Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85C407BC507011EE9C63B83B4AD9E6FC.roa
File: 85C407BC507011EE9C63B83B4AD9E6FC.roa (raw, json)
Hash identifier: kHiyr1TRwFr+sJvg12Jh58cTTpfdv385B42DV5eh4Is=
Subject key identifier: E2:58:6B:78:6D:F8:04:76:A7:AF:58:2B:1C:40:AA:94:7A:AF:93:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 393A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85C407BC507011EE9C63B83B4AD9E6FC.roa
Signing time: Mon 11 Sep 2023 06:57:51 +0000
ROA not before: Mon 11 Sep 2023 06:57:47 +0000
ROA not after: Mon 09 Sep 2024 06:57:47 +0000
asID: 142062
IP address blocks: 156.245.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14650 (0x393a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 06:57:47 2023 GMT
Not After : Sep 9 06:57:47 2024 GMT
Subject: CN=64feba6e-f10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:03:8e:bc:70:f9:9f:cd:6d:0a:db:c4:1d:
15:58:cb:18:ce:a7:af:a3:aa:1b:63:ed:1f:44:90:
7f:80:24:37:b1:46:6f:05:c4:b8:5f:b3:2d:b5:e1:
af:d7:d0:f0:e1:d3:32:a6:8a:ef:25:41:ed:2b:36:
93:2f:44:78:b0:ad:ba:89:ba:a8:6d:92:f3:56:bf:
02:4d:c7:3d:de:39:2b:fb:09:1a:01:27:f1:39:b9:
34:91:26:dc:0c:f8:71:f0:76:95:fd:2e:93:27:d7:
07:bb:78:77:1d:a0:80:31:eb:29:ef:1c:d9:94:14:
36:bd:8d:f2:ec:00:29:01:dc:60:af:b9:07:2d:73:
8f:0c:c8:96:54:f3:27:a6:6b:bd:f4:f6:6d:a8:75:
63:2c:25:e4:d8:e0:22:0b:77:0b:a9:7f:b3:73:9d:
8a:80:fd:85:5a:5d:64:38:f6:cd:bd:e2:54:a0:67:
85:db:fe:d6:c4:bf:7d:53:b1:ed:59:8c:6b:19:cd:
20:e1:89:fd:dd:e1:3a:a7:fa:0d:4c:1e:9e:77:a7:
18:b2:9d:cd:61:3d:ee:d0:3f:a9:49:89:56:a6:40:
54:d6:4f:c5:54:eb:c1:ce:d1:5f:9e:96:83:19:7c:
f6:53:f2:8e:15:ad:16:96:8f:3e:d9:40:d8:87:67:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:6B:78:6D:F8:04:76:A7:AF:58:2B:1C:40:AA:94:7A:AF:93:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85C407BC507011EE9C63B83B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:d0:8b:d5:97:6b:98:e4:fa:94:c3:e9:b2:b5:0f:41:6b:12:
01:5a:92:e4:d6:31:97:01:65:24:60:97:6e:fe:8b:d0:9a:94:
54:9d:a7:1c:7b:4a:32:c6:df:eb:1d:ee:e2:ce:d0:35:0e:de:
9d:cc:62:cd:aa:1d:58:fa:3f:f7:fe:3d:23:10:ca:5d:e5:20:
a8:f9:ab:d9:cb:bd:26:39:43:71:8f:05:b5:b4:a5:7c:8d:ed:
8a:13:cc:b9:bc:4c:20:85:00:a1:e8:bc:05:c4:85:a1:d3:8f:
ae:a8:c5:c4:93:ee:2c:7b:40:52:8d:45:a5:30:de:c5:79:4c:
02:67:c9:bd:cb:fa:82:44:5a:94:ad:01:04:c1:a7:54:19:e9:
e2:3c:c9:30:60:ad:01:12:ab:aa:33:03:4a:5a:2b:06:fc:30:
14:d4:f4:a4:48:89:cb:23:22:c1:0b:29:7c:2c:ef:ca:19:1f:
f9:3a:81:55:5d:08:d4:34:d9:be:0d:97:8c:6a:df:e0:14:b7:
cc:bc:bd:eb:31:bb:29:2c:6e:f2:6a:e5:d0:37:24:8c:de:3d:
70:4e:40:43:c0:62:2b:3a:a0:3e:ed:d5:a8:d6:71:db:1b:02:
3f:22:59:9b:ef:5d:60:f6:0a:e7:7c:ff:3c:f3:1d:72:ca:73:
3e:8f:59:b3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOTowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MTEwNjU3NDdaFw0yNDA5MDkwNjU3NDdaMBgxFjAU
BgNVBAMTDTY0ZmViYTZlLWYxMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3XgOOvHD5n81tCtvEHRVYyxjOp6+jqhtj7R9EkH+AJDexRm8FxLhfsy21
4a/X0PDh0zKmiu8lQe0rNpMvRHiwrbqJuqhtkvNWvwJNxz3eOSv7CRoBJ/E5uTSR
JtwM+HHwdpX9LpMn1we7eHcdoIAx6ynvHNmUFDa9jfLsACkB3GCvuQctc48MyJZU
8yema7309m2odWMsJeTY4CILdwupf7NznYqA/YVaXWQ49s294lSgZ4Xb/tbEv31T
se1ZjGsZzSDhif3d4Tqn+g1MHp53pxiync1hPe7QP6lJiVamQFTWT8VU68HO0V+e
loMZfPZT8o4VrRaWjz7ZQNiHZ/SBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4lhr
eG34BHanr1grHECqlHqvk5cwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg1QzQwN0JDNTA3MDExRUU5QzYzQjgzQjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWc9UAwDQYJKoZIhvcNAQELBQAD
ggEBAK3Qi9WXa5jk+pTD6bK1D0FrEgFakuTWMZcBZSRgl27+i9CalFSdpxx7SjLG
3+sd7uLO0DUO3p3MYs2qHVj6P/f+PSMQyl3lIKj5q9nLvSY5Q3GPBbW0pXyN7YoT
zLm8TCCFAKHovAXEhaHTj66oxcST7ix7QFKNRaUw3sV5TAJnyb3L+oJEWpStAQTB
p1QZ6eI8yTBgrQESq6ozA0paKwb8MBTU9KRIicsjIsELKXws78oZH/k6gVVdCNQ0
2b4Nl4xq3+AUt8y8vesxuyksbvJq5dA3JIzePXBOQEPAYis6oD7t1ajWcdsbAj8i
WZvvXWD2Cud8/zzzHXLKcz6PWbM=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org