Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95187A90038511EFB906F81A017001B1.roa
File: 95187A90038511EFB906F81A017001B1.roa (raw, json)
Hash identifier: tjRgys+FC8pOjHot2wc2ggDIYtRJDViMra2aEAoruWQ=
Subject key identifier: AB:E4:2D:0A:8E:3A:5F:A6:6F:16:17:F4:B0:26:58:C9:8D:7E:19:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 859E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95187A90038511EFB906F81A017001B1.roa
Signing time: Fri 26 Apr 2024 04:29:34 +0000
ROA not before: Fri 26 Apr 2024 04:29:31 +0000
ROA not after: Tue 03 Sep 2024 04:29:31 +0000
asID: 131685
IP address blocks: 156.234.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34206 (0x859e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:29:31 2024 GMT
Not After : Sep 3 04:29:31 2024 GMT
Subject: CN=662b2dae-d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:f8:80:31:b6:97:9f:3a:6b:86:24:a6:f6:
ac:1d:7d:ac:dc:84:d0:3f:7d:74:21:1e:97:15:e5:
b0:e6:70:fd:bc:5e:f1:d8:b9:19:06:43:5e:7b:fa:
4a:04:1b:b9:ca:06:34:c5:18:c6:c5:ba:14:61:8c:
68:3b:2b:a5:43:07:da:1a:62:cb:7d:1e:f0:1e:80:
f2:3d:45:c6:59:79:a0:8d:e6:1c:9f:24:f1:75:be:
9a:8a:e1:29:40:95:6d:86:59:61:d9:a5:32:0c:35:
bc:13:1e:08:64:a4:93:a2:1c:76:1e:ed:bb:9a:9b:
cd:f0:62:11:3f:44:2c:a1:5c:75:84:c5:cd:54:d8:
1c:71:2e:ed:7f:fe:17:ba:8b:bb:c3:ec:90:74:2a:
c4:5e:14:08:36:a6:ad:6c:38:e0:fd:b7:ad:1d:82:
02:65:c2:3b:44:3a:f8:63:c7:67:29:24:00:76:19:
46:24:b8:3b:8f:6d:1c:b0:e8:8c:89:aa:52:b8:47:
cb:80:41:ad:79:07:75:0e:8b:85:8f:c3:ff:1f:ff:
b5:cd:d2:b7:89:1c:d0:5a:d4:cc:39:56:39:81:17:
6b:ad:77:4f:e0:30:90:ac:d6:8a:b0:26:68:02:8a:
c2:e0:80:83:cb:93:1b:b8:14:09:c2:f7:f4:b5:e5:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E4:2D:0A:8E:3A:5F:A6:6F:16:17:F4:B0:26:58:C9:8D:7E:19:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95187A90038511EFB906F81A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.142.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c0:de:fd:68:83:e9:00:46:fd:ee:41:61:b8:c9:08:ea:28:
7f:e0:16:6d:89:a4:61:0b:e6:2c:ca:ab:92:60:e2:21:e4:ee:
81:51:7b:1b:fe:31:89:d0:de:90:5e:9b:e7:dd:f9:da:53:97:
eb:ce:35:f6:7d:8e:b6:f3:58:8f:55:8b:80:e7:1c:7c:81:83:
86:32:7c:08:86:89:2b:ca:2c:93:95:56:c4:d1:38:fc:25:0f:
89:4a:d0:fe:eb:24:e5:26:e7:fd:3f:54:58:cb:31:1d:57:48:
f6:29:d2:d2:13:1a:db:b0:d2:cb:d9:d7:48:c5:d4:df:ad:b1:
b4:e3:e2:b1:00:83:96:24:a1:4b:1b:14:fe:1e:fa:d3:6a:4c:
5a:4d:08:ae:84:fc:98:85:54:a3:c9:d6:9b:c1:9d:bd:14:8a:
3d:08:b4:98:40:16:d2:eb:6b:ca:38:f9:36:d0:7c:9b:3c:ea:
f9:2f:f4:2d:f0:20:79:b4:dd:6e:e9:a5:27:1f:1d:ee:23:a1:
54:ae:36:8e:f5:43:eb:e1:a2:15:38:10:c8:7e:5c:8a:50:a4:
38:cb:cf:07:53:05:43:a7:13:84:8a:32:98:4e:e2:27:d5:46:
60:7b:2e:8d:13:f9:de:43:ef:5f:49:cf:0c:a5:53:cc:c8:03:
db:8c:a0:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIWeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDQyOTMxWhcNMjQwOTAzMDQyOTMxWjAYMRYw
FAYDVQQDEw02NjJiMmRhZS1kNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw9v4gDG2l586a4YkpvasHX2s3ITQP310IR6XFeWw5nD9vF7x2LkZBkNe
e/pKBBu5ygY0xRjGxboUYYxoOyulQwfaGmLLfR7wHoDyPUXGWXmgjeYcnyTxdb6a
iuEpQJVthllh2aUyDDW8Ex4IZKSTohx2Hu27mpvN8GIRP0QsoVx1hMXNVNgccS7t
f/4Xuou7w+yQdCrEXhQINqatbDjg/betHYICZcI7RDr4Y8dnKSQAdhlGJLg7j20c
sOiMiapSuEfLgEGteQd1DouFj8P/H/+1zdK3iRzQWtTMOVY5gRdrrXdP4DCQrNaK
sCZoAorC4ICDy5MbuBQJwvf0teV9ywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKvk
LQqOOl+mbxYX9LAmWMmNfhmmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTE4N0E5MDAzODUxMUVGQjkwNkY4MUEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOqOMA0GCSqGSIb3DQEBCwUA
A4IBAQB2wN79aIPpAEb97kFhuMkI6ih/4BZtiaRhC+YsyquSYOIh5O6BUXsb/jGJ
0N6QXpvn3fnaU5frzjX2fY6281iPVYuA5xx8gYOGMnwIhokryiyTlVbE0Tj8JQ+J
StD+6yTlJuf9P1RYyzEdV0j2KdLSExrbsNLL2ddIxdTfrbG04+KxAIOWJKFLGxT+
HvrTakxaTQiuhPyYhVSjydabwZ29FIo9CLSYQBbS62vKOPk20HybPOr5L/Qt8CB5
tN1u6aUnHx3uI6FUrjaO9UPr4aIVOBDIflyKUKQ4y88HUwVDpxOEijKYTuIn1UZg
ey6NE/neQ+9fSc8MpVPMyAPbjKDr
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org