Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82C0E48A014C11EF9DA5C8F9007001B1.roa
File: 82C0E48A014C11EF9DA5C8F9007001B1.roa (raw, json)
Hash identifier: cUJmXa+v07nspjViR6NvQrQ4CkN/yG8WIXfjZMBy+8c=
Subject key identifier: C0:B8:75:14:2B:85:DC:0A:FE:C0:4B:69:B0:04:47:AA:04:B3:00:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8437
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82C0E48A014C11EF9DA5C8F9007001B1.roa
Signing time: Tue 23 Apr 2024 08:35:59 +0000
ROA not before: Tue 23 Apr 2024 08:35:56 +0000
ROA not after: Sat 11 May 2024 08:35:56 +0000
asID: 9009
IP address blocks: 156.238.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33847 (0x8437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 08:35:56 2024 GMT
Not After : May 11 08:35:56 2024 GMT
Subject: CN=662772ef-5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:c7:2c:38:75:9d:4d:8d:14:af:74:be:64:
bb:29:60:02:f4:83:be:94:e2:42:a3:87:d1:70:c3:
e1:d6:3b:27:d5:b4:f9:d2:48:3c:19:3d:cc:9f:36:
63:4b:f0:69:20:dc:b8:a1:0a:ee:3a:1f:b5:53:4a:
80:8f:11:54:df:4d:89:24:dd:f0:90:dd:9c:e6:15:
2e:2c:d2:c8:42:d1:9b:4c:cd:0c:75:60:3e:0b:fc:
08:28:63:c5:2f:f4:0e:a4:49:8b:ea:33:4c:f8:cd:
9a:b8:d0:b9:62:f0:f2:58:95:c4:47:ab:d2:38:83:
46:38:58:16:ee:9e:42:b5:aa:17:9b:57:1e:92:5f:
3f:f5:1b:7e:b2:34:6e:eb:26:af:2c:90:48:16:8f:
c4:d5:2c:8c:73:27:83:bd:1a:92:95:4f:21:1d:0e:
1c:f4:8d:6c:e0:4f:2e:78:9c:86:82:de:6f:04:3b:
aa:8a:f7:51:a3:f4:0c:02:fd:ca:a8:96:71:37:35:
41:d3:94:a2:e9:13:89:30:69:93:15:af:7a:7d:1e:
06:f8:da:86:4c:de:91:c0:a3:7d:22:2e:fb:c0:05:
1e:59:01:f4:49:d9:e4:7e:a1:ec:92:12:76:b1:b1:
6f:95:af:4c:5a:6a:11:fe:22:8f:ab:b9:e1:b0:78:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:75:14:2B:85:DC:0A:FE:C0:4B:69:B0:04:47:AA:04:B3:00:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82C0E48A014C11EF9DA5C8F9007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:38:26:13:92:bf:6e:29:1e:7b:88:6a:c3:c8:75:7c:ac:e7:
a6:df:06:49:7d:17:35:72:95:92:5f:6e:21:ea:6a:a4:05:c7:
82:ba:4a:62:d0:df:dc:d9:42:ce:4d:e6:d6:88:e6:71:0a:84:
12:9a:07:9e:b5:bf:a0:d2:0d:93:3c:93:3f:49:cf:e2:ec:83:
3e:5d:fa:49:82:49:23:10:dd:cc:84:0a:f4:d3:9f:19:a4:73:
a8:e0:38:d7:c9:92:0b:5a:c6:fb:61:0c:fa:b0:64:b0:18:39:
29:6e:b5:da:e8:88:4e:0c:7b:18:ce:66:a8:c3:40:78:a6:58:
63:30:13:f4:e1:46:51:75:3f:1f:45:30:6a:b0:1d:0e:07:d5:
1c:34:50:ff:d1:fe:41:a1:67:f4:76:e8:1a:df:b6:9d:fc:61:
24:05:96:6d:8e:1b:ca:2f:20:ef:10:48:da:a2:eb:18:dd:df:
e3:63:4d:5e:92:6a:a9:36:dc:3b:e6:72:41:3c:a3:a9:98:e6:
83:9e:32:e7:61:49:80:09:cf:d9:67:84:49:ad:cc:4c:f4:5c:
5e:55:ca:97:46:c8:80:71:eb:cf:05:29:ed:81:4a:7c:0c:dd:
b6:ef:20:f4:7b:26:9a:45:64:67:c9:79:c0:ce:69:32:dc:93:
78:b9:78:9d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIQ3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDIzMDgzNTU2WhcNMjQwNTExMDgzNTU2WjAYMRYw
FAYDVQQDEw02NjI3NzJlZi01MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxBbHLDh1nU2NFK90vmS7KWAC9IO+lOJCo4fRcMPh1jsn1bT50kg8GT3M
nzZjS/BpINy4oQruOh+1U0qAjxFU302JJN3wkN2c5hUuLNLIQtGbTM0MdWA+C/wI
KGPFL/QOpEmL6jNM+M2auNC5YvDyWJXER6vSOINGOFgW7p5CtaoXm1cekl8/9Rt+
sjRu6yavLJBIFo/E1SyMcyeDvRqSlU8hHQ4c9I1s4E8ueJyGgt5vBDuqivdRo/QM
Av3KqJZxNzVB05Si6ROJMGmTFa96fR4G+NqGTN6RwKN9Ii77wAUeWQH0SdnkfqHs
khJ2sbFvla9MWmoR/iKPq7nhsHg4zwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMC4
dRQrhdwK/sBLabAER6oEswCfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkMwRTQ4QTAxNEMxMUVGOURBNUM4RjkwMDcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnO4EMA0GCSqGSIb3DQEBCwUA
A4IBAQCxOCYTkr9uKR57iGrDyHV8rOem3wZJfRc1cpWSX24h6mqkBceCukpi0N/c
2ULOTebWiOZxCoQSmgeetb+g0g2TPJM/Sc/i7IM+XfpJgkkjEN3MhAr0058ZpHOo
4DjXyZILWsb7YQz6sGSwGDkpbrXa6IhODHsYzmaow0B4plhjMBP04UZRdT8fRTBq
sB0OB9UcNFD/0f5BoWf0duga37ad/GEkBZZtjhvKLyDvEEjaousY3d/jY01ekmqp
Ntw75nJBPKOpmOaDnjLnYUmACc/ZZ4RJrcxM9FxeVcqXRsiAcevPBSntgUp8DN22
7yD0eyaaRWRnyXnAzmky3JN4uXid
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org