Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72A8A6B0539F11EE99FDEE5D4AD9E6FC.roa
File: 72A8A6B0539F11EE99FDEE5D4AD9E6FC.roa (raw, json)
Hash identifier: r3tM1kW4Iyxfcg56kP3v0aPh7NTKyl74FWx8EB16/7Q=
Subject key identifier: 12:53:86:41:D2:22:46:84:2A:73:F6:E3:D6:6B:DE:6D:6B:69:13:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3978
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72A8A6B0539F11EE99FDEE5D4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:11:19 +0000
ROA not before: Fri 15 Sep 2023 08:11:15 +0000
ROA not after: Sat 08 Jun 2024 08:11:15 +0000
asID: 138152
IP address blocks: 156.232.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14712 (0x3978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:11:15 2023 GMT
Not After : Jun 8 08:11:15 2024 GMT
Subject: CN=650411a6-137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:6b:09:df:01:40:fa:73:7d:af:b8:92:d4:
d3:a1:7e:b8:b3:9a:eb:92:c0:2e:4e:9e:2c:22:46:
85:49:ae:f3:8c:25:8a:5d:90:50:68:db:89:1e:00:
f8:19:5a:84:a9:f2:a0:7a:b0:42:1b:4a:b9:4f:f0:
be:60:5a:ea:9a:66:96:6e:a5:27:b8:ea:1a:fe:9e:
4b:4c:54:c5:d5:f3:1d:20:48:95:c9:78:8a:57:82:
13:fe:4a:45:38:5d:f7:3e:1d:d0:50:74:9a:37:26:
7f:43:c7:6c:82:2d:33:1b:50:cf:1a:33:16:cb:51:
79:6a:76:c2:17:35:23:f1:2a:aa:6b:6c:86:7e:16:
dd:da:e0:e4:a5:10:71:7e:91:23:ac:c8:e9:73:8e:
a1:60:93:eb:56:5a:73:80:bc:6f:56:a9:84:ba:c5:
50:13:f9:2e:ac:d3:88:aa:55:98:f3:49:4e:df:14:
ef:5c:a5:42:27:ad:4e:6c:b3:e6:72:5b:53:a5:66:
6b:a5:07:fa:25:17:9d:3b:95:d4:e1:86:96:5d:3e:
41:c2:92:2b:41:66:3d:cf:cd:55:0e:91:a3:99:58:
c3:a1:c2:ac:01:d4:7a:34:4c:30:24:ba:2d:59:74:
93:82:92:df:17:41:bc:ed:70:9e:1e:04:72:ac:0b:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:86:41:D2:22:46:84:2A:73:F6:E3:D6:6B:DE:6D:6B:69:13:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72A8A6B0539F11EE99FDEE5D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.11.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f2:9b:57:6c:ae:7d:43:9a:5d:85:b4:2b:6b:e1:aa:fe:2b:
73:df:a9:a9:27:b8:ce:97:28:b3:ca:43:3b:e9:d8:7a:6a:ad:
d1:ad:3e:45:c9:a9:cd:9b:a3:b5:b3:0b:c7:6c:f7:a1:8e:9e:
c1:ed:31:e6:42:d3:55:33:0f:1a:fe:be:1b:a9:08:75:6c:09:
17:fe:0b:d3:53:62:3c:00:4c:95:25:78:23:94:90:e6:d0:80:
2c:31:d4:aa:e6:70:ca:a0:56:d2:c0:92:06:c4:ac:d0:4e:43:
f0:aa:c2:36:d3:5b:7f:94:04:38:cb:32:0d:ac:3b:83:c2:1f:
dc:5b:8f:98:4c:07:f5:fa:1d:65:12:56:42:b8:1a:e4:58:79:
a4:48:79:77:5a:7b:84:b6:8b:33:61:0e:16:47:62:5d:f0:07:
a3:e2:9c:e2:f1:5d:ca:a9:eb:41:03:4c:74:0f:55:71:9d:10:
f2:77:e5:25:27:85:91:75:9d:c2:00:43:25:60:23:60:dc:a2:
22:b9:23:95:7a:62:b9:d0:ad:b8:57:68:93:cb:d2:49:a5:96:
af:0c:09:71:34:32:ba:8e:51:dd:1e:16:8c:ba:d0:92:4c:7d:
9a:1b:49:94:2c:d9:eb:5d:25:85:97:26:e6:e3:a2:f2:de:fa:
be:f5:cc:f0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOXgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MTUwODExMTVaFw0yNDA2MDgwODExMTVaMBgxFjAU
BgNVBAMTDTY1MDQxMWE2LTEzN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE/msJ3wFA+nN9r7iS1NOhfrizmuuSwC5OniwiRoVJrvOMJYpdkFBo24ke
APgZWoSp8qB6sEIbSrlP8L5gWuqaZpZupSe46hr+nktMVMXV8x0gSJXJeIpXghP+
SkU4Xfc+HdBQdJo3Jn9Dx2yCLTMbUM8aMxbLUXlqdsIXNSPxKqprbIZ+Ft3a4OSl
EHF+kSOsyOlzjqFgk+tWWnOAvG9WqYS6xVAT+S6s04iqVZjzSU7fFO9cpUInrU5s
s+ZyW1OlZmulB/olF507ldThhpZdPkHCkitBZj3PzVUOkaOZWMOhwqwB1Ho0TDAk
ui1ZdJOCkt8XQbztcJ4eBHKsC+53AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUElOG
QdIiRoQqc/bj1mvebWtpEycwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzcyQThBNkIwNTM5RjExRUU5OUZERUU1RDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc6AswDQYJKoZIhvcNAQELBQAD
ggEBAFLym1dsrn1Dml2FtCtr4ar+K3PfqaknuM6XKLPKQzvp2HpqrdGtPkXJqc2b
o7WzC8ds96GOnsHtMeZC01UzDxr+vhupCHVsCRf+C9NTYjwATJUleCOUkObQgCwx
1KrmcMqgVtLAkgbErNBOQ/CqwjbTW3+UBDjLMg2sO4PCH9xbj5hMB/X6HWUSVkK4
GuRYeaRIeXdae4S2izNhDhZHYl3wB6PinOLxXcqp60EDTHQPVXGdEPJ35SUnhZF1
ncIAQyVgI2DcoiK5I5V6YrnQrbhXaJPL0kmllq8MCXE0MrqOUd0eFoy60JJMfZob
SZQs2etdJYWXJubjovLe+r71zPA=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org