9f:
b8:53:33:8c:e9:b0:da:f2:fe:92:4d:4a:36:00:b7:22:a7:48:
e5:17:48:28:62:9b:d6:75:41:90:de:74:ee:ed:46:87:56:1c:
89:4b:3b:bb:0e:ce:ef:08:3b:a7:93:45:99:56:85:b4:0b:45:
6e:ec:4b:50:7e:7e:26:0c:01:06:ae:75:eb:4c:8d:91:01:ac:
2b:62:05:6d:64:2d:78:a2:22:b3:fb:ce:53:01:c0:b5:40:a8:
72:a7:32:60:df:18:5c:e9:23:3b:8a:2d:84:64:50:bf:6c:1e:
97:b3:ab:95:71:21:f4:fc:54:49:44:5c:f8:f5:c1:93:25:4d:
87:8b:19:41:70:80:04:7d:54:c8:4d:19:6b:2d:21:25:23:bd:
c2:4f:b0:da:bb:42:26:b2:31:86:1f:9b:bd:61:4d:71:de:eb:
46:48:dd:a3:21:9d:9d:da:07:e6:6d:f8:1a:85:bd:b0:e9:ce:
28:27:99:e9:f0:a6:37:ae:dc:15:70:26:fd:7e:e4:be:ad:01:
70:37:6e:41:01:a5:5f:2c:e7:46:fd:c1:22:af:75:17:21:7c:
10:26:e7:bc:8f:9f:52:74:8a:65:36:0a:de:63:6f:75:97:1d:
9d:f0:d6:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAINyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE5MDY1MjExWhcNMjQwNTIxMDY1MjExWjAYMRYw
FAYDVQQDEw02NjIyMTQ5ZS03NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6Wghu8oydbi+2/RYmlG5GjIR+wD07O2/8ZVweZc8VkHJmSdzSM7v4RZo
UJ53OvHG75xHf3NkMq6VA7rjtLKBYTIGyeifaVY6Fm2n7vXjN67V+3sa4U10xTCQ
OmTU+m2NEK8shMYLi3q6PzwxS4a3Db85CM8b+ET8OG+5wxSMb8Yt5uykFcMrSB5/
uyvZ/lxpUbYVnqCYINo1AtLowQPfwDk6SzJ85SY3GG/mv432KSxb8IjPWFVVjhM5
9llQfNTWJA5MnMyuP9gHIoZhtGPUysrMCtgU0y+wAaHi9QJOgvkEo9n6raxMbNth
fAoUxmq0PkOtoJP+rcwvxK+FO72m0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE3J
L6UYu4p+ZmlkWWQUJoY3KEr5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QTlFN0UwOEZFMTkxMUVFODE2NTlBNjMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOYxMA0GCSqGSIb3DQEBCwUA
A4IBAQAdwYllrCIFTNLiQxnKoGBdL5+4UzOM6bDa8v6STUo2ALcip0jlF0goYpvW
dUGQ3nTu7UaHVhyJSzu7Ds7vCDunk0WZVoW0C0Vu7EtQfn4mDAEGrnXrTI2RAawr
YgVtZC14oiKz+85TAcC1QKhypzJg3xhc6SM7ii2EZFC/bB6Xs6uVcSH0/FRJRFz4
9cGTJU2HixlBcIAEfVTITRlrLSElI73CT7Dau0ImsjGGH5u9YU1x3utGSN2jIZ2d
2gfmbfgahb2w6c4oJ5np8KY3rtwVcCb9fuS+rQFwN25BAaVfLOdG/cEir3UXIXwQ
Jue8j59SdIplNgreY291lx2d8Naj
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org