Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80740290A42E11EF838B5372762E951A.roa
File: 80740290A42E11EF838B5372762E951A.roa (raw, json)
Hash identifier: jhchdKdKGpwF43vhbi3zyLDc2GF59LN1Kox26qSLaQs=
Subject key identifier: A7:7D:40:63:4A:A0:46:B5:32:4E:FE:1B:09:D1:95:50:C5:A7:99:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D328
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80740290A42E11EF838B5372762E951A.roa
Signing time: Sat 16 Nov 2024 15:21:50 +0000
ROA not before: Sat 16 Nov 2024 15:21:46 +0000
ROA not after: Wed 18 Dec 2024 15:21:46 +0000
asID: 64457
IP address blocks: 156.253.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54056 (0xd328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 15:21:46 2024 GMT
Not After : Dec 18 15:21:46 2024 GMT
Subject: CN=6738b88e-a074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:43:3b:bc:de:da:9a:dd:ba:c6:68:57:7e:
74:35:d8:3a:9f:00:50:ef:9f:18:27:7c:d1:2b:c1:
19:f7:85:33:74:74:3a:a9:9c:f5:9f:20:fb:71:be:
a1:19:eb:28:34:1f:88:4e:42:a2:f3:72:7b:38:2b:
b4:a8:3d:c3:57:f2:c9:8e:d6:e8:74:f8:6f:80:fc:
5a:1c:6e:f7:bf:b5:f4:bb:c7:41:0b:cf:41:88:ee:
fe:93:76:58:68:cc:6a:84:cc:95:6d:af:42:5c:a4:
5a:f1:65:a4:be:d3:7c:a0:3d:2d:0a:69:e9:08:f1:
cc:b0:77:3b:97:24:05:14:55:9d:00:01:2b:e1:c0:
dd:10:10:83:e9:cc:6d:92:de:4c:63:6f:16:46:aa:
42:07:fb:8a:61:34:c5:93:90:55:74:8c:2e:60:27:
da:b8:9b:a2:eb:9e:67:bb:d4:51:d1:81:78:a4:e8:
f5:ca:6a:61:69:eb:90:54:73:cc:78:62:84:e0:4b:
e3:55:6c:a8:30:cf:68:cc:ad:ba:bb:47:1d:1c:c6:
5a:f8:32:2b:50:cd:f3:cb:60:13:62:9d:3b:fc:9d:
60:95:29:d1:cb:44:47:d4:08:dd:b6:8d:d5:a4:3a:
67:16:36:8e:c1:1b:a7:31:f9:f3:be:92:d6:28:5a:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:40:63:4A:A0:46:B5:32:4E:FE:1B:09:D1:95:50:C5:A7:99:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80740290A42E11EF838B5372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.248.0/24
Signature Algorithm: sha256WithRSAEncryption
30:63:dc:fd:ce:b8:92:92:54:bf:ef:b5:24:7a:ac:56:42:99:
05:db:1c:47:bd:61:5f:af:e1:d2:b3:97:2c:09:24:b1:89:8b:
76:e3:55:47:51:9a:c9:b4:9c:b5:76:50:bd:6a:cf:67:7b:c5:
08:d9:cb:3c:6d:df:75:ef:62:65:66:62:cd:92:3c:35:93:d2:
5e:cd:a5:1f:72:3a:7c:76:6a:ec:75:dd:a2:fb:0d:92:ec:bf:
55:32:36:db:d2:4f:50:51:db:2c:28:93:f4:7c:5d:07:89:36:
c2:83:02:ba:5b:03:70:05:71:de:33:86:4c:02:c5:d1:06:81:
e2:0e:48:36:10:10:71:2f:64:89:d1:5b:a0:3f:cc:43:bc:27:
80:15:82:06:ca:33:64:51:59:3d:49:f2:16:62:92:43:a8:cd:
eb:4d:f2:ec:36:45:8b:7e:cd:f7:0c:d5:e0:e1:e7:84:95:73:
14:79:15:91:1d:94:dc:a2:8a:a6:5b:7f:43:6c:1b:c7:b6:f0:
15:19:16:96:cd:fb:0f:79:75:7d:97:73:2a:f3:94:a2:c3:14:
cc:5a:da:ed:05:1e:75:e4:5a:0a:1f:fd:4f:87:ab:b0:bf:c0:
4e:de:73:b3:36:a1:ef:e8:01:fc:c2:10:4b:9d:e5:b4:45:19:
c7:17:c6:72
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANMoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTUyMTQ2WhcNMjQxMjE4MTUyMTQ2WjAYMRYw
FAYDVQQDEw02NzM4Yjg4ZS1hMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3rhDO7ze2prdusZoV350Ndg6nwBQ758YJ3zRK8EZ94UzdHQ6qZz1nyD7
cb6hGesoNB+ITkKi83J7OCu0qD3DV/LJjtbodPhvgPxaHG73v7X0u8dBC89BiO7+
k3ZYaMxqhMyVba9CXKRa8WWkvtN8oD0tCmnpCPHMsHc7lyQFFFWdAAEr4cDdEBCD
6cxtkt5MY28WRqpCB/uKYTTFk5BVdIwuYCfauJui655nu9RR0YF4pOj1ymphaeuQ
VHPMeGKE4EvjVWyoMM9ozK26u0cdHMZa+DIrUM3zy2ATYp07/J1glSnRy0RH1Ajd
to3VpDpnFjaOwRunMfnzvpLWKFrMKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKd9
QGNKoEa1Mk7+GwnRlVDFp5msMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDc0MDI5MEE0MkUxMUVGODM4QjUzNzI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP34MA0GCSqGSIb3DQEBCwUA
A4IBAQAwY9z9zriSklS/77UkeqxWQpkF2xxHvWFfr+HSs5csCSSxiYt241VHUZrJ
tJy1dlC9as9ne8UI2cs8bd9172JlZmLNkjw1k9JezaUfcjp8dmrsdd2i+w2S7L9V
Mjbb0k9QUdssKJP0fF0HiTbCgwK6WwNwBXHeM4ZMAsXRBoHiDkg2EBBxL2SJ0Vug
P8xDvCeAFYIGyjNkUVk9SfIWYpJDqM3rTfLsNkWLfs33DNXg4eeElXMUeRWRHZTc
ooqmW39DbBvHtvAVGRaWzfsPeXV9l3Mq85SiwxTMWtrtBR515FoKH/1Ph6uwv8BO
3nOzNqHv6AH8whBLneW0RRnHF8Zy
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org