Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66B963629B7E11EF8D0D6E96762E951A.roa
File: 66B963629B7E11EF8D0D6E96762E951A.roa (raw, json)
Hash identifier: 86frxynShV20tenn+iWx7G4trJT/PFZYxkiIrWxaopo=
Subject key identifier: 36:5C:22:98:4C:58:4F:91:37:F9:C9:94:13:7E:BE:25:E1:DF:06:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66B963629B7E11EF8D0D6E96762E951A.roa
Signing time: Tue 05 Nov 2024 14:01:06 +0000
ROA not before: Tue 05 Nov 2024 14:01:03 +0000
ROA not after: Mon 13 Jan 2025 14:01:03 +0000
asID: 22773
IP address blocks: 156.239.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52877 (0xce8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:01:03 2024 GMT
Not After : Jan 13 14:01:03 2025 GMT
Subject: CN=672a2522-d5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:a1:b7:95:2a:08:4d:7d:eb:cd:9a:35:6c:
3e:00:10:4d:8a:f8:a9:b1:45:57:87:4c:c5:93:6c:
47:9b:d3:b0:ba:c2:f9:13:5c:87:46:c8:85:ab:91:
25:a4:a1:59:50:83:77:f1:c5:22:0b:43:52:b6:e2:
7c:4d:aa:4a:e9:1a:14:bf:f6:63:cb:40:e4:5a:4c:
64:c8:cf:7b:44:13:73:21:f6:ec:67:25:b5:2f:b5:
ab:5c:ea:dc:97:7b:92:e4:b7:a9:b9:04:40:23:57:
3d:29:7a:3b:f0:9d:63:5b:ed:b9:85:28:b5:aa:dc:
c0:16:ea:af:71:06:b4:aa:de:c8:23:7e:34:43:6b:
0f:9d:84:28:7a:62:bd:6b:d0:3c:a3:b4:38:04:ec:
8e:49:00:cd:f5:61:97:ec:11:23:fa:7d:8e:2c:1a:
c2:7d:7a:76:6f:41:38:b2:02:8f:d4:f5:1c:69:af:
75:36:d3:06:22:26:3c:fc:c3:c9:59:5d:55:e7:18:
19:b2:c1:ef:93:d8:cb:62:ba:5f:20:26:4f:5e:a9:
b3:e6:63:90:f8:13:1e:31:29:10:2d:a7:39:5b:7e:
ba:b3:23:38:4e:56:af:52:ca:64:c7:d6:0c:ec:ca:
e3:58:af:e6:ff:db:7e:73:29:84:11:d7:76:9e:87:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5C:22:98:4C:58:4F:91:37:F9:C9:94:13:7E:BE:25:E1:DF:06:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66B963629B7E11EF8D0D6E96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.136.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:7d:a1:13:ae:cc:7c:ce:1b:9e:e3:6a:6d:29:4d:81:49:78:
af:2c:61:80:30:55:c8:92:85:98:79:c2:5f:7e:d8:13:52:4c:
f3:f1:23:27:18:26:6e:89:37:5e:b3:43:f2:d2:b5:44:60:8c:
08:43:a3:b6:85:6e:17:fb:ef:9c:3d:c3:d5:be:c6:5f:da:55:
ad:88:9f:c3:bc:c0:6f:ff:56:d1:7b:7d:3a:0a:5e:27:c4:b1:
c0:54:87:76:a0:a6:86:1a:6c:31:b9:64:26:57:95:c6:a7:6e:
d4:1f:1b:c5:1e:3e:2a:65:c8:a5:e1:3f:8c:e2:e5:7a:d9:2f:
41:30:9d:0a:7e:9e:0e:65:6a:d0:28:41:d8:f2:f9:81:2b:78:
f8:d4:13:2e:9f:81:e7:e4:00:2a:3b:b2:eb:1b:92:64:07:fe:
00:35:81:91:18:7d:ca:89:4f:93:e9:99:96:a4:84:4a:aa:b6:
b6:30:80:1a:3f:a0:04:81:e1:dd:47:6c:47:9b:11:bd:2c:68:
9b:73:77:39:c5:3c:9e:5f:b9:e5:a6:65:c7:9c:d9:fa:9c:b2:
40:5c:d9:23:cc:f6:96:29:ef:b3:60:95:63:8f:ff:13:6d:c9:
35:52:37:51:31:95:74:47:c3:94:9d:1d:b4:c1:ff:89:22:6b:
99:cd:fc:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAM6NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA1MTQwMTAzWhcNMjUwMTEzMTQwMTAzWjAYMRYw
FAYDVQQDEw02NzJhMjUyMi1kNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApTCht5UqCE19682aNWw+ABBNivipsUVXh0zFk2xHm9OwusL5E1yHRsiF
q5ElpKFZUIN38cUiC0NStuJ8TapK6RoUv/Zjy0DkWkxkyM97RBNzIfbsZyW1L7Wr
XOrcl3uS5LepuQRAI1c9KXo78J1jW+25hSi1qtzAFuqvcQa0qt7II340Q2sPnYQo
emK9a9A8o7Q4BOyOSQDN9WGX7BEj+n2OLBrCfXp2b0E4sgKP1PUcaa91NtMGIiY8
/MPJWV1V5xgZssHvk9jLYrpfICZPXqmz5mOQ+BMeMSkQLac5W366syM4TlavUspk
x9YM7MrjWK/m/9t+cymEEdd2noezOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDZc
IphMWE+RN/nJlBN+viXh3wbJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NkI5NjM2MjlCN0UxMUVGOEQwRDZFOTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnO+IMA0GCSqGSIb3DQEBCwUA
A4IBAQC6faETrsx8zhue42ptKU2BSXivLGGAMFXIkoWYecJfftgTUkzz8SMnGCZu
iTdes0Py0rVEYIwIQ6O2hW4X+++cPcPVvsZf2lWtiJ/DvMBv/1bRe306Cl4nxLHA
VId2oKaGGmwxuWQmV5XGp27UHxvFHj4qZcil4T+M4uV62S9BMJ0Kfp4OZWrQKEHY
8vmBK3j41BMun4Hn5AAqO7LrG5JkB/4ANYGRGH3KiU+T6ZmWpIRKqra2MIAaP6AE
geHdR2xHmxG9LGibc3c5xTyeX7nlpmXHnNn6nLJAXNkjzPaWKe+zYJVjj/8Tbck1
UjdRMZV0R8OUnR20wf+JImuZzfx3
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:34 2024 by rpki-client on console-ams.rpki-client.org