Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/805664FCA18511EFBABA61BF762E951A.roa
File: 805664FCA18511EFBABA61BF762E951A.roa (raw, json)
Hash identifier: UBfKk2k/TqQjwoo0A8JeqYwPhV9fd+Jv/sOE9DYLQf8=
Subject key identifier: A6:BE:FF:A3:CA:F2:F2:61:C6:1F:8F:1D:5D:8B:60:4E:5C:1E:4E:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D222
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/805664FCA18511EFBABA61BF762E951A.roa
Signing time: Wed 13 Nov 2024 06:07:03 +0000
ROA not before: Wed 13 Nov 2024 06:06:59 +0000
ROA not after: Wed 11 Dec 2024 06:06:59 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53794 (0xd222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 06:06:59 2024 GMT
Not After : Dec 11 06:06:59 2024 GMT
Subject: CN=67344207-6c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bb:df:48:8b:c0:46:fb:d7:4d:2f:f9:d1:93:
df:c8:95:b5:88:48:58:c4:a6:a9:7b:f9:41:50:02:
9c:3f:2f:a1:81:b4:34:af:de:73:57:db:b6:87:52:
e1:d2:25:1c:fc:f5:14:a1:6d:1b:a7:af:e3:b1:cb:
00:a4:2f:21:50:78:b7:07:c2:ec:b2:64:c0:00:d6:
f1:94:42:bb:e2:a8:50:e9:71:d9:e1:22:8d:0b:37:
17:48:32:18:20:07:8c:73:65:78:b5:47:f1:09:51:
89:da:69:39:5b:a5:97:7e:7c:d6:77:d3:3c:8e:60:
23:a7:0f:c7:af:3f:f2:84:23:b1:3c:18:2a:43:36:
64:17:38:b5:9a:e5:58:cf:9c:c6:57:4f:42:6c:25:
aa:2d:43:1c:95:5c:49:4f:83:ed:f5:1c:b9:61:40:
a4:a4:68:d2:14:ff:ba:b0:73:14:a9:c6:3f:97:b5:
0f:a8:28:aa:8a:e7:23:f3:06:93:a8:98:6d:48:ba:
c0:22:1f:93:d8:e8:3d:91:35:cd:b5:5d:9f:81:83:
62:96:17:5a:cf:70:d3:45:0d:1a:7f:09:55:91:50:
26:78:7a:2b:e4:b8:fa:32:79:f8:64:56:eb:0c:38:
1f:49:7c:b0:24:db:45:c9:34:ea:ff:43:33:9b:58:
05:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BE:FF:A3:CA:F2:F2:61:C6:1F:8F:1D:5D:8B:60:4E:5C:1E:4E:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/805664FCA18511EFBABA61BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
08:2e:01:1c:dc:62:89:36:e0:b4:0a:f5:f4:46:d3:7d:bc:1e:
e9:48:6d:07:74:03:41:cd:bb:c8:39:19:8f:d3:80:02:3a:c3:
f5:f8:60:f2:da:b7:a6:37:e6:9f:0f:1b:4e:1a:fd:9b:49:ae:
a0:05:a1:cb:5a:66:e4:63:f2:16:eb:24:86:71:47:f8:15:8b:
24:a6:13:4d:52:8e:15:05:05:fc:f3:5e:e5:44:27:a1:af:a1:
ba:a3:a0:0f:93:ea:62:54:b8:84:cd:35:0b:d4:58:8e:2b:a7:
cb:54:b6:b6:99:63:0e:29:40:18:22:de:de:1d:f5:c3:b6:3c:
8e:19:49:bb:90:ab:c5:72:6d:0e:b5:ed:2d:3a:45:b2:ae:91:
0f:ec:9c:0c:59:68:f1:b4:70:14:bb:f9:60:15:b1:96:e1:f4:
16:42:11:62:19:a2:b1:0b:82:9c:6a:46:ba:33:cb:dd:2c:0e:
42:ea:db:e3:2a:42:8a:37:2e:02:eb:b2:c7:de:64:ba:e6:ee:
63:c4:61:b0:7d:1f:a1:81:ad:89:b9:67:11:12:4e:76:1a:a5:
30:15:75:31:7e:75:a5:1c:a5:f1:b0:3d:d0:3a:e9:cd:ce:75:
d1:92:ac:4a:4c:12:92:99:63:77:bd:04:50:3f:85:8a:80:63:
6b:e6:a2:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANIiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEzMDYwNjU5WhcNMjQxMjExMDYwNjU5WjAYMRYw
FAYDVQQDEw02NzM0NDIwNy02Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8bvfSIvARvvXTS/50ZPfyJW1iEhYxKape/lBUAKcPy+hgbQ0r95zV9u2
h1Lh0iUc/PUUoW0bp6/jscsApC8hUHi3B8LssmTAANbxlEK74qhQ6XHZ4SKNCzcX
SDIYIAeMc2V4tUfxCVGJ2mk5W6WXfnzWd9M8jmAjpw/Hrz/yhCOxPBgqQzZkFzi1
muVYz5zGV09CbCWqLUMclVxJT4Pt9Ry5YUCkpGjSFP+6sHMUqcY/l7UPqCiqiucj
8waTqJhtSLrAIh+T2Og9kTXNtV2fgYNilhdaz3DTRQ0afwlVkVAmeHor5Lj6Mnn4
ZFbrDDgfSXywJNtFyTTq/0Mzm1gFCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKa+
/6PK8vJhxh+PHV2LYE5cHk6EMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDU2NjRGQ0ExODUxMUVGQkFCQTYxQkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOKwMA0GCSqGSIb3DQEBCwUA
A4IBAQAILgEc3GKJNuC0CvX0RtN9vB7pSG0HdANBzbvIORmP04ACOsP1+GDy2rem
N+afDxtOGv2bSa6gBaHLWmbkY/IW6ySGcUf4FYskphNNUo4VBQX8817lRCehr6G6
o6APk+piVLiEzTUL1FiOK6fLVLa2mWMOKUAYIt7eHfXDtjyOGUm7kKvFcm0Ote0t
OkWyrpEP7JwMWWjxtHAUu/lgFbGW4fQWQhFiGaKxC4Kcaka6M8vdLA5C6tvjKkKK
Ny4C67LH3mS65u5jxGGwfR+hga2JuWcREk52GqUwFXUxfnWlHKXxsD3QOunNznXR
kqxKTBKSmWN3vQRQP4WKgGNr5qLo
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org