Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729C6FAA929A11EE8854495DD25BE465.roa
File: 729C6FAA929A11EE8854495DD25BE465.roa (raw, json)
Hash identifier: 2s7wH5v5C3wN4UF+TvjG21qBw7KuDN4TqHVsX88R0yg=
Subject key identifier: CB:F7:F9:F0:62:29:50:D2:41:AB:C8:12:D7:7D:A7:DC:01:C6:A5:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4EED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729C6FAA929A11EE8854495DD25BE465.roa
Signing time: Mon 04 Dec 2023 11:44:14 +0000
ROA not before: Mon 04 Dec 2023 11:44:11 +0000
ROA not after: Thu 28 Nov 2024 11:44:11 +0000
asID: 132813
IP address blocks: 156.253.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20205 (0x4eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 4 11:44:11 2023 GMT
Not After : Nov 28 11:44:11 2024 GMT
Subject: CN=656dbb8e-d0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:c9:1d:a2:1d:32:a0:af:78:56:7a:6e:02:
4b:27:c1:09:b1:f9:65:41:a9:e8:c0:65:ae:a2:19:
3f:d1:31:32:d9:5c:34:58:14:8b:34:9b:4c:91:b4:
58:f8:73:db:a1:d2:8f:d5:64:f7:0f:05:c3:40:65:
5f:27:59:38:31:7e:d6:f7:a5:3b:98:a4:84:93:67:
84:6a:e5:91:ee:18:db:5c:06:8c:e0:4c:0f:f4:02:
5d:15:7f:b5:36:85:dd:eb:03:67:93:ab:f4:5a:5f:
7a:25:d1:9e:08:cb:73:a8:73:96:7a:cd:62:b6:3b:
c9:ec:c8:d6:7f:7a:01:a7:7d:ae:58:1b:ce:d8:7d:
ae:6a:6c:df:d0:bc:17:62:51:5e:d5:bc:d4:ad:b4:
5e:e6:d4:08:39:dc:df:96:0f:f9:03:41:57:b4:96:
b6:1c:ab:d2:a5:bb:d9:45:c3:87:0d:09:ca:67:3e:
7c:0b:3e:a2:10:3e:2b:1e:74:63:8a:e8:0b:47:f7:
c8:34:a6:d4:de:53:86:ac:49:e7:b8:56:a1:b3:5d:
12:4f:2e:a1:94:b0:a9:3d:36:09:e1:2a:11:e0:b7:
91:70:c1:87:92:a0:1b:27:ae:80:43:ef:59:2a:ed:
b2:e6:01:5c:dc:66:83:0b:67:fe:17:91:d7:f9:60:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:F9:F0:62:29:50:D2:41:AB:C8:12:D7:7D:A7:DC:01:C6:A5:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729C6FAA929A11EE8854495DD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.8.0/21
Signature Algorithm: sha256WithRSAEncryption
60:09:49:c5:ee:b1:55:0a:3e:01:2b:d9:28:a4:27:c7:85:58:
53:bb:66:23:3f:d8:e7:b0:85:26:4f:29:25:49:3e:05:f4:f3:
8f:5e:bd:e8:4e:4a:a9:05:9d:b8:fe:2e:3a:e0:0e:a2:e7:e2:
a8:e7:b7:54:a1:94:ea:a2:67:a0:1b:85:9b:06:3d:49:b1:06:
26:a4:b2:49:b8:41:dc:19:4e:95:f3:bd:9b:2b:5f:e1:71:60:
17:b4:db:c0:2c:64:96:c3:52:11:bd:49:00:65:bf:a8:ef:bf:
bb:e6:74:95:70:5c:7a:7c:bf:b6:2c:bd:0e:fb:22:18:fa:21:
62:e2:f9:00:35:0c:91:bc:1d:99:bd:84:10:40:0a:36:15:f2:
b2:31:de:c2:b0:67:2e:7a:14:b7:06:82:62:38:d3:fb:a4:56:
bc:aa:02:34:3e:cd:b4:6f:23:b6:2f:ca:d2:bd:70:e1:d9:9e:
8e:b5:9a:f6:6c:57:7a:fa:fe:14:5c:3f:ba:fe:df:65:43:0b:
73:93:ed:b4:b3:97:8f:80:11:a5:3a:4c:a0:5c:12:0b:2f:84:
cd:3a:a3:8e:38:c2:20:c0:13:ca:b1:54:78:32:35:a3:aa:59:
b6:46:6f:8d:1c:1d:7e:9e:bf:76:6a:6b:ee:a9:02:6d:62:50:
09:32:31:ce
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICTu0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEyMDQxMTQ0MTFaFw0yNDExMjgxMTQ0MTFaMBgxFjAU
BgNVBAMTDTY1NmRiYjhlLWQwZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLzMkdoh0yoK94VnpuAksnwQmx+WVBqejAZa6iGT/RMTLZXDRYFIs0m0yR
tFj4c9uh0o/VZPcPBcNAZV8nWTgxftb3pTuYpISTZ4Rq5ZHuGNtcBozgTA/0Al0V
f7U2hd3rA2eTq/RaX3ol0Z4Iy3Ooc5Z6zWK2O8nsyNZ/egGnfa5YG87Yfa5qbN/Q
vBdiUV7VvNSttF7m1Ag53N+WD/kDQVe0lrYcq9Klu9lFw4cNCcpnPnwLPqIQPise
dGOK6AtH98g0ptTeU4asSee4VqGzXRJPLqGUsKk9NgnhKhHgt5FwwYeSoBsnroBD
71kq7bLmAVzcZoMLZ/4Xkdf5YHCDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUy/f5
8GIpUNJBq8gS132n3AHGpf0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzcyOUM2RkFBOTI5QTExRUU4ODU0NDk1REQyNUJFNDY1LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOc/QgwDQYJKoZIhvcNAQELBQAD
ggEBAGAJScXusVUKPgEr2SikJ8eFWFO7ZiM/2OewhSZPKSVJPgX0849evehOSqkF
nbj+LjrgDqLn4qjnt1ShlOqiZ6AbhZsGPUmxBiakskm4QdwZTpXzvZsrX+FxYBe0
28AsZJbDUhG9SQBlv6jvv7vmdJVwXHp8v7YsvQ77Ihj6IWLi+QA1DJG8HZm9hBBA
CjYV8rIx3sKwZy56FLcGgmI40/ukVryqAjQ+zbRvI7YvytK9cOHZno61mvZsV3r6
/hRcP7r+32VDC3OT7bSzl4+AEaU6TKBcEgsvhM06o444wiDAE8qxVHgyNaOqWbZG
b40cHX6ev3Zqa+6pAm1iUAkyMc4=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org