Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63E0A5C89EB811EF975BF665762E951A.roa
File: 63E0A5C89EB811EF975BF665762E951A.roa (raw, json)
Hash identifier: 5OAKlHWzymUF1lm/fWgufh437sdmdSpksYNJcjlWFaA=
Subject key identifier: 38:6D:B5:1B:19:6D:08:CA:AD:34:4A:B1:2B:66:A4:DC:64:13:A4:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D05F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63E0A5C89EB811EF975BF665762E951A.roa
Signing time: Sat 09 Nov 2024 16:33:46 +0000
ROA not before: Sat 09 Nov 2024 16:33:42 +0000
ROA not after: Thu 21 Nov 2024 16:33:42 +0000
asID: 198584
IP address blocks: 156.233.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 21 Nov 2024 16:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53343 (0xd05f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 16:33:42 2024 GMT
Not After : Nov 21 16:33:42 2024 GMT
Subject: CN=672f8eea-d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:32:c1:b9:41:80:be:a0:aa:50:6c:a2:81:
cd:e3:f0:12:fb:56:54:3c:df:69:75:61:75:dd:27:
79:d4:e3:3b:6f:46:66:a2:2e:18:82:12:3e:e4:2e:
90:a1:dd:ce:f0:4f:85:4b:6f:2d:88:4a:e7:7f:61:
bc:b6:cc:90:40:b3:eb:58:32:6c:68:1d:68:59:80:
a3:0a:fb:27:5d:6f:d4:f1:8c:c7:da:07:a9:45:f1:
00:3e:41:25:39:0e:e7:02:46:74:fc:91:6d:ec:21:
35:8a:cd:18:89:db:27:eb:e0:0b:fa:ac:bc:c0:4c:
fa:b6:62:96:f2:28:1c:2d:4f:8d:be:12:61:f6:56:
c2:e0:85:01:62:c4:72:5e:3e:b8:99:2a:08:44:f3:
d8:12:61:fe:86:1f:17:38:37:08:70:53:87:21:b3:
db:8e:32:16:94:5f:c4:ad:b2:ec:88:f2:9e:a0:6a:
13:69:04:74:df:26:28:14:e3:15:ee:66:e0:78:ec:
69:61:cb:3d:df:79:3a:bf:f7:b1:50:9e:b8:8b:fb:
16:dc:92:6b:f4:f3:06:31:f1:6f:7e:e7:25:41:86:
b9:bd:95:bb:b0:f2:6d:d1:92:be:25:79:56:8c:0e:
d5:ca:d7:8d:a0:be:d7:7d:97:1c:c1:9a:52:e3:37:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:B5:1B:19:6D:08:CA:AD:34:4A:B1:2B:66:A4:DC:64:13:A4:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63E0A5C89EB811EF975BF665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.210.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0d:63:10:20:1c:93:a7:eb:dc:72:14:1e:68:8a:2c:3f:e6:
92:2b:71:93:70:22:2f:3c:26:eb:ce:b2:4f:a4:e2:f6:11:bb:
74:5e:32:f8:18:e5:c1:c4:59:1f:fa:d9:94:8e:3f:01:18:f2:
da:f5:c6:ed:b7:58:e1:fd:45:cd:6d:1a:9d:aa:18:d8:23:c6:
97:bd:dd:e0:de:98:c9:0e:7e:b1:de:da:b3:f1:47:c2:ce:0b:
24:9a:90:da:38:fd:da:44:1c:dd:f4:7e:44:0d:2a:8d:de:c0:
4e:65:b6:8f:5c:11:09:56:0e:36:c4:18:75:ed:99:2f:f5:4b:
47:92:b2:c1:15:fc:7c:81:75:07:aa:91:c2:98:c8:ef:63:a3:
13:37:49:60:76:e3:97:23:e4:4f:76:94:8f:90:f5:47:40:1e:
27:84:ae:95:3b:af:c9:84:e3:0a:08:45:af:85:5e:27:04:74:
5d:f3:b8:4f:ad:52:43:4f:3b:93:f5:a1:ca:c8:35:fc:b4:b1:
67:41:f1:4a:41:2c:24:f5:cc:d6:12:95:25:68:c3:a8:2e:1b:
5b:f0:5a:b4:7a:ae:f5:8a:e7:42:56:7d:a9:55:1b:7c:c7:2e:
a5:e0:20:f7:99:6c:d0:54:b2:ff:fb:4d:0f:17:11:cc:74:0e:
1e:04:20:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANBfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA5MTYzMzQyWhcNMjQxMTIxMTYzMzQyWjAYMRYw
FAYDVQQDEw02NzJmOGVlYS1kMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArDwywblBgL6gqlBsooHN4/AS+1ZUPN9pdWF13Sd51OM7b0Zmoi4YghI+
5C6Qod3O8E+FS28tiErnf2G8tsyQQLPrWDJsaB1oWYCjCvsnXW/U8YzH2gepRfEA
PkElOQ7nAkZ0/JFt7CE1is0Yidsn6+AL+qy8wEz6tmKW8igcLU+NvhJh9lbC4IUB
YsRyXj64mSoIRPPYEmH+hh8XODcIcFOHIbPbjjIWlF/ErbLsiPKeoGoTaQR03yYo
FOMV7mbgeOxpYcs933k6v/exUJ64i/sW3JJr9PMGMfFvfuclQYa5vZW7sPJt0ZK+
JXlWjA7VyteNoL7XfZccwZpS4zd5fwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDht
tRsZbQjKrTRKsStmpNxkE6TsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0UwQTVDODlFQjgxMUVGOTc1QkY2NjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOnSMA0GCSqGSIb3DQEBCwUA
A4IBAQCQDWMQIByTp+vcchQeaIosP+aSK3GTcCIvPCbrzrJPpOL2Ebt0XjL4GOXB
xFkf+tmUjj8BGPLa9cbtt1jh/UXNbRqdqhjYI8aXvd3g3pjJDn6x3tqz8UfCzgsk
mpDaOP3aRBzd9H5EDSqN3sBOZbaPXBEJVg42xBh17Zkv9UtHkrLBFfx8gXUHqpHC
mMjvY6MTN0lgduOXI+RPdpSPkPVHQB4nhK6VO6/JhOMKCEWvhV4nBHRd87hPrVJD
TzuT9aHKyDX8tLFnQfFKQSwk9czWEpUlaMOoLhtb8Fq0eq71iudCVn2pVRt8xy6l
4CD3mWzQVLL/+00PFxHMdA4eBCDq
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org