Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F08EF6030011EF9EE2005C017001B1.roa
File: 77F08EF6030011EF9EE2005C017001B1.roa (raw, json)
Hash identifier: +A7AiyI57oJ01doCtNzrlkpuH2LnKr1MCudzCwfEWPk=
Subject key identifier: D1:0A:1A:55:FF:25:ED:4E:2F:38:7C:F2:EF:87:FD:0F:DF:95:E6:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 854D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F08EF6030011EF9EE2005C017001B1.roa
Signing time: Thu 25 Apr 2024 12:36:42 +0000
ROA not before: Thu 25 Apr 2024 12:36:38 +0000
ROA not after: Mon 06 May 2024 12:36:38 +0000
asID: 5065
IP address blocks: 156.255.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 12:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34125 (0x854d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 12:36:38 2024 GMT
Not After : May 6 12:36:38 2024 GMT
Subject: CN=662a4e5a-83e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:96:93:99:45:e9:ac:fb:9f:bb:b9:07:a4:
ad:47:77:88:90:9b:3b:59:91:ee:53:4c:db:f9:d4:
ba:69:20:7c:cb:0e:8f:cf:a4:0c:3f:f6:7b:d8:21:
96:03:eb:9e:cb:f9:aa:77:d8:c7:a1:d7:49:9e:2d:
9b:bf:eb:53:dd:56:8a:ef:51:70:b7:9a:75:3f:ca:
28:e9:ab:1c:97:db:b7:55:6a:4a:82:bd:df:b9:54:
f1:76:13:cf:e0:11:52:56:66:5e:76:1b:24:9c:c4:
c7:df:d9:4f:bc:7f:af:f5:1a:66:c5:ee:19:87:3a:
92:0b:14:e3:e6:b7:80:4f:c3:69:07:71:84:3f:ea:
19:70:f1:42:97:0b:3c:d6:34:a6:6b:18:52:07:68:
62:cf:35:5e:b5:28:b8:50:c6:fb:8e:f5:53:f5:c3:
ac:4d:71:07:20:f2:10:14:fc:e2:f3:75:e0:a1:17:
65:c0:8a:70:04:e1:a0:14:f4:fa:3b:11:ce:df:61:
df:bf:e4:d7:3b:b9:a4:d4:7f:be:42:0c:8d:19:66:
7f:49:b7:9b:28:30:85:1b:ce:5d:58:57:29:4a:08:
7e:13:03:74:44:c1:a0:fd:16:c6:ed:dc:d5:4f:c6:
a0:3e:1a:24:10:e6:fe:df:f6:d6:b8:97:f4:65:1b:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0A:1A:55:FF:25:ED:4E:2F:38:7C:F2:EF:87:FD:0F:DF:95:E6:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77F08EF6030011EF9EE2005C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.116.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ec:41:19:04:20:88:c7:ee:3a:0d:1f:fa:29:a6:d9:35:e3:
24:9d:ce:38:17:e6:d9:20:f7:3f:6a:4d:fb:eb:8f:71:82:f2:
c3:4f:7d:c0:31:4d:9d:88:eb:ec:50:b1:d0:7b:e4:6a:9c:67:
20:f1:ea:7b:5f:87:0b:e1:76:75:e7:7c:f6:80:72:7b:92:a3:
25:c7:a2:94:a7:cc:dd:82:99:99:0b:cb:53:7a:b6:3b:3a:1c:
a5:4d:49:9a:f3:0d:e8:56:5d:a5:79:2d:8b:32:97:4f:c0:2e:
d9:38:fb:b6:71:82:56:b2:72:af:6f:6f:c0:c2:66:f2:51:ca:
3f:bf:b6:7e:a2:c3:30:12:cc:1c:97:b0:8a:5c:fb:e3:29:f6:
be:8c:eb:71:87:d2:d9:c4:5e:75:d0:83:0d:56:06:32:37:30:
f6:8a:37:7f:04:52:6d:29:0c:76:a9:45:86:ec:1e:24:ad:8f:
2c:49:81:8f:46:e6:2e:b5:75:96:20:21:cf:41:82:69:11:cf:
75:6f:01:5e:8c:81:52:fd:85:af:e6:6e:fe:12:af:a1:2e:ef:
e6:31:71:db:1f:30:ea:d6:56:61:55:41:87:c1:cc:d2:9e:1e:
3c:10:cd:55:80:62:8d:6d:83:42:5b:8e:57:b5:10:ea:84:df:
56:ec:86:86
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIVNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI1MTIzNjM4WhcNMjQwNTA2MTIzNjM4WjAYMRYw
FAYDVQQDEw02NjJhNGU1YS04M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwU+Wk5lF6az7n7u5B6StR3eIkJs7WZHuU0zb+dS6aSB8yw6Pz6QMP/Z7
2CGWA+uey/mqd9jHoddJni2bv+tT3VaK71Fwt5p1P8oo6ascl9u3VWpKgr3fuVTx
dhPP4BFSVmZedhsknMTH39lPvH+v9Rpmxe4ZhzqSCxTj5reAT8NpB3GEP+oZcPFC
lws81jSmaxhSB2hizzVetSi4UMb7jvVT9cOsTXEHIPIQFPzi83XgoRdlwIpwBOGg
FPT6OxHO32Hfv+TXO7mk1H++QgyNGWZ/SbebKDCFG85dWFcpSgh+EwN0RMGg/RbG
7dzVT8agPhokEOb+3/bWuJf0ZRvbywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNEK
GlX/Je1OLzh88u+H/Q/fleZSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83N0YwOEVGNjAzMDAxMUVGOUVFMjAwNUMwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP90MA0GCSqGSIb3DQEBCwUA
A4IBAQA17EEZBCCIx+46DR/6KabZNeMknc44F+bZIPc/ak37649xgvLDT33AMU2d
iOvsULHQe+RqnGcg8ep7X4cL4XZ153z2gHJ7kqMlx6KUp8zdgpmZC8tTerY7Ohyl
TUma8w3oVl2leS2LMpdPwC7ZOPu2cYJWsnKvb2/AwmbyUco/v7Z+osMwEswcl7CK
XPvjKfa+jOtxh9LZxF510IMNVgYyNzD2ijd/BFJtKQx2qUWG7B4krY8sSYGPRuYu
tXWWICHPQYJpEc91bwFejIFS/YWv5m7+Eq+hLu/mMXHbHzDq1lZhVUGHwczSnh48
EM1VgGKNbYNCW45XtRDqhN9W7IaG
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org