Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BE9164EA45611EF8FAD3D6A762E951A.roa
File: 6BE9164EA45611EF8FAD3D6A762E951A.roa (raw, json)
Hash identifier: kGnbJhiPUF6bujfVRrrM2v33DzugEjt09bVre1ulXGw=
Subject key identifier: DB:51:7A:47:D2:B6:88:4B:EA:76:49:68:D4:51:7C:0A:70:FF:A2:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BE9164EA45611EF8FAD3D6A762E951A.roa
Signing time: Sat 16 Nov 2024 20:07:36 +0000
ROA not before: Sat 16 Nov 2024 20:07:32 +0000
ROA not after: Tue 26 Nov 2024 20:07:32 +0000
asID: 39600
IP address blocks: 156.237.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54266 (0xd3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:07:32 2024 GMT
Not After : Nov 26 20:07:32 2024 GMT
Subject: CN=6738fb88-b016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:db:97:54:17:fa:79:09:80:0f:a7:27:7e:
7c:54:64:f2:6e:e1:05:5e:84:7a:e7:83:83:0f:41:
da:e6:d8:27:99:ca:5a:a6:af:b1:e8:70:0c:2c:a8:
0c:bd:84:39:e2:55:ef:bf:f8:e3:eb:fe:10:3e:cb:
40:d8:14:bf:b1:47:bd:ed:4f:c0:0c:28:f4:bf:8e:
75:74:5b:71:98:7b:f9:3e:3b:84:d6:4d:69:83:b2:
4b:37:d4:fd:02:ff:aa:5b:9a:16:9c:2f:85:3d:dd:
83:94:7b:e7:a2:32:0f:af:31:99:88:03:0e:7d:93:
28:dd:d0:cd:f0:59:89:ed:21:18:c3:de:18:c9:cb:
dc:35:c2:05:85:61:6f:f1:65:52:4f:99:ee:11:8e:
d5:a1:f8:a6:e8:2c:cf:a1:23:20:7b:44:32:4f:a1:
cd:ad:59:5c:a7:c6:a7:44:9e:92:63:cb:d2:f6:62:
96:8f:93:a0:e3:bb:9f:69:c9:32:8e:9d:4a:db:3b:
35:93:08:f1:3a:8d:e7:da:e6:c2:bd:0e:61:7e:66:
a1:77:41:eb:03:e0:f3:c7:2e:a0:7a:84:12:c7:fb:
bc:99:a0:fb:8c:af:a9:3c:2b:a5:fa:27:55:6e:4b:
2f:90:6c:78:30:55:05:40:93:3a:b4:e2:fb:af:3a:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:7A:47:D2:B6:88:4B:EA:76:49:68:D4:51:7C:0A:70:FF:A2:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BE9164EA45611EF8FAD3D6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.120.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:1e:a4:3f:3e:7f:21:b3:9e:12:13:52:0a:70:08:b7:5b:1c:
de:19:a1:9d:de:48:39:e2:fc:bb:14:4e:d1:06:ec:df:26:6a:
70:d2:55:f6:33:a4:21:06:a6:76:40:3b:16:a6:95:e1:89:a1:
ac:ef:0d:dd:6f:fa:06:8c:44:2b:d6:f3:2e:4c:2f:04:af:0e:
16:55:0a:6c:ae:ea:15:46:46:c7:73:cd:e0:e5:40:b5:cc:96:
07:1a:61:82:96:e9:98:27:45:dc:36:29:15:8c:2c:b6:fd:f5:
00:7c:94:89:44:52:76:d3:84:b9:0c:be:1d:8f:87:cc:f1:bd:
7e:ba:57:c5:14:0d:e2:c9:72:a6:cf:bb:81:59:d9:89:53:41:
bd:8b:fa:e7:38:4d:51:53:66:43:89:83:80:99:66:a1:ec:ed:
9d:65:93:98:c8:5b:c5:75:2d:a5:2f:60:ff:42:6a:f7:a0:ec:
6a:3f:f3:67:f2:3b:d4:b7:cc:63:0d:a6:67:5f:8a:3d:53:1f:
e5:29:0c:66:0e:f5:54:8a:9c:c6:be:17:38:aa:07:da:6f:97:
e2:5f:f2:4a:f0:28:6b:e8:b6:99:81:5a:44:4b:c5:97:96:aa:
28:ec:4e:c5:b6:8c:dc:92:16:b1:da:0e:09:76:a7:6a:7f:a4:
38:97:d8:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANP6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MjAwNzMyWhcNMjQxMTI2MjAwNzMyWjAYMRYw
FAYDVQQDEw02NzM4ZmI4OC1iMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAurvbl1QX+nkJgA+nJ358VGTybuEFXoR654ODD0Ha5tgnmcpapq+x6HAM
LKgMvYQ54lXvv/jj6/4QPstA2BS/sUe97U/ADCj0v451dFtxmHv5PjuE1k1pg7JL
N9T9Av+qW5oWnC+FPd2DlHvnojIPrzGZiAMOfZMo3dDN8FmJ7SEYw94YycvcNcIF
hWFv8WVST5nuEY7Vofim6CzPoSMge0QyT6HNrVlcp8anRJ6SY8vS9mKWj5Og47uf
ackyjp1K2zs1kwjxOo3n2ubCvQ5hfmahd0HrA+Dzxy6geoQSx/u8maD7jK+pPCul
+idVbksvkGx4MFUFQJM6tOL7rzpvbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNtR
ekfStohL6nZJaNRRfApw/6K0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QkU5MTY0RUE0NTYxMUVGOEZBRDNENkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnO14MA0GCSqGSIb3DQEBCwUA
A4IBAQCMHqQ/Pn8hs54SE1IKcAi3WxzeGaGd3kg54vy7FE7RBuzfJmpw0lX2M6Qh
BqZ2QDsWppXhiaGs7w3db/oGjEQr1vMuTC8Erw4WVQpsruoVRkbHc83g5UC1zJYH
GmGClumYJ0XcNikVjCy2/fUAfJSJRFJ204S5DL4dj4fM8b1+ulfFFA3iyXKmz7uB
WdmJU0G9i/rnOE1RU2ZDiYOAmWah7O2dZZOYyFvFdS2lL2D/Qmr3oOxqP/Nn8jvU
t8xjDaZnX4o9Ux/lKQxmDvVUipzGvhc4qgfab5fiX/JK8Chr6LaZgVpES8WXlqoo
7E7Ftozckhax2g4Jdqdqf6Q4l9gn
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:35 2024 by rpki-client on console-ams.rpki-client.org