Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D580E2C385411EEB5995D1D4AD9E6FC.roa
File: 7D580E2C385411EEB5995D1D4AD9E6FC.roa (raw, json)
Hash identifier: 184MpPD4xXP9VZeuY6XL8R84Z/YWgupbiNvux0JI/Ag=
Subject key identifier: 97:7D:EB:83:45:32:F1:05:8C:08:EF:F8:5E:89:28:86:EE:25:66:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 347B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D580E2C385411EEB5995D1D4AD9E6FC.roa
Signing time: Fri 11 Aug 2023 14:36:43 +0000
ROA not before: Fri 11 Aug 2023 14:36:39 +0000
ROA not after: Thu 13 Jun 2024 14:36:39 +0000
asID: 139811
IP address blocks: 156.249.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13435 (0x347b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 14:36:39 2023 GMT
Not After : Jun 13 14:36:39 2024 GMT
Subject: CN=64d6477b-a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:b2:a5:c7:48:9a:54:fc:9a:81:43:8a:f9:
03:52:84:fe:3f:2b:09:5b:89:d8:99:e9:e7:a0:30:
da:25:96:12:41:1f:bc:22:aa:b9:49:31:03:cf:72:
0a:e1:c6:1b:37:14:5e:9f:1d:8e:0b:cd:de:42:48:
65:5e:00:04:70:ae:71:94:bb:72:20:64:48:bf:2e:
ea:f4:28:dd:4f:3d:d8:5e:90:34:c0:f6:b0:8c:a7:
eb:74:74:a7:66:ff:e0:dd:d8:2f:70:e0:5b:57:25:
86:5d:89:b4:24:1a:cd:5e:11:3d:98:d8:90:a1:34:
86:ab:3e:e4:43:f1:5f:57:67:a9:ed:91:bc:26:17:
b5:ee:fd:f4:a5:c8:e3:07:8b:4f:bb:f5:e3:9a:cc:
0d:ed:94:21:47:ce:19:fa:65:7c:be:7f:2d:03:31:
c0:d2:31:86:f2:d1:17:e6:6a:88:48:90:3e:bc:3d:
28:3c:f8:75:af:e2:49:56:8f:01:20:b7:c4:55:e4:
70:d7:a9:c5:b1:7a:19:35:86:71:b7:cd:a8:b2:2d:
7b:93:f6:b6:b6:60:68:de:7e:13:0a:d3:b5:60:83:
a1:42:fb:0a:fd:20:82:cf:23:da:8f:4b:07:81:e9:
92:ca:83:93:8f:3f:d2:25:03:fe:66:c4:51:5c:ad:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:EB:83:45:32:F1:05:8C:08:EF:F8:5E:89:28:86:EE:25:66:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D580E2C385411EEB5995D1D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.25.0/24
Signature Algorithm: sha256WithRSAEncryption
35:15:ce:02:4f:bb:f4:e7:d4:49:44:cc:a0:e5:90:88:09:d1:
cb:91:f9:25:7b:4a:72:2c:c7:f3:68:8b:9d:00:a3:84:71:ed:
b0:0e:d2:3a:d5:66:53:21:2d:5e:2d:0f:ed:1a:09:a3:2a:3d:
ea:1f:92:4c:e1:eb:92:5e:79:64:7f:76:01:e0:74:c4:4b:67:
3d:15:bc:a6:74:82:62:86:99:ee:71:63:ab:71:92:bd:9f:0b:
80:ab:9b:ff:37:1e:99:c2:c2:0e:d6:d6:2e:05:67:db:13:40:
28:c5:44:3c:ce:af:73:f4:35:4b:2c:87:15:55:65:1d:74:71:
eb:fd:a1:67:e1:a7:7e:bd:3b:33:96:3b:57:4f:d0:cc:41:d8:
64:90:0a:f7:95:8e:81:59:c5:29:87:77:ac:59:a8:21:9c:b5:
27:91:91:39:72:5d:f5:7b:31:b2:73:d1:e3:6f:42:78:83:7a:
a5:7c:51:db:3c:b9:6b:17:df:47:bb:bb:fc:3d:e1:a5:e1:6a:
71:99:95:d1:d4:8a:85:a7:83:c1:28:0b:6f:bf:67:32:d3:5f:
d0:39:74:5b:e5:dd:d4:b8:74:0a:b3:b0:1f:d6:8f:58:8f:22:
42:a8:9c:a1:08:71:6c:ac:78:6b:52:5b:f1:8c:eb:79:f1:9e:
1a:c9:78:87
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNHswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTExNDM2MzlaFw0yNDA2MTMxNDM2MzlaMBgxFjAU
BgNVBAMTDTY0ZDY0NzdiLWE4NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaHLKlx0iaVPyagUOK+QNShP4/KwlbidiZ6eegMNollhJBH7wiqrlJMQPP
cgrhxhs3FF6fHY4Lzd5CSGVeAARwrnGUu3IgZEi/Lur0KN1PPdhekDTA9rCMp+t0
dKdm/+Dd2C9w4FtXJYZdibQkGs1eET2Y2JChNIarPuRD8V9XZ6ntkbwmF7Xu/fSl
yOMHi0+79eOazA3tlCFHzhn6ZXy+fy0DMcDSMYby0RfmaohIkD68PSg8+HWv4klW
jwEgt8RV5HDXqcWxehk1hnG3zaiyLXuT9ra2YGjefhMK07Vgg6FC+wr9IILPI9qP
SweB6ZLKg5OPP9IlA/5mxFFcrbzHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUl33r
g0Uy8QWMCO/4Xokohu4lZs0wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzdENTgwRTJDMzg1NDExRUVCNTk5NUQxRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+RkwDQYJKoZIhvcNAQELBQAD
ggEBADUVzgJPu/Tn1ElEzKDlkIgJ0cuR+SV7SnIsx/Noi50Ao4Rx7bAO0jrVZlMh
LV4tD+0aCaMqPeofkkzh65JeeWR/dgHgdMRLZz0VvKZ0gmKGme5xY6txkr2fC4Cr
m/83HpnCwg7W1i4FZ9sTQCjFRDzOr3P0NUsshxVVZR10cev9oWfhp369OzOWO1dP
0MxB2GSQCveVjoFZxSmHd6xZqCGctSeRkTlyXfV7MbJz0eNvQniDeqV8Uds8uWsX
30e7u/w94aXhanGZldHUioWng8EoC2+/ZzLTX9A5dFvl3dS4dAqzsB/Wj1iPIkKo
nKEIcWyseGtSW/GM63nxnhrJeIc=
-----END CERTIFICATE-----
Generated at Sat May 4 02:37:51 2024 by rpki-client on console-fra.rpki-client.org