Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/648F549E660311EF95B43964762E951A.roa
File: 648F549E660311EF95B43964762E951A.roa (raw, json)
Hash identifier: Vv65sKRpqUrRFsl2sW5FBsfa1rnWb1McKondGkIRArA=
Subject key identifier: 04:A2:2B:E2:25:C2:F2:3F:80:73:A2:CA:C3:27:74:39:DB:EC:28:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AF02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/648F549E660311EF95B43964762E951A.roa
Signing time: Thu 29 Aug 2024 12:37:03 +0000
ROA not before: Thu 29 Aug 2024 12:37:00 +0000
ROA not after: Tue 03 Dec 2024 12:37:00 +0000
asID: 135377
IP address blocks: 156.229.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44802 (0xaf02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 12:37:00 2024 GMT
Not After : Dec 3 12:37:00 2024 GMT
Subject: CN=66d06b6f-d9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:49:18:0c:6b:6e:36:ce:69:f0:09:6a:4a:
ac:32:87:5f:76:b0:85:60:43:9a:47:7a:62:8a:e5:
68:58:d6:df:7a:b6:a4:f3:8f:85:16:56:94:28:f2:
d4:c7:2d:b1:ab:24:f0:97:7c:1e:02:f3:45:22:4e:
f3:47:8c:aa:21:5a:69:3b:e5:d5:b9:8d:f8:da:bc:
30:f3:31:4d:e6:d0:7b:95:96:ae:38:5c:a7:9d:bb:
93:ef:d6:65:1f:d9:98:46:bf:00:6a:5d:ff:ef:23:
35:ed:4b:18:49:52:03:e4:5f:b2:22:37:1d:bc:af:
bf:f9:68:44:3d:50:07:d9:0d:a8:d9:b8:99:04:bb:
5f:d9:f4:31:83:c2:3e:e0:5a:14:65:6f:89:fa:d0:
8a:21:54:16:20:ff:39:36:a9:c5:f6:c9:0b:5c:f3:
f4:df:c9:6d:4f:1e:a5:d3:8e:57:06:50:21:c0:b7:
19:13:bc:30:81:d5:8b:ea:22:46:2e:35:ac:cb:b9:
1f:56:63:d5:22:a5:17:b9:1e:da:d2:67:6a:f2:c6:
5d:1b:e6:f8:b1:0a:34:14:f8:2e:da:50:e5:fc:f5:
4c:76:35:82:7b:79:0b:ab:09:6b:86:36:d6:9b:8b:
a1:e3:05:c3:0b:d6:02:f6:2b:7d:53:96:e4:c9:da:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:2B:E2:25:C2:F2:3F:80:73:A2:CA:C3:27:74:39:DB:EC:28:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/648F549E660311EF95B43964762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:93:06:b5:f8:dd:2a:0b:15:ff:a5:1c:4b:01:1f:75:30:9b:
4a:50:51:18:dc:e4:9a:c0:55:ce:30:ed:5e:e6:81:8c:c6:bc:
98:21:94:fc:e2:bb:2d:13:77:8e:11:bc:29:90:ec:89:58:d0:
e3:55:93:6c:af:cc:eb:d9:35:10:74:2d:03:96:6d:e4:57:87:
75:5c:fe:27:00:3d:d4:78:4b:0e:00:f4:7e:e1:88:e1:7a:58:
d5:f6:82:f1:c2:53:d7:c1:69:cd:0c:4f:a2:9f:b2:c0:22:d2:
87:a2:e6:0b:cb:eb:59:9b:5a:8c:ee:5a:d1:3d:4e:9a:ea:96:
2b:45:bb:9f:22:32:1e:c7:a4:0e:8d:f5:e8:3c:97:c7:46:90:
30:9c:47:16:7d:a9:fc:9f:6c:e2:68:07:3c:c4:dc:72:aa:e3:
09:88:5b:2b:3f:64:18:75:34:63:16:19:d1:b1:2a:cb:3b:d0:
34:85:bf:89:87:a5:5d:ee:da:70:7d:7c:81:12:24:b4:38:f1:
5e:ca:67:d6:e7:9a:1a:ef:73:9a:06:1e:bf:4c:5a:6e:ce:11:
5e:b9:c4:3d:99:32:34:69:b9:8f:89:16:bd:37:0b:22:27:e6:
9f:67:71:23:d4:f0:b6:41:3a:0a:21:fb:df:72:9c:48:50:04:
ed:0e:bf:6e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAK8CMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODI5MTIzNzAwWhcNMjQxMjAzMTIzNzAwWjAYMRYw
FAYDVQQDEw02NmQwNmI2Zi1kOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1TNJGAxrbjbOafAJakqsModfdrCFYEOaR3piiuVoWNbferak84+FFlaU
KPLUxy2xqyTwl3weAvNFIk7zR4yqIVppO+XVuY342rww8zFN5tB7lZauOFynnbuT
79ZlH9mYRr8Aal3/7yM17UsYSVID5F+yIjcdvK+/+WhEPVAH2Q2o2biZBLtf2fQx
g8I+4FoUZW+J+tCKIVQWIP85NqnF9skLXPP038ltTx6l045XBlAhwLcZE7wwgdWL
6iJGLjWsy7kfVmPVIqUXuR7a0mdq8sZdG+b4sQo0FPgu2lDl/PVMdjWCe3kLqwlr
hjbWm4uh4wXDC9YC9it9U5bkydolWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFASi
K+IlwvI/gHOiysMndDnb7CipMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDhGNTQ5RTY2MDMxMUVGOTVCNDM5NjQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUTMA0GCSqGSIb3DQEBCwUA
A4IBAQANkwa1+N0qCxX/pRxLAR91MJtKUFEY3OSawFXOMO1e5oGMxryYIZT84rst
E3eOEbwpkOyJWNDjVZNsr8zr2TUQdC0Dlm3kV4d1XP4nAD3UeEsOAPR+4YjheljV
9oLxwlPXwWnNDE+in7LAItKHouYLy+tZm1qM7lrRPU6a6pYrRbufIjIex6QOjfXo
PJfHRpAwnEcWfan8n2ziaAc8xNxyquMJiFsrP2QYdTRjFhnRsSrLO9A0hb+Jh6Vd
7tpwfXyBEiS0OPFeymfW55oa73OaBh6/TFpuzhFeucQ9mTI0abmPiRa9NwsiJ+af
Z3Ej1PC2QToKIfvfcpxIUATtDr9u
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org