Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6410BFF69B7F11EFAADF999C762E951A.roa
File: 6410BFF69B7F11EFAADF999C762E951A.roa (raw, json)
Hash identifier: HzA839PgRplEZRhr+Gai6c9kIjosPDGx6UfwIoahCJw=
Subject key identifier: 70:4B:0E:69:5B:75:42:1F:8E:DC:58:11:20:01:01:09:FA:5A:54:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6410BFF69B7F11EFAADF999C762E951A.roa
Signing time: Tue 05 Nov 2024 14:08:11 +0000
ROA not before: Tue 05 Nov 2024 14:08:08 +0000
ROA not after: Mon 13 Jan 2025 14:08:08 +0000
asID: 7018
IP address blocks: 156.243.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52889 (0xce99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:08:08 2024 GMT
Not After : Jan 13 14:08:08 2025 GMT
Subject: CN=672a26cb-126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:de:8c:29:7d:48:17:a3:40:11:da:a2:22:
68:3f:d1:b3:8c:8b:43:02:97:2e:9a:e7:5d:b3:2f:
8b:50:d3:43:88:40:5d:27:c5:18:01:3d:17:d6:0e:
89:27:d2:a6:8a:35:17:d3:6f:5d:18:79:ed:9d:73:
da:3a:89:56:17:39:63:1a:49:04:89:b7:69:4e:7f:
4f:e0:a6:00:2b:da:5c:75:49:9e:0f:33:e0:5d:0d:
d8:76:28:73:42:f6:b8:33:44:56:29:ec:1c:04:e3:
3e:c0:31:d3:f9:e4:dc:dc:1c:f4:88:57:e6:0a:26:
00:20:ef:5e:c6:72:9c:0f:0a:40:0d:54:5a:7b:fe:
5c:38:76:ba:fb:ba:b3:e9:e3:1d:a2:64:55:04:83:
c2:9a:67:72:78:b0:85:2f:2c:ea:51:4a:a3:7f:34:
60:19:4b:c9:99:d7:39:12:6b:cb:8e:21:14:d2:b8:
e9:57:44:b9:9d:18:3c:8c:f8:6b:7c:14:93:c1:ff:
c1:57:38:30:a3:5a:51:01:c2:94:12:ce:5a:74:b1:
bc:29:9a:e3:5a:1d:43:7b:26:45:ac:a8:55:35:d5:
0c:0b:0b:53:e8:b1:a1:64:6a:81:65:c0:61:4c:04:
3f:21:1c:91:7b:19:cf:11:77:17:40:a1:c5:eb:52:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:0E:69:5B:75:42:1F:8E:DC:58:11:20:01:01:09:FA:5A:54:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6410BFF69B7F11EFAADF999C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:85:9a:71:71:f8:b2:2f:2e:9d:c9:fb:a0:d9:01:7f:18:0e:
d6:4c:65:f2:20:c4:8c:5a:b8:05:16:37:6c:51:34:5f:66:d7:
da:b3:93:e2:85:8b:ed:e7:d6:15:9b:bf:3a:a6:95:0d:16:8e:
f9:f3:c9:34:b2:e8:61:05:34:d0:43:e3:60:81:43:a6:38:7f:
d5:ef:93:66:c0:6f:82:09:66:f3:d4:7d:33:0d:75:04:b5:1c:
dd:22:c1:87:8f:43:af:97:22:df:75:69:2f:12:69:31:9a:77:
67:02:c1:de:78:b7:18:f6:cd:1a:94:bf:b3:6d:d4:87:f5:43:
c1:31:44:56:d5:99:0c:52:8f:a3:52:8f:4e:91:af:f0:c8:46:
be:68:ef:28:6a:cf:c0:61:ec:78:dd:13:d0:9e:3f:09:2b:d9:
82:40:20:78:ee:5b:68:c0:6c:15:6e:4a:8b:4c:d2:49:c8:04:
58:9f:08:5c:83:f4:ee:12:97:29:59:6e:ee:f7:a8:5d:24:07:
2d:78:11:fb:fc:7e:64:51:50:a1:ac:9c:c8:fa:bc:87:95:19:
f5:82:75:ae:70:bd:1e:96:c4:95:c8:0b:46:57:95:f5:1f:0b:
92:d2:89:b0:2f:35:f2:e5:21:6e:67:f7:17:7f:70:ba:8c:2b:
17:54:c8:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAM6ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA1MTQwODA4WhcNMjUwMTEzMTQwODA4WjAYMRYw
FAYDVQQDEw02NzJhMjZjYi0xMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArzrejCl9SBejQBHaoiJoP9GzjItDApcumuddsy+LUNNDiEBdJ8UYAT0X
1g6JJ9KmijUX029dGHntnXPaOolWFzljGkkEibdpTn9P4KYAK9pcdUmeDzPgXQ3Y
dihzQva4M0RWKewcBOM+wDHT+eTc3Bz0iFfmCiYAIO9exnKcDwpADVRae/5cOHa6
+7qz6eMdomRVBIPCmmdyeLCFLyzqUUqjfzRgGUvJmdc5EmvLjiEU0rjpV0S5nRg8
jPhrfBSTwf/BVzgwo1pRAcKUEs5adLG8KZrjWh1DeyZFrKhVNdUMCwtT6LGhZGqB
ZcBhTAQ/IRyRexnPEXcXQKHF61Kd4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHBL
DmlbdUIfjtxYESABAQn6WlTdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDEwQkZGNjlCN0YxMUVGQUFERjk5OUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPMAMA0GCSqGSIb3DQEBCwUA
A4IBAQCKhZpxcfiyLy6dyfug2QF/GA7WTGXyIMSMWrgFFjdsUTRfZtfas5PihYvt
59YVm786ppUNFo7588k0suhhBTTQQ+NggUOmOH/V75NmwG+CCWbz1H0zDXUEtRzd
IsGHj0OvlyLfdWkvEmkxmndnAsHeeLcY9s0alL+zbdSH9UPBMURW1ZkMUo+jUo9O
ka/wyEa+aO8oas/AYex43RPQnj8JK9mCQCB47ltowGwVbkqLTNJJyARYnwhcg/Tu
EpcpWW7u96hdJActeBH7/H5kUVChrJzI+ryHlRn1gnWucL0elsSVyAtGV5X1HwuS
0omwLzXy5SFuZ/cXf3C6jCsXVMgO
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org