Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AE6234A8F8A11EF94A26EBE762E951A.roa
File: 5AE6234A8F8A11EF94A26EBE762E951A.roa (raw, json)
Hash identifier: +VDBjiyMiHblhxt5sqnPbAakzgkSD+62yjchprjVrvw=
Subject key identifier: 6F:55:BB:89:5C:73:08:B1:87:CD:18:16:CB:45:69:9E:2F:CD:1D:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C74F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AE6234A8F8A11EF94A26EBE762E951A.roa
Signing time: Mon 21 Oct 2024 08:56:27 +0000
ROA not before: Mon 21 Oct 2024 08:56:23 +0000
ROA not after: Sat 23 Nov 2024 08:56:23 +0000
asID: 44559
IP address blocks: 156.246.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51023 (0xc74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 08:56:23 2024 GMT
Not After : Nov 23 08:56:23 2024 GMT
Subject: CN=6716173a-75b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:79:12:f8:a3:5b:f6:56:cd:29:6f:64:c5:
ee:47:93:c8:6c:b0:17:a7:93:a1:a7:30:ac:39:50:
b3:42:52:a3:67:07:41:99:dd:9e:a5:7b:9a:86:c3:
0f:34:71:25:ab:2e:21:91:f4:37:e1:0b:a0:33:7d:
83:7f:91:e7:ca:94:86:86:fb:0d:fa:7f:52:17:84:
9a:ac:9a:30:cf:cb:ea:f3:02:8d:89:a2:43:5b:20:
4e:29:84:ad:54:27:71:5a:f3:d5:66:3e:e6:62:1d:
bd:57:a1:0c:a5:1d:dd:ef:81:03:8e:59:ea:d7:1a:
e2:e5:6e:2f:8b:38:8d:f0:30:81:72:22:eb:5f:c4:
de:2a:70:58:40:b3:c4:b0:49:76:a3:23:7b:10:e2:
a4:2e:ac:6a:05:02:00:92:ad:10:e2:8b:d3:f0:85:
43:1d:d6:7f:bf:be:89:ba:3b:5c:54:39:42:5f:ad:
8e:cd:33:5f:ce:66:47:38:35:28:fb:d5:40:92:3e:
c9:83:b4:a4:73:be:1c:f0:bc:44:88:03:71:c3:48:
f7:72:d0:e7:8f:42:65:24:c0:7a:5d:da:08:bc:bd:
75:39:d5:1a:5f:f8:bc:66:a7:71:99:2b:62:bc:07:
d7:3e:90:fc:78:98:4f:7c:c6:01:37:c0:cf:ea:db:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:55:BB:89:5C:73:08:B1:87:CD:18:16:CB:45:69:9E:2F:CD:1D:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AE6234A8F8A11EF94A26EBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:7b:4a:aa:1d:b1:8e:b0:96:65:c4:b5:c5:23:a9:b8:57:8c:
89:79:fe:d6:76:b9:e8:7a:50:e6:fc:1b:c1:48:37:62:c2:73:
ea:7b:78:4f:c6:73:0b:b0:1d:9f:b0:0b:8b:8f:ba:6d:40:ed:
e2:fe:cc:c7:ca:a0:ce:9a:27:df:28:6b:33:bc:7e:92:43:0e:
ff:8b:8e:d7:74:30:41:ee:67:75:54:2e:9d:7b:11:24:06:fe:
1e:a9:77:ea:e5:a9:cb:82:c1:fc:72:42:a7:f5:a5:80:09:ac:
6a:56:d2:88:11:4f:e1:fd:09:58:7d:77:14:a5:47:b8:77:ab:
41:8e:24:56:94:a3:5a:d3:fb:d3:17:41:c0:de:df:79:c5:4c:
52:22:0e:9b:2d:c9:df:3b:0d:30:e3:f9:33:14:65:e4:36:ee:
8c:08:b8:fd:27:04:77:6e:30:b2:41:fe:5f:8b:bd:5c:2a:44:
00:dc:06:16:49:45:05:36:bc:ca:53:ad:af:1c:5e:b7:c7:72:
2b:05:64:06:c5:b5:bb:e9:77:17:c1:6a:b1:4b:05:05:a1:eb:
26:53:dc:20:f5:e7:2d:61:d0:ad:c6:18:d5:a5:90:f3:79:2d:
28:c3:25:da:51:56:cb:4b:e8:9d:e3:58:1c:24:54:87:d2:13:
c7:ca:f4:70
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMdPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDIxMDg1NjIzWhcNMjQxMTIzMDg1NjIzWjAYMRYw
FAYDVQQDEw02NzE2MTczYS03NWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuwV5EvijW/ZWzSlvZMXuR5PIbLAXp5OhpzCsOVCzQlKjZwdBmd2epXua
hsMPNHElqy4hkfQ34QugM32Df5HnypSGhvsN+n9SF4SarJowz8vq8wKNiaJDWyBO
KYStVCdxWvPVZj7mYh29V6EMpR3d74EDjlnq1xri5W4viziN8DCBciLrX8TeKnBY
QLPEsEl2oyN7EOKkLqxqBQIAkq0Q4ovT8IVDHdZ/v76JujtcVDlCX62OzTNfzmZH
ODUo+9VAkj7Jg7Skc74c8LxEiANxw0j3ctDnj0JlJMB6XdoIvL11OdUaX/i8Zqdx
mStivAfXPpD8eJhPfMYBN8DP6ttcbwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG9V
u4lccwixh80YFstFaZ4vzR3LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QUU2MjM0QThGOEExMUVGOTRBMjZFQkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPaoMA0GCSqGSIb3DQEBCwUA
A4IBAQCoe0qqHbGOsJZlxLXFI6m4V4yJef7WdrnoelDm/BvBSDdiwnPqe3hPxnML
sB2fsAuLj7ptQO3i/szHyqDOmiffKGszvH6SQw7/i47XdDBB7md1VC6dexEkBv4e
qXfq5anLgsH8ckKn9aWACaxqVtKIEU/h/QlYfXcUpUe4d6tBjiRWlKNa0/vTF0HA
3t95xUxSIg6bLcnfOw0w4/kzFGXkNu6MCLj9JwR3bjCyQf5fi71cKkQA3AYWSUUF
NrzKU62vHF63x3IrBWQGxbW76XcXwWqxSwUFoesmU9wg9ectYdCtxhjVpZDzeS0o
wyXaUVbLS+id41gcJFSH0hPHyvRw
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:30 2024 by rpki-client on console-fra.rpki-client.org