Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F3C67B084F311EEB55D03464AD9E6FC.roa
File: 7F3C67B084F311EEB55D03464AD9E6FC.roa (raw, json)
Hash identifier: pzfUJCeC4StgRiVtaMfIKJhQeyTut+pGPgmsSsQjqi8=
Subject key identifier: 5C:F9:3C:3C:37:B2:1D:92:6F:A8:46:E7:9B:9C:45:00:A3:CB:42:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4951
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F3C67B084F311EEB55D03464AD9E6FC.roa
Signing time: Fri 17 Nov 2023 02:46:24 +0000
ROA not before: Fri 17 Nov 2023 02:46:21 +0000
ROA not after: Tue 12 Nov 2024 02:46:21 +0000
asID: 64267
IP address blocks: 156.239.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18769 (0x4951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 02:46:21 2023 GMT
Not After : Nov 12 02:46:21 2024 GMT
Subject: CN=6556d400-460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:1b:6f:2c:ba:6e:54:c1:ee:e0:16:f5:64:
7d:a1:2f:cb:3c:f6:24:be:f5:6b:b6:9f:2c:81:e5:
44:e8:84:4b:de:b8:b5:c0:3d:27:6f:73:15:4b:3b:
ab:d1:62:76:fb:da:87:2d:1f:bc:d6:1d:84:10:f5:
fe:d8:6d:76:ba:c2:53:3e:82:b1:5c:35:63:19:9d:
82:86:e6:24:9f:ee:92:8b:86:17:e5:fa:62:f4:62:
6d:90:28:87:d4:d8:29:79:d4:94:76:4a:70:57:ce:
a7:9a:4e:7b:fa:fe:46:73:88:7f:96:6b:5f:30:2f:
76:4f:26:80:27:74:a1:32:48:f8:42:1d:16:30:06:
29:98:09:3c:67:f6:9c:7d:c7:46:95:4d:0e:76:33:
eb:a1:fb:cc:ec:2f:95:12:ec:f8:57:a3:10:e7:2d:
85:c9:7b:88:38:36:d5:ab:a0:79:77:9f:d5:93:e3:
9b:26:d5:f6:c4:fe:19:62:9d:8d:ed:60:5a:80:cb:
ec:14:f8:ff:e0:f6:67:7c:41:cb:93:4a:6e:42:ff:
e0:88:ab:c1:cd:f4:7c:6f:89:37:ac:3d:2d:67:7e:
8a:b2:35:62:dc:3b:26:17:24:c4:5f:d7:24:ac:c3:
e2:8b:45:d2:23:4c:29:57:d2:25:17:d2:e1:cf:49:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F9:3C:3C:37:B2:1D:92:6F:A8:46:E7:9B:9C:45:00:A3:CB:42:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F3C67B084F311EEB55D03464AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.33.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0f:3b:50:06:f0:25:82:93:08:ae:b5:4e:1b:11:fd:90:6f:
91:9f:40:5b:92:7d:cf:2e:13:5a:bf:bc:27:bb:ec:20:39:43:
0b:df:f3:80:f4:47:66:36:a3:46:cd:6c:4d:4d:66:23:47:09:
07:3f:16:06:ca:77:74:29:22:d4:36:a6:79:3e:53:c4:2c:55:
59:41:f5:26:12:63:16:af:61:ef:b0:f0:64:00:64:fd:b2:78:
00:d5:0d:80:a1:96:90:9f:5c:5c:61:05:5c:bd:ad:2f:e3:4c:
f2:09:3a:85:bf:40:79:1b:cd:f4:3c:59:ae:31:b6:75:d0:6e:
d5:e4:9a:c9:fc:39:58:7c:ab:81:bc:50:da:b4:75:78:74:60:
c0:03:a7:66:57:2d:d7:1c:f2:0c:8b:86:0b:07:3e:61:86:3c:
15:71:44:11:bc:89:2c:4d:6f:32:01:a8:71:45:d5:ce:1a:d2:
a4:e9:94:7e:88:b4:d6:62:c9:1d:59:12:bd:f2:7e:9d:85:15:
e8:00:e4:d8:83:7d:23:09:7e:c2:98:2a:4d:42:5c:ab:de:b2:
d5:84:40:21:97:f9:c2:0d:1d:aa:c0:81:05:4d:8e:d2:a8:f8:
6f:0f:10:4b:ba:de:08:83:36:38:63:25:61:45:73:fa:79:dc:
34:63:fc:69
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICSVEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMTcwMjQ2MjFaFw0yNDExMTIwMjQ2MjFaMBgxFjAU
BgNVBAMTDTY1NTZkNDAwLTQ2MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0oBtvLLpuVMHu4Bb1ZH2hL8s89iS+9Wu2nyyB5UTohEveuLXAPSdvcxVL
O6vRYnb72octH7zWHYQQ9f7YbXa6wlM+grFcNWMZnYKG5iSf7pKLhhfl+mL0Ym2Q
KIfU2Cl51JR2SnBXzqeaTnv6/kZziH+Wa18wL3ZPJoAndKEySPhCHRYwBimYCTxn
9px9x0aVTQ52M+uh+8zsL5US7PhXoxDnLYXJe4g4NtWroHl3n9WT45sm1fbE/hli
nY3tYFqAy+wU+P/g9md8QcuTSm5C/+CIq8HN9HxviTesPS1nfoqyNWLcOyYXJMRf
1ySsw+KLRdIjTClX0iUX0uHPSW0FAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUXPk8
PDeyHZJvqEbnm5xFAKPLQrkwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzdGM0M2N0IwODRGMzExRUVCNTVEMDM0NjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7yEwDQYJKoZIhvcNAQELBQAD
ggEBAIUPO1AG8CWCkwiutU4bEf2Qb5GfQFuSfc8uE1q/vCe77CA5Qwvf84D0R2Y2
o0bNbE1NZiNHCQc/FgbKd3QpItQ2pnk+U8QsVVlB9SYSYxavYe+w8GQAZP2yeADV
DYChlpCfXFxhBVy9rS/jTPIJOoW/QHkbzfQ8Wa4xtnXQbtXkmsn8OVh8q4G8UNq0
dXh0YMADp2ZXLdcc8gyLhgsHPmGGPBVxRBG8iSxNbzIBqHFF1c4a0qTplH6ItNZi
yR1ZEr3yfp2FFegA5NiDfSMJfsKYKk1CXKvestWEQCGX+cINHarAgQVNjtKo+G8P
EEu63giDNjhjJWFFc/p53DRj/Gk=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:55 2024 by rpki-client on console-ams.rpki-client.org