Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8BAA72ECA411EE888685C2775412E6.roa
File: 6C8BAA72ECA411EE888685C2775412E6.roa (raw, json)
Hash identifier: G9/Eih8oL6iCirp4GCwtVmbRsC5U3sG8a0+uGkJeXik=
Subject key identifier: 27:73:2B:88:9E:57:A1:5B:B8:96:4D:FE:BE:4F:3E:F2:D2:6A:ED:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 80D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8BAA72ECA411EE888685C2775412E6.roa
Signing time: Thu 28 Mar 2024 01:42:23 +0000
ROA not before: Thu 28 Mar 2024 01:42:20 +0000
ROA not after: Tue 30 Apr 2024 01:42:20 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 01:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32977 (0x80d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 01:42:20 2024 GMT
Not After : Apr 30 01:42:20 2024 GMT
Subject: CN=6604caff-edf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:be:37:48:5e:8d:e2:2c:b9:1e:bf:e0:3a:
a3:67:7a:69:c8:33:6e:6e:3a:1e:6a:85:6d:8c:3c:
35:70:2b:0a:48:21:84:c9:53:5f:93:1e:7c:87:bc:
6f:cb:4a:f0:aa:4f:a6:b0:3e:1f:f1:c2:23:ba:9c:
fa:f9:ce:8d:7b:80:3b:3a:15:fb:15:44:1d:13:45:
0e:cc:5d:90:33:de:ad:5d:9e:e7:40:5e:96:c6:b6:
3e:ef:38:2b:a4:19:ab:58:10:b5:ad:01:93:9a:4a:
a6:e5:f1:b6:1a:50:b4:3e:62:ca:3a:ff:7c:f2:70:
80:0d:e5:0e:79:de:ae:72:ea:bd:a6:4b:5c:c7:c3:
f8:41:8d:42:6e:a8:86:d6:e1:f2:78:4a:a8:40:b0:
4d:ca:55:c8:95:79:3c:92:9d:38:d9:a5:e3:b9:7f:
db:74:08:39:d4:a2:1b:22:15:df:ba:b3:37:a0:b0:
f8:99:b7:0f:68:dc:4f:b8:88:dd:9f:94:ce:6e:05:
74:e1:b7:6d:0c:83:4a:a5:da:d2:94:f4:af:f4:f0:
cf:75:0c:b2:8a:7b:20:51:9a:15:09:6a:4e:68:d2:
dc:4f:25:3a:e0:88:f1:fa:51:af:d5:ca:46:8e:39:
73:a0:c0:51:7e:3a:e5:3f:c3:65:e3:c0:a9:74:03:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:2B:88:9E:57:A1:5B:B8:96:4D:FE:BE:4F:3E:F2:D2:6A:ED:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8BAA72ECA411EE888685C2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
47:82:ee:c1:3f:4b:f3:db:22:3f:6e:dd:ae:9b:74:79:ce:84:
d2:93:f7:6b:5c:4a:f5:0e:44:34:b9:a9:77:0c:fc:31:6b:c8:
28:1a:4b:a6:05:0f:17:94:da:bf:02:46:bf:3e:3d:47:33:c0:
9b:d9:18:f3:83:88:4e:3d:44:5c:ff:45:8d:49:06:cf:5f:99:
f7:5d:68:32:80:c8:fa:53:36:d8:e6:3b:73:f3:04:da:ba:a1:
68:15:1d:1d:9b:7a:48:98:cf:f5:54:1d:de:d9:f8:44:ac:dc:
1c:d1:8f:ad:61:c0:13:ae:83:c0:f7:97:e4:0f:b6:b0:80:fd:
79:37:a0:b7:2d:53:53:c7:10:7a:38:8b:7d:d9:c9:3b:5f:36:
ca:59:02:af:f7:5a:63:84:0c:00:62:af:46:06:79:75:68:95:
79:e4:a9:8a:c5:6b:00:ee:ff:f3:24:1a:49:10:9a:61:22:85:
48:e7:d2:96:41:22:ee:02:9a:4e:9b:ab:8e:4c:e4:18:13:a7:
2c:1e:09:63:95:45:fd:3c:f7:b1:d1:35:25:3a:d9:57:86:02:
b4:31:ab:04:e2:66:1a:3c:5a:d4:2c:50:83:48:ee:93:8f:95:
2e:44:f1:5c:04:d4:d3:2f:74:13:d4:f0:0a:14:4e:2a:3e:42:
01:5a:04:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIDRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwMzI4MDE0MjIwWhcNMjQwNDMwMDE0MjIwWjAYMRYw
FAYDVQQDEw02NjA0Y2FmZi1lZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApWq+N0hejeIsuR6/4DqjZ3ppyDNubjoeaoVtjDw1cCsKSCGEyVNfkx58
h7xvy0rwqk+msD4f8cIjupz6+c6Ne4A7OhX7FUQdE0UOzF2QM96tXZ7nQF6WxrY+
7zgrpBmrWBC1rQGTmkqm5fG2GlC0PmLKOv988nCADeUOed6ucuq9pktcx8P4QY1C
bqiG1uHyeEqoQLBNylXIlXk8kp042aXjuX/bdAg51KIbIhXfurM3oLD4mbcPaNxP
uIjdn5TObgV04bdtDINKpdrSlPSv9PDPdQyyinsgUZoVCWpOaNLcTyU64Ijx+lGv
1cpGjjlzoMBRfjrlP8Nl48CpdAPvOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCdz
K4ieV6FbuJZN/r5PPvLSau1OMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QzhCQUE3MkVDQTQxMUVFODg4Njg1QzI3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQBHgu7BP0vz2yI/bt2um3R5zoTSk/drXEr1DkQ0ual3DPwxa8goGkumBQ8X
lNq/Aka/Pj1HM8Cb2Rjzg4hOPURc/0WNSQbPX5n3XWgygMj6UzbY5jtz8wTauqFo
FR0dm3pImM/1VB3e2fhErNwc0Y+tYcATroPA95fkD7awgP15N6C3LVNTxxB6OIt9
2ck7XzbKWQKv91pjhAwAYq9GBnl1aJV55KmKxWsA7v/zJBpJEJphIoVI59KWQSLu
AppOm6uOTOQYE6csHgljlUX9PPex0TUlOtlXhgK0MasE4mYaPFrULFCDSO6Tj5Uu
RPFcBNTTL3QT1PAKFE4qPkIBWgTf
-----END CERTIFICATE-----
Generated at Mon Apr 29 12:50:22 2024 by rpki-client on console-ams.rpki-client.org