Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94B061385EEF11EF912D0687762E951A.roa
File: 94B061385EEF11EF912D0687762E951A.roa (raw, json)
Hash identifier: m4iJgbHCx71/z/MNAmezjmGhAXLx+K03xz0QFpVMrbs=
Subject key identifier: 76:20:DE:CD:F3:47:58:A3:83:C2:95:0C:40:12:E9:49:12:D4:06:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94B061385EEF11EF912D0687762E951A.roa
Signing time: Tue 20 Aug 2024 12:27:36 +0000
ROA not before: Tue 20 Aug 2024 12:27:30 +0000
ROA not after: Tue 27 May 2025 12:27:30 +0000
asID: 399077
IP address blocks: 156.251.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43466 (0xa9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:27:30 2024 GMT
Not After : May 27 12:27:30 2025 GMT
Subject: CN=66c48bb8-175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:36:05:50:bb:7a:46:e3:c0:ee:4a:54:35:
d0:be:84:b4:9c:a8:a3:db:f3:47:ce:60:16:00:f4:
6d:1e:68:3f:e4:ce:4e:08:4d:fa:45:8f:53:e8:a4:
20:f0:29:ea:31:55:3b:82:f6:91:af:54:b6:52:5c:
66:18:a6:06:03:f9:86:9e:93:8f:ba:c8:29:6a:80:
33:20:98:e5:24:68:54:b8:a0:50:af:01:e4:47:33:
31:30:f8:0d:99:af:1c:e7:cc:da:68:c4:c2:b5:8d:
af:97:b1:d4:2d:f6:3c:7f:6d:17:66:36:57:f7:f5:
d9:16:f8:35:9b:c3:8d:ec:97:e6:41:81:dd:73:7d:
ef:16:6b:9f:9f:c3:fc:f7:a1:17:c0:3c:6a:76:6e:
ae:86:46:75:ae:71:63:e3:f7:bf:62:18:1e:93:31:
9a:66:68:84:26:b4:1b:07:8e:a6:1e:b6:78:08:30:
7d:6f:52:f1:68:00:3f:7c:f3:f8:27:90:ca:84:73:
a5:8f:7a:3a:22:40:38:13:39:f6:74:a6:00:a4:47:
db:94:25:5e:4a:79:bd:db:10:50:25:ea:6a:0a:3c:
bb:ec:57:7d:09:87:25:12:9a:de:6a:0f:b9:28:14:
3d:91:79:54:74:f0:c3:e7:37:dc:b7:8b:09:72:e8:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:DE:CD:F3:47:58:A3:83:C2:95:0C:40:12:E9:49:12:D4:06:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94B061385EEF11EF912D0687762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.42.0/24
Signature Algorithm: sha256WithRSAEncryption
02:44:b1:4b:e9:09:bd:44:93:71:68:ab:9d:9a:a1:fd:74:51:
14:5f:f7:8e:67:26:73:22:17:e9:c9:63:80:82:3c:a0:e8:17:
77:f2:d1:3d:38:a1:c7:da:db:aa:9c:cf:45:b1:49:3a:e0:ec:
0f:65:dd:88:81:f4:a1:d8:52:67:e7:f1:fa:ee:86:fa:85:c3:
4c:4b:db:c1:ce:48:91:54:e4:17:7f:05:0c:7e:62:29:d4:79:
42:d3:8b:90:fa:8e:b7:9e:aa:4b:b5:3c:e4:1c:9b:59:e8:16:
6a:ea:7e:9c:df:4f:ff:a2:6d:fc:a3:e0:4b:42:93:b0:65:8e:
de:77:85:b8:f7:43:b2:64:5b:8c:4c:e9:e6:92:4f:b4:21:2e:
43:05:20:08:3a:3e:42:c1:62:b5:12:c8:80:da:55:7d:9b:93:
65:c7:ce:16:fd:73:38:66:6d:8d:1b:d8:30:4b:18:c7:e8:7f:
99:26:d4:7a:06:56:9e:16:7f:cc:25:1b:bf:18:6b:f2:8b:d7:
cf:45:b6:d5:bd:fa:36:12:24:7a:f5:a9:45:d6:07:d8:e5:82:
61:a6:e6:27:1d:fd:05:99:a5:8f:61:48:ea:4b:ca:20:ac:7a:
dd:60:11:89:63:5e:6d:1e:a5:c0:4a:cf:24:70:5c:6d:ca:64:
e8:02:e5:6f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKnKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTIyNzMwWhcNMjUwNTI3MTIyNzMwWjAYMRYw
FAYDVQQDEw02NmM0OGJiOC0xNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt5c2BVC7ekbjwO5KVDXQvoS0nKij2/NHzmAWAPRtHmg/5M5OCE36RY9T
6KQg8CnqMVU7gvaRr1S2UlxmGKYGA/mGnpOPusgpaoAzIJjlJGhUuKBQrwHkRzMx
MPgNma8c58zaaMTCtY2vl7HULfY8f20XZjZX9/XZFvg1m8ON7JfmQYHdc33vFmuf
n8P896EXwDxqdm6uhkZ1rnFj4/e/YhgekzGaZmiEJrQbB46mHrZ4CDB9b1LxaAA/
fPP4J5DKhHOlj3o6IkA4Ezn2dKYApEfblCVeSnm92xBQJepqCjy77Fd9CYclEpre
ag+5KBQ9kXlUdPDD5zfct4sJcuhp6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHYg
3s3zR1ijg8KVDEAS6UkS1AZxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NEIwNjEzODVFRUYxMUVGOTEyRDA2ODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPsqMA0GCSqGSIb3DQEBCwUA
A4IBAQACRLFL6Qm9RJNxaKudmqH9dFEUX/eOZyZzIhfpyWOAgjyg6Bd38tE9OKHH
2tuqnM9FsUk64OwPZd2IgfSh2FJn5/H67ob6hcNMS9vBzkiRVOQXfwUMfmIp1HlC
04uQ+o63nqpLtTzkHJtZ6BZq6n6c30//om38o+BLQpOwZY7ed4W490OyZFuMTOnm
kk+0IS5DBSAIOj5CwWK1EsiA2lV9m5Nlx84W/XM4Zm2NG9gwSxjH6H+ZJtR6Blae
Fn/MJRu/GGvyi9fPRbbVvfo2EiR69alF1gfY5YJhpuYnHf0FmaWPYUjqS8ogrHrd
YBGJY15tHqXASs8kcFxtymToAuVv
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org