Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8536E72621F711EE8A5A43274AD9E6FC.roa
File: 8536E72621F711EE8A5A43274AD9E6FC.roa (raw, json)
Hash identifier: b3UU8IQ3gCPt57PYCaBaWbizkka0bLiFM9sK/tB/uqM=
Subject key identifier: 81:B1:74:5D:78:EC:E6:99:18:D5:4E:E0:C3:10:99:11:93:52:6F:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 303B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8536E72621F711EE8A5A43274AD9E6FC.roa
Signing time: Fri 14 Jul 2023 03:35:47 +0000
ROA not before: Fri 14 Jul 2023 03:35:43 +0000
ROA not after: Mon 13 May 2024 03:35:43 +0000
asID: 138456
IP address blocks: 156.252.21.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12347 (0x303b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 03:35:43 2023 GMT
Not After : May 13 03:35:43 2024 GMT
Subject: CN=64b0c293-27f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:ab:a6:bb:b3:d2:05:74:45:34:18:b1:5a:
7d:13:50:c7:c3:db:69:a5:eb:f4:59:ac:44:30:f7:
5f:01:1b:9a:36:dc:2f:76:f6:97:0c:e1:1f:0e:37:
f7:33:9c:86:46:be:83:9c:33:0b:e5:c6:70:b5:54:
0e:17:88:e7:f0:82:94:f4:ea:e8:af:fb:03:04:ce:
9d:7e:db:66:0d:c1:71:07:0e:e5:56:de:e5:80:62:
d4:3b:ea:8c:02:93:97:9b:80:7b:0a:e7:2f:f1:a2:
7c:65:4e:f7:fa:2b:58:33:92:82:28:21:70:78:c0:
f3:c7:c7:50:ff:05:76:ad:9c:fa:1b:23:a6:99:2b:
d6:3b:60:04:16:59:5b:8a:97:92:4e:7a:3a:77:b7:
62:bc:90:c7:8a:ea:41:28:5f:b4:fa:92:54:fe:86:
c0:4e:98:d6:4e:37:47:2b:e9:86:06:f2:90:56:09:
23:d2:ba:df:72:5d:db:ed:b6:40:35:36:21:f3:5c:
ff:d4:42:79:51:68:b6:b7:e0:18:f3:da:3f:06:29:
3d:6b:8a:b0:fb:f5:59:4f:32:c5:8b:16:5f:20:84:
cf:6a:fd:2b:67:4a:72:9f:f1:68:42:23:c4:9d:f1:
5c:49:0a:0a:e3:bb:52:04:0d:d0:97:d7:10:38:e7:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:74:5D:78:EC:E6:99:18:D5:4E:E0:C3:10:99:11:93:52:6F:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8536E72621F711EE8A5A43274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0a:d3:ad:b1:02:65:83:dc:b1:25:89:89:35:86:dd:34:74:
92:35:b8:5d:82:bb:bc:01:2a:8e:da:45:67:6c:c0:75:2f:41:
8a:1a:06:3c:9c:c6:2d:b7:05:d1:96:99:eb:56:98:ea:15:85:
b1:4e:21:39:a7:b2:89:72:c2:41:f3:8d:82:8c:a1:cd:50:e3:
cc:4d:25:20:9a:4f:25:f6:89:c4:14:38:6a:a0:5c:09:85:6e:
66:e3:89:c1:e4:87:26:80:b6:03:a2:6d:d1:8d:bd:2b:bb:6c:
14:d5:0b:b8:88:c2:e5:f4:59:98:2e:ac:72:6c:12:a3:f0:4a:
d2:fa:d4:25:7b:e2:fe:36:a1:e3:0e:46:af:59:22:c0:91:26:
97:2d:da:23:ec:09:8c:49:4f:91:72:3f:b1:e8:bc:45:df:21:
e7:ac:6b:73:cb:2d:57:1b:6d:c6:bf:0b:62:d2:2d:fe:9e:cf:
df:68:90:a9:c3:c1:23:e6:32:db:bd:35:2c:ab:01:c9:3c:eb:
d6:8a:28:18:35:66:36:e0:a9:76:58:3c:94:c8:f3:75:85:8d:
ec:21:f8:e6:3d:d6:c2:3d:cd:50:5f:34:04:3f:ff:3c:2e:93:
91:25:73:69:65:86:ec:52:c3:3c:6e:02:15:cf:24:ed:e9:84:
eb:ac:10:55
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICMDswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA3MTQwMzM1NDNaFw0yNDA1MTMwMzM1NDNaMBgxFjAU
BgNVBAMTDTY0YjBjMjkzLTI3ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8pKumu7PSBXRFNBixWn0TUMfD22ml6/RZrEQw918BG5o23C929pcM4R8O
N/cznIZGvoOcMwvlxnC1VA4XiOfwgpT06uiv+wMEzp1+22YNwXEHDuVW3uWAYtQ7
6owCk5ebgHsK5y/xonxlTvf6K1gzkoIoIXB4wPPHx1D/BXatnPobI6aZK9Y7YAQW
WVuKl5JOejp3t2K8kMeK6kEoX7T6klT+hsBOmNZON0cr6YYG8pBWCSPSut9yXdvt
tkA1NiHzXP/UQnlRaLa34Bjz2j8GKT1rirD79VlPMsWLFl8ghM9q/StnSnKf8WhC
I8Sd8VxJCgrju1IEDdCX1xA45xLFAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUgbF0
XXjs5pkY1U7gwxCZEZNSbwYwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg1MzZFNzI2MjFGNzExRUU4QTVBNDMyNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/BUwDQYJKoZIhvcNAQELBQAD
ggEBAEoK062xAmWD3LEliYk1ht00dJI1uF2Cu7wBKo7aRWdswHUvQYoaBjycxi23
BdGWmetWmOoVhbFOITmnsolywkHzjYKMoc1Q48xNJSCaTyX2icQUOGqgXAmFbmbj
icHkhyaAtgOibdGNvSu7bBTVC7iIwuX0WZgurHJsEqPwStL61CV74v42oeMORq9Z
IsCRJpct2iPsCYxJT5FyP7HovEXfIeesa3PLLVcbbca/C2LSLf6ez99okKnDwSPm
Mtu9NSyrAck869aKKBg1ZjbgqXZYPJTI83WFjewh+OY91sI9zVBfNAQ//zwuk5El
c2llhuxSwzxuAhXPJO3phOusEFU=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:55 2024 by rpki-client on console-ams.rpki-client.org