Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9254BE1491E111EF8C27B47B762E951A.roa
File: 9254BE1491E111EF8C27B47B762E951A.roa (raw, json)
Hash identifier: oBxNGhSWTF5EjZXqQwY0sp5NjHAqfUFQqb8atwfMF0Y=
Subject key identifier: AB:F3:B7:A6:CE:DF:40:FA:7F:AC:CA:76:CD:F9:5D:5C:37:03:3F:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C83E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9254BE1491E111EF8C27B47B762E951A.roa
Signing time: Thu 24 Oct 2024 08:25:48 +0000
ROA not before: Thu 24 Oct 2024 08:25:44 +0000
ROA not after: Sun 26 Jan 2025 08:25:44 +0000
asID: 9009
IP address blocks: 156.246.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51262 (0xc83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 24 08:25:44 2024 GMT
Not After : Jan 26 08:25:44 2025 GMT
Subject: CN=671a048c-5573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:c8:6f:21:db:56:b2:6e:a9:9f:17:e8:ee:
a4:8f:c9:9f:da:f5:b9:f1:28:fe:a0:ef:ba:fe:da:
f9:20:b2:9b:b7:40:02:56:9a:f3:d7:70:52:45:30:
cc:40:a0:b6:b3:c4:4c:64:8d:78:9e:7a:2d:c0:b7:
b6:2f:68:6e:74:d4:6d:1b:1a:77:1f:70:86:3f:45:
bb:bc:1b:93:ca:f7:c9:50:b8:92:f1:4e:ef:78:76:
7a:e9:09:61:5c:be:2b:e6:e4:fb:37:ab:d8:ed:fa:
4f:90:dc:6e:70:84:b5:a6:d7:1e:89:dc:c5:c9:91:
2d:54:e1:6a:fd:4b:22:60:91:45:27:6d:31:7f:14:
ab:07:ad:e9:4c:7e:32:b8:69:e6:f8:24:25:33:17:
fc:76:3f:42:73:c8:51:1f:8a:bf:44:99:15:a7:03:
ef:ee:80:ab:26:e6:f3:69:71:c9:28:ea:b5:ae:8d:
01:29:96:6a:e5:c6:7b:85:79:3f:29:e2:fc:cc:b6:
83:1d:dd:75:5c:96:15:79:9f:fa:f7:64:52:a0:06:
4e:33:1d:4c:f9:59:4a:d9:bc:1e:29:cd:aa:33:de:
7e:94:3b:ef:49:94:7f:7a:05:7b:75:cc:73:7b:99:
8f:92:6a:8a:87:3b:cf:2c:4b:d7:f4:22:07:de:3f:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F3:B7:A6:CE:DF:40:FA:7F:AC:CA:76:CD:F9:5D:5C:37:03:3F:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9254BE1491E111EF8C27B47B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.32.0/19
Signature Algorithm: sha256WithRSAEncryption
70:c9:3a:94:6a:0d:4b:4a:16:0d:5a:24:c1:1a:c7:40:0c:a9:
b4:a9:59:44:03:f0:d8:76:1b:5b:58:4d:8e:19:40:b6:fd:b7:
c6:1a:c5:05:7a:d4:83:9c:4f:16:9d:b1:2d:5a:2d:63:25:80:
b6:c8:d9:71:7f:f0:be:93:59:16:a9:9e:23:2a:f7:e1:6e:b4:
fe:db:f9:4a:5b:4b:ec:1d:f7:a9:b8:b8:64:75:10:d0:53:ac:
f7:81:40:fc:f8:12:92:01:67:90:23:34:45:10:61:7f:43:4b:
7e:94:09:66:ae:6b:cf:d0:61:6a:d9:70:50:aa:87:1c:23:7e:
4c:1d:06:4d:a1:bf:6b:3b:04:43:26:01:89:6b:4a:6e:3c:5c:
09:c9:dc:b1:1b:ad:a1:ee:fd:f8:09:aa:16:19:fa:d6:df:56:
3a:d8:dd:f2:d6:41:18:5c:d2:98:1b:61:ed:8b:73:d9:0c:71:
37:62:7c:dc:f1:52:59:7b:14:d3:10:e6:c5:95:27:cd:ec:b5:
fd:d3:95:1f:8a:26:74:59:f1:77:da:50:ea:8c:ca:0d:19:01:
4d:77:1b:39:14:af:f0:5e:cc:e2:0a:a1:08:7a:81:88:7c:1a:
ee:1e:24:99:24:cb:88:ca:75:03:80:73:3f:2f:b8:31:a9:da:
03:ed:84:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMg+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI0MDgyNTQ0WhcNMjUwMTI2MDgyNTQ0WjAYMRYw
FAYDVQQDEw02NzFhMDQ4Yy01NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArmHIbyHbVrJuqZ8X6O6kj8mf2vW58Sj+oO+6/tr5ILKbt0ACVprz13BS
RTDMQKC2s8RMZI14nnotwLe2L2hudNRtGxp3H3CGP0W7vBuTyvfJULiS8U7veHZ6
6QlhXL4r5uT7N6vY7fpPkNxucIS1ptceidzFyZEtVOFq/UsiYJFFJ20xfxSrB63p
TH4yuGnm+CQlMxf8dj9Cc8hRH4q/RJkVpwPv7oCrJubzaXHJKOq1ro0BKZZq5cZ7
hXk/KeL8zLaDHd11XJYVeZ/692RSoAZOMx1M+VlK2bweKc2qM95+lDvvSZR/egV7
dcxze5mPkmqKhzvPLEvX9CIH3j9yyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKvz
t6bO30D6f6zKds35XVw3Az/eMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjU0QkUxNDkxRTExMUVGOEMyN0I0N0I3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPYgMA0GCSqGSIb3DQEBCwUA
A4IBAQBwyTqUag1LShYNWiTBGsdADKm0qVlEA/DYdhtbWE2OGUC2/bfGGsUFetSD
nE8WnbEtWi1jJYC2yNlxf/C+k1kWqZ4jKvfhbrT+2/lKW0vsHfepuLhkdRDQU6z3
gUD8+BKSAWeQIzRFEGF/Q0t+lAlmrmvP0GFq2XBQqoccI35MHQZNob9rOwRDJgGJ
a0puPFwJydyxG62h7v34CaoWGfrW31Y62N3y1kEYXNKYG2Hti3PZDHE3Ynzc8VJZ
exTTEObFlSfN7LX905UfiiZ0WfF32lDqjMoNGQFNdxs5FK/wXsziCqEIeoGIfBru
HiSZJMuIynUDgHM/L7gxqdoD7YQ0
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org