Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D302836A44A11EF9655829E762E951A.roa
File: 7D302836A44A11EF9655829E762E951A.roa (raw, json)
Hash identifier: 8vB2ADXeqjUHZGIDL44hJGiEJRkLNN/BKFlckyT4A3c=
Subject key identifier: B5:69:4C:24:A2:6C:A2:68:D4:09:E1:79:E7:BA:F7:47:83:E2:07:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D302836A44A11EF9655829E762E951A.roa
Signing time: Sat 16 Nov 2024 18:42:11 +0000
ROA not before: Sat 16 Nov 2024 18:42:07 +0000
ROA not after: Mon 25 Nov 2024 18:42:07 +0000
asID: 207023
IP address blocks: 156.255.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54182 (0xd3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:42:07 2024 GMT
Not After : Nov 25 18:42:07 2024 GMT
Subject: CN=6738e783-6f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:91:25:46:28:3b:b0:c9:30:3c:9c:9b:2c:f6:
d8:4c:c0:20:2f:8d:4d:ee:9f:25:37:ce:fe:8e:19:
4c:1f:a9:25:79:cb:be:6a:e6:f6:1b:ff:6f:e7:d8:
7b:7e:a2:59:5e:e8:d9:0a:e5:79:78:46:aa:9e:c6:
c1:6c:63:a5:e5:69:de:90:e9:95:ec:c1:a5:c0:98:
03:d1:3f:86:a8:5c:03:11:4c:40:ef:96:f0:72:01:
98:71:2b:d4:69:b1:fa:b6:03:15:9e:04:7a:df:08:
37:af:ce:14:00:a2:48:f7:e6:f2:16:2b:a7:8d:ca:
a7:97:c4:3d:a1:14:85:29:3a:6b:b9:77:9e:b3:9b:
a1:33:d5:4f:b9:f4:1b:6a:7b:e4:8c:1f:c0:2b:92:
89:42:9f:a1:1f:a8:94:9e:06:a9:48:66:c0:4d:f6:
44:0b:b2:45:6a:a4:e0:46:23:94:3b:bb:c3:10:8c:
99:5e:8f:47:c7:e7:ae:43:c3:f1:59:5a:8c:fc:a4:
ec:94:eb:08:d9:69:75:f0:d7:ff:c0:d7:24:73:21:
fe:f4:4d:81:04:d5:5c:14:2c:12:11:19:8f:95:28:
bd:29:36:be:af:f0:f9:65:b6:3c:cd:8e:04:ff:4c:
c4:b4:31:97:b7:4e:50:3c:c5:5e:fa:e6:f6:6d:5b:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:4C:24:A2:6C:A2:68:D4:09:E1:79:E7:BA:F7:47:83:E2:07:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D302836A44A11EF9655829E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.28.0/22
Signature Algorithm: sha256WithRSAEncryption
95:b3:69:1a:50:f4:79:79:39:c5:ff:5d:89:af:2a:1b:13:53:
5d:b3:37:e5:a1:18:5d:e2:a6:bd:e3:ce:c5:23:ab:17:0c:b0:
f2:e9:05:96:67:23:74:f3:65:c2:e6:18:e9:0b:64:a7:25:6a:
d0:de:2f:28:51:ca:39:e0:87:15:4c:bf:85:2c:16:45:2a:92:
24:2a:7f:31:52:ee:20:49:be:0f:8e:dc:b2:51:a9:ee:0f:ab:
af:44:19:45:fd:68:61:66:1c:34:70:49:5b:dc:44:0c:5f:6f:
ab:73:45:0e:ad:4a:12:8d:85:ec:be:c2:bb:fa:c9:40:d9:60:
74:b9:0b:f8:d6:02:c0:5b:d2:c3:aa:ee:64:45:cb:24:fe:02:
c0:28:03:4e:33:ad:2d:bc:cc:2f:50:84:b7:06:4c:54:fc:5a:
72:97:97:3b:38:bc:ca:5f:20:f0:c5:77:64:b5:b3:c8:a0:84:
3c:18:90:e1:13:eb:4a:4f:ec:b4:98:66:5e:0b:1c:97:a0:79:
e0:a4:73:9c:8c:58:b0:f4:0f:c5:a7:8c:38:2f:1f:76:4e:df:
e0:45:9f:c2:22:5b:83:2d:e3:dc:5f:19:c4:75:9f:53:19:fa:
07:30:c2:25:e7:24:25:91:f3:16:fe:6f:31:cc:ac:5e:e9:6a:
bb:de:4b:d2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANOmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTg0MjA3WhcNMjQxMTI1MTg0MjA3WjAYMRYw
FAYDVQQDEw02NzM4ZTc4My02ZjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5pElRig7sMkwPJybLPbYTMAgL41N7p8lN87+jhlMH6klecu+aub2G/9v
59h7fqJZXujZCuV5eEaqnsbBbGOl5WnekOmV7MGlwJgD0T+GqFwDEUxA75bwcgGY
cSvUabH6tgMVngR63wg3r84UAKJI9+byFiunjcqnl8Q9oRSFKTpruXees5uhM9VP
ufQbanvkjB/AK5KJQp+hH6iUngapSGbATfZEC7JFaqTgRiOUO7vDEIyZXo9Hx+eu
Q8PxWVqM/KTslOsI2Wl18Nf/wNckcyH+9E2BBNVcFCwSERmPlSi9KTa+r/D5ZbY8
zY4E/0zEtDGXt05QPMVe+ub2bVsnqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLVp
TCSibKJo1Anheee690eD4gdBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RDMwMjgzNkE0NEExMUVGOTY1NTgyOUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP8cMA0GCSqGSIb3DQEBCwUA
A4IBAQCVs2kaUPR5eTnF/12JryobE1NdszfloRhd4qa9487FI6sXDLDy6QWWZyN0
82XC5hjpC2SnJWrQ3i8oUco54IcVTL+FLBZFKpIkKn8xUu4gSb4PjtyyUanuD6uv
RBlF/WhhZhw0cElb3EQMX2+rc0UOrUoSjYXsvsK7+slA2WB0uQv41gLAW9LDqu5k
Rcsk/gLAKANOM60tvMwvUIS3BkxU/Fpyl5c7OLzKXyDwxXdktbPIoIQ8GJDhE+tK
T+y0mGZeCxyXoHngpHOcjFiw9A/Fp4w4Lx92Tt/gRZ/CIluDLePcXxnEdZ9TGfoH
MMIl5yQlkfMW/m8xzKxe6Wq73kvS
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org