Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7195596C3CCE11EF9CDDC645762E951A.roa
File: 7195596C3CCE11EF9CDDC645762E951A.roa (raw, json)
Hash identifier: hvtPWDn/JqZ2ywupbGRpO22aLqGDWIwDc2R5G0PEYw4=
Subject key identifier: 4F:B8:17:1F:43:B9:CF:EC:23:B7:72:36:92:DA:22:CF:44:9E:70:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9954
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7195596C3CCE11EF9CDDC645762E951A.roa
Signing time: Mon 08 Jul 2024 02:04:44 +0000
ROA not before: Mon 08 Jul 2024 02:04:41 +0000
ROA not after: Fri 10 Jul 2026 02:04:41 +0000
asID: 150313
IP address blocks: 156.238.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39252 (0x9954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:04:41 2024 GMT
Not After : Jul 10 02:04:41 2026 GMT
Subject: CN=668b493c-4d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:4a:1c:f2:6d:7b:5c:cd:75:79:6a:c4:d7:
b3:7a:52:46:43:e8:d7:73:00:f4:1b:9b:f2:30:08:
bb:3a:9d:4a:a6:3f:ed:9d:56:7e:6a:63:ce:fa:4c:
6e:86:5e:20:e0:77:12:6e:4a:aa:a0:dc:b2:7e:34:
f1:11:49:d3:e7:a8:06:0f:7b:b2:eb:fa:79:fb:7b:
e9:fa:a5:ea:ca:f6:9a:62:fd:ee:a0:e6:cc:c2:6c:
d5:a9:77:1f:0e:28:f7:af:05:b7:dc:3d:50:b9:97:
8c:33:1b:7a:2a:7b:a9:6d:62:31:f0:08:92:6e:35:
12:6b:51:c5:5f:f7:1c:43:90:79:4e:5d:bc:a9:9a:
bb:5b:b2:fe:2c:62:f3:00:3d:35:99:b6:27:94:35:
4b:e8:c8:f6:9b:57:9d:f9:4a:be:3d:a3:98:b4:18:
7e:e3:d2:91:15:97:31:41:f7:28:4c:46:46:59:8d:
2a:c6:a4:76:aa:bd:9c:54:e1:00:c7:85:e1:b8:1e:
9d:d6:d8:b3:40:44:a5:35:f7:9a:82:21:c7:c5:c5:
8e:1d:fc:3e:e8:de:e7:6e:8a:0b:3f:2e:5f:a7:6e:
06:60:d7:8d:48:4a:e8:b4:94:70:3e:84:f0:8d:89:
a6:ec:d0:5b:a7:51:5b:c9:e7:bc:46:79:c3:e4:1e:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:17:1F:43:B9:CF:EC:23:B7:72:36:92:DA:22:CF:44:9E:70:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7195596C3CCE11EF9CDDC645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:36:19:c4:d6:b3:c3:b2:88:be:5a:04:f2:9d:c4:0a:4a:bb:
7e:25:e9:07:ff:c2:c1:cc:79:c8:b8:2e:79:59:5e:6e:38:25:
13:62:e7:f2:ea:22:f3:27:9e:00:ee:80:2d:ad:50:05:06:a6:
b0:f0:df:92:9f:a8:8f:35:09:16:22:1d:73:4b:dc:65:6d:22:
9d:be:0e:eb:65:f2:e9:09:58:ef:62:c6:0d:9e:f4:eb:ab:ee:
4f:3d:9f:99:8d:6e:21:e0:1a:35:0f:4d:5a:55:9b:3d:93:2b:
54:db:2e:95:e5:20:6d:5c:96:02:12:b5:4b:25:a7:dd:2a:14:
0f:07:0b:84:d5:07:d4:9a:e2:5c:70:b7:b5:11:dd:a3:d5:a0:
2c:e5:f5:78:d9:22:a0:e3:06:75:8d:c7:f1:9a:87:38:7f:01:
fa:09:f0:33:ff:d2:24:bb:f9:15:6e:db:a5:1d:72:7d:09:e6:
f3:61:39:a7:21:66:ea:cc:5e:c4:8c:6f:7f:16:e8:9f:db:fc:
23:82:1c:f6:f5:a3:9a:b7:a9:02:cb:b6:1b:c7:c4:4e:3d:cd:
4e:22:a1:3b:7f:67:b7:dc:10:50:c6:ae:f9:42:a5:b2:2d:a8:
de:f9:0c:de:4a:dd:91:7f:02:71:63:da:f8:47:6c:78:e9:65:
48:0c:73:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJlUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzA4MDIwNDQxWhcNMjYwNzEwMDIwNDQxWjAYMRYw
FAYDVQQDEw02NjhiNDkzYy00ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAszRKHPJte1zNdXlqxNezelJGQ+jXcwD0G5vyMAi7Op1Kpj/tnVZ+amPO
+kxuhl4g4HcSbkqqoNyyfjTxEUnT56gGD3uy6/p5+3vp+qXqyvaaYv3uoObMwmzV
qXcfDij3rwW33D1QuZeMMxt6KnupbWIx8AiSbjUSa1HFX/ccQ5B5Tl28qZq7W7L+
LGLzAD01mbYnlDVL6Mj2m1ed+Uq+PaOYtBh+49KRFZcxQfcoTEZGWY0qxqR2qr2c
VOEAx4XhuB6d1tizQESlNfeagiHHxcWOHfw+6N7nbooLPy5fp24GYNeNSErotJRw
PoTwjYmm7NBbp1Fbyee8RnnD5B48qwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE+4
Fx9Duc/sI7dyNpLaIs9EnnBJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTk1NTk2QzNDQ0UxMUVGOUNEREM2NDU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnO7QMA0GCSqGSIb3DQEBCwUA
A4IBAQB+NhnE1rPDsoi+WgTyncQKSrt+JekH/8LBzHnIuC55WV5uOCUTYufy6iLz
J54A7oAtrVAFBqaw8N+Sn6iPNQkWIh1zS9xlbSKdvg7rZfLpCVjvYsYNnvTrq+5P
PZ+ZjW4h4Bo1D01aVZs9kytU2y6V5SBtXJYCErVLJafdKhQPBwuE1QfUmuJccLe1
Ed2j1aAs5fV42SKg4wZ1jcfxmoc4fwH6CfAz/9Iku/kVbtulHXJ9CebzYTmnIWbq
zF7EjG9/Fuif2/wjghz29aOat6kCy7Ybx8ROPc1OIqE7f2e33BBQxq75QqWyLaje
+QzeSt2RfwJxY9r4R2x46WVIDHMn
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:07 2024 by rpki-client on console-ams.rpki-client.org