Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88210638ECA911EEAE37E072775412E6.roa
File: 88210638ECA911EEAE37E072775412E6.roa (raw, json)
Hash identifier: +r4L0h4sPrd8V/RuwH0x7aLpNbKahwPeujN8FWPPkmM=
Subject key identifier: 1D:5E:50:D7:53:1C:DA:A8:B5:0E:E0:CE:3C:39:9F:F1:D4:AF:5C:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 80DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88210638ECA911EEAE37E072775412E6.roa
Signing time: Thu 28 Mar 2024 02:18:57 +0000
ROA not before: Thu 28 Mar 2024 02:18:54 +0000
ROA not after: Tue 25 Feb 2025 02:18:54 +0000
asID: 140227
IP address blocks: 156.240.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32991 (0x80df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 02:18:54 2024 GMT
Not After : Feb 25 02:18:54 2025 GMT
Subject: CN=6604d391-2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:c2:9e:2f:38:3c:f2:35:3d:69:44:f7:03:
5e:aa:e6:3d:f7:ba:bc:de:18:57:6b:10:2c:88:2a:
ed:8d:65:21:63:75:ad:d2:d9:a9:5a:b4:21:f7:16:
ca:e8:f4:8a:53:b4:e1:b1:b5:09:13:a2:3a:2b:f8:
3f:23:2c:f7:06:a0:4c:b5:f9:3e:ae:bf:48:dd:39:
ad:78:fd:2e:d5:1a:5e:0c:43:f0:29:30:76:03:d9:
b0:10:ee:58:6c:93:02:ea:f5:a0:ae:08:fe:d7:37:
79:fc:e5:48:8b:e4:64:98:29:b0:b8:77:4d:32:e9:
91:c0:13:b5:b3:fd:e0:20:6a:ef:4c:df:d9:3d:cc:
29:8b:88:07:c9:50:a7:ad:16:9f:84:ca:b9:1e:08:
0b:0d:25:72:b9:c2:3f:cb:01:5d:ef:6f:00:d1:26:
e2:30:e7:ec:38:16:ea:6f:16:6b:18:40:3d:e4:b7:
2d:90:f1:16:2f:75:c8:cb:1a:a4:1a:e6:61:fd:65:
4c:f2:49:37:66:6a:19:bd:3d:02:26:87:44:8f:19:
4f:a8:e7:9c:0e:6b:31:75:7a:bc:45:61:77:20:87:
44:d0:d6:ee:1f:4a:76:c9:26:73:a4:0c:a5:3d:7a:
47:67:53:a7:11:7e:2d:22:5e:54:ef:e8:a0:13:fc:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:50:D7:53:1C:DA:A8:B5:0E:E0:CE:3C:39:9F:F1:D4:AF:5C:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88210638ECA911EEAE37E072775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.110.0/24
Signature Algorithm: sha256WithRSAEncryption
99:16:37:53:74:2c:48:bb:5b:6d:92:71:04:6a:c4:15:b1:79:
04:83:71:3a:d1:3b:f7:4a:7f:70:01:53:07:be:ef:0b:17:10:
6a:16:40:fb:f3:3e:0f:ea:a2:de:c3:09:72:02:76:43:01:81:
e6:ea:f8:52:c1:8b:9a:16:96:ea:59:54:f6:ef:a9:ed:67:ae:
e3:d4:b5:99:a7:71:7b:d1:2e:00:33:d2:74:1d:5f:be:94:4c:
d2:b5:05:5d:21:2b:2b:f0:db:90:a4:65:28:ac:66:cb:c3:73:
1f:d0:6f:e3:3a:92:88:42:ce:0b:2f:0f:0b:59:af:cc:8f:b5:
5f:2d:e6:e7:13:0e:9b:df:a7:8e:2b:48:ee:cb:a8:1d:ee:58:
bf:78:8e:ce:da:d9:6a:a9:a2:54:e2:c0:60:92:72:7c:d8:bf:
51:48:f6:1e:b2:c5:12:0a:b2:36:d8:07:f9:e7:0b:3a:f4:0a:
9d:d6:13:91:62:96:99:37:1a:60:71:16:6a:f0:bd:e4:5d:50:
72:9c:f2:d1:61:71:21:f6:c0:2b:c9:8f:88:08:b5:76:74:9e:
18:2c:c8:ef:b1:7c:fe:92:3c:df:72:a2:92:13:f1:74:c1:a4:
46:c2:50:5d:9d:91:79:8c:47:39:3d:69:2e:79:81:2f:83:fe:
87:e5:3f:3f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIDfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwMzI4MDIxODU0WhcNMjUwMjI1MDIxODU0WjAYMRYw
FAYDVQQDEw02NjA0ZDM5MS0yMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuHPCni84PPI1PWlE9wNequY997q83hhXaxAsiCrtjWUhY3Wt0tmpWrQh
9xbK6PSKU7ThsbUJE6I6K/g/Iyz3BqBMtfk+rr9I3TmteP0u1RpeDEPwKTB2A9mw
EO5YbJMC6vWgrgj+1zd5/OVIi+RkmCmwuHdNMumRwBO1s/3gIGrvTN/ZPcwpi4gH
yVCnrRafhMq5HggLDSVyucI/ywFd728A0SbiMOfsOBbqbxZrGEA95LctkPEWL3XI
yxqkGuZh/WVM8kk3ZmoZvT0CJodEjxlPqOecDmsxdXq8RWF3IIdE0NbuH0p2ySZz
pAylPXpHZ1OnEX4tIl5U7+igE/zoRQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB1e
UNdTHNqotQ7gzjw5n/HUr1znMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODIxMDYzOEVDQTkxMUVFQUUzN0UwNzI3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPBuMA0GCSqGSIb3DQEBCwUA
A4IBAQCZFjdTdCxIu1ttknEEasQVsXkEg3E60Tv3Sn9wAVMHvu8LFxBqFkD78z4P
6qLewwlyAnZDAYHm6vhSwYuaFpbqWVT276ntZ67j1LWZp3F70S4AM9J0HV++lEzS
tQVdISsr8NuQpGUorGbLw3Mf0G/jOpKIQs4LLw8LWa/Mj7VfLebnEw6b36eOK0ju
y6gd7li/eI7O2tlqqaJU4sBgknJ82L9RSPYessUSCrI22Af55ws69Aqd1hORYpaZ
NxpgcRZq8L3kXVBynPLRYXEh9sAryY+ICLV2dJ4YLMjvsXz+kjzfcqKSE/F0waRG
wlBdnZF5jEc5PWkueYEvg/6H5T8/
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org