Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66240CB81D1111EF8525D9387DDC24C2.roa
File: 66240CB81D1111EF8525D9387DDC24C2.roa (raw, json)
Hash identifier: z2L6Hb0mN95fF1s/sXDdVbNTpHbxzzmoH9M9nDPH1c0=
Subject key identifier: A0:F9:B0:2C:F7:E9:89:B6:4D:D2:76:04:F4:D2:31:F5:E2:F3:86:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66240CB81D1111EF8525D9387DDC24C2.roa
Signing time: Tue 28 May 2024 16:43:24 +0000
ROA not before: Tue 28 May 2024 16:43:20 +0000
ROA not after: Sat 14 Sep 2024 16:43:20 +0000
asID: 138195
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36030 (0x8cbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:43:20 2024 GMT
Not After : Sep 14 16:43:20 2024 GMT
Subject: CN=665609ac-8359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:32:06:55:8f:d4:be:3d:c8:7f:03:23:ab:
d1:51:35:81:b2:4f:2b:2a:f2:ae:49:b0:26:25:ab:
33:1d:8d:40:8e:4a:37:66:e6:f3:7a:8d:39:a1:c5:
4f:df:28:d0:6b:ca:7f:a9:66:9c:63:e5:43:4b:03:
ed:16:0c:ac:26:76:5a:17:c4:c5:fd:c8:68:be:ce:
45:bb:16:66:a6:8d:d7:5c:a1:8f:2a:a3:50:3b:b0:
7f:32:13:26:a2:b6:2f:a6:59:66:60:a7:ce:48:40:
1c:9b:3e:70:14:fc:6e:43:c8:b3:ec:ba:72:a0:7a:
0c:0b:36:1c:e9:6e:27:5e:2c:77:ab:6f:e4:c0:33:
14:0b:5c:2c:7d:4e:c5:a9:5e:6e:a9:26:f2:68:4a:
79:bd:c8:da:a0:eb:6d:17:24:1f:3f:f5:52:85:38:
97:cf:cb:ca:9d:9b:09:c5:6e:89:86:61:d7:28:13:
07:d0:2d:d4:3d:f3:67:47:bb:f2:81:92:f3:04:f9:
85:d3:bd:62:be:df:30:98:2d:bc:c6:75:54:db:cd:
4d:9b:5e:4c:46:b5:2c:d4:a2:ae:c7:e6:a7:38:5e:
ef:73:59:b5:1b:5b:82:a0:4c:8f:04:9b:41:e6:28:
05:df:81:e2:32:e7:ec:85:8f:28:61:9c:b7:72:9a:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:B0:2C:F7:E9:89:B6:4D:D2:76:04:F4:D2:31:F5:E2:F3:86:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66240CB81D1111EF8525D9387DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
af:00:68:0e:a3:13:a4:b3:c8:1f:46:bd:5a:32:6d:10:0b:5a:
99:0c:ef:3c:cc:ad:77:64:c5:2c:66:e9:56:b2:67:24:ff:66:
40:8d:59:07:22:98:21:08:cc:36:5c:9d:da:ef:83:63:bf:9e:
df:99:57:6a:04:22:97:85:df:59:70:42:39:14:85:ae:02:bd:
1b:be:d5:14:86:a3:79:62:96:c7:9f:93:4e:c0:5e:67:c4:8c:
c4:f1:91:18:05:08:10:4e:73:5f:2e:a9:b1:99:af:2d:87:16:
b5:85:c3:f1:86:48:0a:9a:76:64:b1:2f:18:53:5f:9c:0c:c5:
66:e9:15:3f:0f:e8:6c:09:74:3c:75:5f:f9:f3:93:a0:ee:c5:
d5:c5:ad:29:0d:6b:6d:87:74:2b:d4:6d:80:10:e7:6c:47:9b:
7a:21:e9:eb:0c:a4:0a:27:26:91:90:0c:41:70:d7:4c:72:bc:
52:f5:15:57:f3:87:d6:d0:aa:fc:28:2b:d9:f1:1c:2b:6e:ce:
dd:cf:10:b6:cd:a9:6f:6a:68:27:96:01:69:23:9b:c3:e7:02:
75:72:2d:7d:01:22:62:9b:3c:d1:6e:87:fa:95:85:94:a3:77:
6a:20:0d:7e:f3:1e:41:3f:b8:bd:7b:c7:5e:b4:e5:d8:7b:3f:
19:d9:90:db
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIy+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTI4MTY0MzIwWhcNMjQwOTE0MTY0MzIwWjAYMRYw
FAYDVQQDEw02NjU2MDlhYy04MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzWMyBlWP1L49yH8DI6vRUTWBsk8rKvKuSbAmJaszHY1Ajko3Zubzeo05
ocVP3yjQa8p/qWacY+VDSwPtFgysJnZaF8TF/chovs5FuxZmpo3XXKGPKqNQO7B/
MhMmorYvpllmYKfOSEAcmz5wFPxuQ8iz7LpyoHoMCzYc6W4nXix3q2/kwDMUC1ws
fU7FqV5uqSbyaEp5vcjaoOttFyQfP/VShTiXz8vKnZsJxW6JhmHXKBMH0C3UPfNn
R7vygZLzBPmF071ivt8wmC28xnVU281Nm15MRrUs1KKux+anOF7vc1m1G1uCoEyP
BJtB5igF34HiMufshY8oYZy3cppKWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKD5
sCz36Ym2TdJ2BPTSMfXi84Y7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NjI0MENCODFEMTExMUVGODUyNUQ5Mzg3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnONAMA0GCSqGSIb3DQEBCwUA
A4IBAQCvAGgOoxOks8gfRr1aMm0QC1qZDO88zK13ZMUsZulWsmck/2ZAjVkHIpgh
CMw2XJ3a74Njv57fmVdqBCKXhd9ZcEI5FIWuAr0bvtUUhqN5YpbHn5NOwF5nxIzE
8ZEYBQgQTnNfLqmxma8thxa1hcPxhkgKmnZksS8YU1+cDMVm6RU/D+hsCXQ8dV/5
85Og7sXVxa0pDWtth3Qr1G2AEOdsR5t6IenrDKQKJyaRkAxBcNdMcrxS9RVX84fW
0Kr8KCvZ8Rwrbs7dzxC2zalvamgnlgFpI5vD5wJ1ci19ASJimzzRbof6lYWUo3dq
IA1+8x5BP7i9e8detOXYez8Z2ZDb
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:06 2024 by rpki-client on console-ams.rpki-client.org