Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8263C7FAA4D511EFBB044F93762E951A.roa
File: 8263C7FAA4D511EFBB044F93762E951A.roa (raw, json)
Hash identifier: swGnlzq7xlw4Q4HyG3N8n5UvnL1bAoeosj7aGBNtgiw=
Subject key identifier: 6D:A2:2E:83:3F:44:D5:1B:98:3C:D4:2E:5D:D3:F8:E1:80:4B:A9:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8263C7FAA4D511EFBB044F93762E951A.roa
Signing time: Sun 17 Nov 2024 11:17:19 +0000
ROA not before: Sun 17 Nov 2024 11:17:16 +0000
ROA not after: Wed 27 Nov 2024 11:17:16 +0000
asID: 39600
IP address blocks: 156.238.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54521 (0xd4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:17:16 2024 GMT
Not After : Nov 27 11:17:16 2024 GMT
Subject: CN=6739d0bf-fcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:90:35:46:1d:4b:03:36:81:88:5b:7d:1c:
97:86:f0:ee:62:1f:58:af:58:e4:2b:a3:de:35:d8:
7a:c9:a1:7e:06:84:3a:84:e3:0d:f1:04:14:91:2e:
c0:cf:d5:6a:bb:b1:22:78:87:10:70:80:cb:a3:93:
51:28:6b:13:46:2c:4e:a8:e5:c0:f4:cb:57:3e:18:
38:4c:5c:46:71:09:68:7b:a5:2c:80:f7:01:7a:ec:
7f:be:6b:ce:56:28:a2:fd:0a:3d:13:2e:8e:7a:68:
ae:aa:26:1d:e9:c9:4a:de:d7:4f:bb:a2:a3:ce:51:
65:8a:90:17:e4:e7:dd:21:80:bb:3f:aa:46:51:1a:
48:e6:b1:09:1f:65:8c:fe:5a:c3:ae:bd:fc:84:df:
04:18:e7:25:2b:aa:e4:6c:d7:31:23:76:0e:51:ca:
68:22:d5:5b:e7:eb:50:e1:1f:2a:17:0c:69:e4:1a:
de:3c:e6:49:70:22:ff:6c:ab:ac:7d:d4:f1:06:e9:
bc:ba:47:69:93:2d:42:1e:d1:28:32:6b:bd:19:01:
3c:92:95:a7:48:4b:2d:d6:ca:3e:00:20:0c:48:81:
76:93:a9:cd:84:94:c2:a4:16:54:6d:e5:a1:14:c2:
5b:da:ab:9e:e3:8e:72:c2:b5:9f:aa:0f:1b:eb:45:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:2E:83:3F:44:D5:1B:98:3C:D4:2E:5D:D3:F8:E1:80:4B:A9:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8263C7FAA4D511EFBB044F93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:64:da:8d:a6:25:8f:0e:75:bb:06:d8:30:6e:36:ef:58:d2:
1d:d3:35:97:59:29:40:6b:f7:36:08:9a:44:d8:ee:78:2e:a9:
a7:8d:1a:0a:bd:ce:8c:5a:bf:26:2f:72:70:dd:8a:5b:e1:cc:
3e:7d:f8:17:1a:a1:01:3f:40:da:f6:10:3d:46:8b:0b:41:67:
70:31:d1:a7:e3:7a:47:fd:3a:7b:1a:e7:ed:dc:29:a3:2a:33:
69:cb:35:0b:b8:09:9b:83:50:3d:60:88:7a:1a:6a:95:44:85:
3c:63:ed:1e:7c:6e:99:67:95:07:e6:30:fc:22:5a:d7:fb:f7:
b3:ce:96:45:26:ac:11:f7:45:ad:7f:39:7c:ef:26:c2:51:14:
38:fa:35:b0:17:41:ba:4a:8c:d3:89:2e:d9:27:75:5c:46:9a:
1e:37:1f:e7:5e:37:5f:bb:95:be:97:41:e0:1a:2c:c3:e5:17:
92:a2:ca:81:04:d7:ce:fd:db:d7:65:ba:90:8d:e5:c0:e2:f3:
a2:e4:81:69:4d:df:ea:b7:63:12:a1:46:94:99:6e:7a:9b:bc:
e9:b5:4a:78:4d:ef:c0:51:03:73:1a:3e:c2:cd:a1:6f:e9:63:
49:9f:93:aa:1e:7e:85:48:2b:91:4c:18:f4:e8:71:82:4b:a0:
5f:a0:4c:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANT5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE3MTExNzE2WhcNMjQxMTI3MTExNzE2WjAYMRYw
FAYDVQQDEw02NzM5ZDBiZi1mY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuhyQNUYdSwM2gYhbfRyXhvDuYh9Yr1jkK6PeNdh6yaF+BoQ6hOMN8QQU
kS7Az9Vqu7EieIcQcIDLo5NRKGsTRixOqOXA9MtXPhg4TFxGcQloe6UsgPcBeux/
vmvOViii/Qo9Ey6OemiuqiYd6clK3tdPu6KjzlFlipAX5OfdIYC7P6pGURpI5rEJ
H2WM/lrDrr38hN8EGOclK6rkbNcxI3YOUcpoItVb5+tQ4R8qFwxp5BrePOZJcCL/
bKusfdTxBum8ukdpky1CHtEoMmu9GQE8kpWnSEst1so+ACAMSIF2k6nNhJTCpBZU
beWhFMJb2que445ywrWfqg8b60XpuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG2i
LoM/RNUbmDzULl3T+OGAS6l/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjYzQzdGQUE0RDUxMUVGQkIwNDRGOTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO6qMA0GCSqGSIb3DQEBCwUA
A4IBAQBKZNqNpiWPDnW7BtgwbjbvWNId0zWXWSlAa/c2CJpE2O54LqmnjRoKvc6M
Wr8mL3Jw3Ypb4cw+ffgXGqEBP0Da9hA9RosLQWdwMdGn43pH/Tp7Guft3CmjKjNp
yzULuAmbg1A9YIh6GmqVRIU8Y+0efG6ZZ5UH5jD8IlrX+/ezzpZFJqwR90Wtfzl8
7ybCURQ4+jWwF0G6SozTiS7ZJ3VcRpoeNx/nXjdfu5W+l0HgGizD5ReSosqBBNfO
/dvXZbqQjeXA4vOi5IFpTd/qt2MSoUaUmW56m7zptUp4Te/AUQNzGj7CzaFv6WNJ
n5OqHn6FSCuRTBj06HGCS6BfoEzl
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org