Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85C5968C84F411EEBD5C664A4AD9E6FC.roa
File: 85C5968C84F411EEBD5C664A4AD9E6FC.roa (raw, json)
Hash identifier: 33BsLTv0ZC7dGcwkCJswkm49q5PRIQmzPOETBlEqPkk=
Subject key identifier: 93:A5:3D:AE:1C:09:9A:7C:6E:A6:30:CE:A9:4D:97:0F:C0:C5:67:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 495F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85C5968C84F411EEBD5C664A4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 02:53:45 +0000
ROA not before: Fri 17 Nov 2023 02:53:41 +0000
ROA not after: Tue 12 Nov 2024 02:53:41 +0000
asID: 397630
IP address blocks: 156.225.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18783 (0x495f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 02:53:41 2023 GMT
Not After : Nov 12 02:53:41 2024 GMT
Subject: CN=6556d5b9-10da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:18:e5:82:ce:75:c2:a5:02:b9:b7:f4:23:
ab:da:15:bd:84:5b:31:67:08:c8:b1:bc:58:ce:a4:
8e:0e:31:77:df:b1:63:46:52:90:20:b4:e6:b7:27:
b3:e9:2b:13:da:28:11:22:a0:e7:bf:73:4b:fc:24:
e3:c1:b6:e3:a3:75:32:ae:10:2e:71:de:6e:e3:fd:
a8:bb:ee:f2:0d:2c:89:16:1b:81:0d:d8:6c:60:cf:
25:f1:06:93:90:a3:d6:ee:eb:77:1d:02:1a:b4:ea:
24:74:2d:79:57:86:51:a2:f1:fc:71:ed:dc:4d:8d:
f8:1d:f5:0c:bc:c0:4b:12:47:35:b7:d8:44:34:fb:
c0:34:ef:22:ca:74:d2:1f:72:45:ed:6d:24:59:74:
51:a2:22:f5:c2:2c:9b:72:5e:44:b0:e5:1d:0f:86:
a6:8b:28:41:fb:83:e7:90:e9:0d:0d:86:49:3d:f1:
ba:73:bc:fa:2e:22:c8:6b:05:3f:8c:c9:d6:4c:24:
d2:9a:6f:ca:3e:de:13:1b:49:78:d3:0f:f4:f6:8f:
67:eb:7d:15:3f:b1:95:70:b0:06:73:15:7e:31:66:
bd:92:8e:2b:b0:a0:33:c1:ea:2f:5f:90:2c:30:7c:
ee:6f:8e:7c:75:4b:07:49:90:5c:df:fe:27:f5:71:
e3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:3D:AE:1C:09:9A:7C:6E:A6:30:CE:A9:4D:97:0F:C0:C5:67:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85C5968C84F411EEBD5C664A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d3:4d:64:b3:07:d7:b7:5c:65:4e:bd:ad:cf:31:65:74:f3:
46:bd:51:b7:5f:01:89:01:24:2d:26:95:98:78:ed:90:71:93:
40:0d:49:0d:bc:9b:1f:8d:5c:70:f8:6b:98:5f:30:5c:61:94:
8d:3f:fa:3e:e5:db:8c:f0:ae:1d:91:07:48:3c:b2:a8:bc:ea:
b7:ab:e8:f9:6a:ce:e9:f6:77:1c:7d:79:7e:41:66:ec:dd:20:
eb:4e:86:85:dd:5a:90:8e:0f:8e:ab:e1:75:55:aa:7f:19:95:
a6:58:92:c2:a9:9f:eb:88:9b:20:06:dc:45:3b:cf:1e:57:59:
13:39:7d:b5:b1:b5:d5:19:17:0a:1d:a4:1d:f1:4f:c2:48:0e:
44:e5:77:2d:eb:cf:7c:2f:ca:e8:9b:1c:b3:2a:2a:6c:54:92:
54:25:45:00:8a:b6:22:fb:9f:1b:e0:09:3b:22:57:a7:92:ec:
d8:66:9d:c9:79:75:99:0a:4c:cd:2f:92:44:60:47:a9:4f:2f:
43:5c:9e:28:63:72:17:25:71:74:e9:e3:84:fc:09:fe:43:ee:
a1:9a:0d:fb:b7:f2:bd:29:7e:07:5a:38:7d:09:a6:a4:a1:82:
1d:72:fc:ba:0b:75:68:fc:a5:bb:6a:4b:d3:70:d3:2f:98:93:
ef:b4:5c:2a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICSV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMTcwMjUzNDFaFw0yNDExMTIwMjUzNDFaMBgxFjAU
BgNVBAMTDTY1NTZkNWI5LTEwZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBeBjlgs51wqUCubf0I6vaFb2EWzFnCMixvFjOpI4OMXffsWNGUpAgtOa3
J7PpKxPaKBEioOe/c0v8JOPBtuOjdTKuEC5x3m7j/ai77vINLIkWG4EN2GxgzyXx
BpOQo9bu63cdAhq06iR0LXlXhlGi8fxx7dxNjfgd9Qy8wEsSRzW32EQ0+8A07yLK
dNIfckXtbSRZdFGiIvXCLJtyXkSw5R0PhqaLKEH7g+eQ6Q0Nhkk98bpzvPouIshr
BT+MydZMJNKab8o+3hMbSXjTD/T2j2frfRU/sZVwsAZzFX4xZr2SjiuwoDPB6i9f
kCwwfO5vjnx1SwdJkFzf/if1ceNhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUk6U9
rhwJmnxupjDOqU2XD8DFZ/gwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzg1QzU5NjhDODRGNDExRUVCRDVDNjY0QTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4Q4wDQYJKoZIhvcNAQELBQAD
ggEBAJrTTWSzB9e3XGVOva3PMWV080a9UbdfAYkBJC0mlZh47ZBxk0ANSQ28mx+N
XHD4a5hfMFxhlI0/+j7l24zwrh2RB0g8sqi86rer6Plqzun2dxx9eX5BZuzdIOtO
hoXdWpCOD46r4XVVqn8ZlaZYksKpn+uImyAG3EU7zx5XWRM5fbWxtdUZFwodpB3x
T8JIDkTldy3rz3wvyuibHLMqKmxUklQlRQCKtiL7nxvgCTsiV6eS7Nhmncl5dZkK
TM0vkkRgR6lPL0NcnihjchclcXTp44T8Cf5D7qGaDfu38r0pfgdaOH0JpqShgh1y
/LoLdWj8pbtqS9Nw0y+Yk++0XCo=
-----END CERTIFICATE-----
Generated at Tue May 7 03:10:08 2024 by rpki-client on console-ams.rpki-client.org