Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/952F84403B2311EE8E8CF32A4AD9E6FC.roa
File: 952F84403B2311EE8E8CF32A4AD9E6FC.roa (raw, json)
Hash identifier: 3ulqvpHUo2nsjee7LgQzg537sB0ItfGbPzdJ5oNnxSs=
Subject key identifier: DF:45:FC:D7:9D:B9:1F:71:90:2D:C3:A5:2D:B8:C7:40:15:DC:DD:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 356D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/952F84403B2311EE8E8CF32A4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:24:11 +0000
ROA not before: Tue 15 Aug 2023 04:24:08 +0000
ROA not after: Mon 27 May 2024 04:24:08 +0000
asID: 140627
IP address blocks: 156.247.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:24:08 2023 GMT
Not After : May 27 04:24:08 2024 GMT
Subject: CN=64dafdeb-bcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:0f:cd:34:6f:85:8f:39:b2:7e:32:8f:b5:
bd:a7:71:a4:ec:49:be:64:21:df:14:6e:ff:ab:81:
83:1d:ac:58:85:65:bc:0e:1c:a9:26:7e:13:e8:1a:
0d:b2:3c:28:d7:15:8a:4b:bc:59:26:dc:91:34:61:
72:9c:22:b4:a5:3b:cf:c8:f8:e8:8e:eb:c6:41:45:
fd:31:10:b8:a0:e4:22:c5:2f:91:56:13:81:5c:44:
49:84:e6:65:8e:16:f8:81:5e:4c:ba:15:50:c1:ef:
1f:02:58:42:64:9d:26:39:95:96:f5:fd:e0:11:07:
18:44:74:f8:42:0e:ee:f3:1d:62:88:1a:57:48:70:
43:c5:42:09:6d:bf:8f:b1:72:86:99:a5:0a:62:e7:
c9:5e:7b:78:76:0e:65:2a:50:7c:c6:ac:bd:e8:7f:
b7:4c:d3:92:6c:73:7c:45:28:52:d4:ad:77:da:91:
ac:b2:fa:14:1d:82:91:19:e4:be:b1:55:1c:91:e5:
e9:28:42:cd:cb:8d:8a:0f:2f:ae:78:17:23:3c:50:
a1:7b:52:43:14:bc:14:74:6b:b6:25:33:46:a4:1d:
a7:48:88:b0:12:37:e3:f5:b1:cd:23:9c:62:5f:e3:
ce:4f:27:09:0d:cd:79:e4:a0:6f:f3:e4:f0:da:e1:
33:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:FC:D7:9D:B9:1F:71:90:2D:C3:A5:2D:B8:C7:40:15:DC:DD:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/952F84403B2311EE8E8CF32A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.213.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ab:2c:e4:e6:52:42:d9:04:4f:ab:32:21:6c:e0:cc:7f:37:
6e:31:9e:a6:30:4f:37:e6:f8:de:0c:38:7b:b6:9e:fb:7d:4a:
83:ab:01:f9:ae:89:a3:40:09:ae:bb:e4:8b:8a:6b:eb:50:92:
25:b8:9a:65:d5:7b:57:b9:91:eb:f7:be:75:e5:0d:84:89:93:
ec:0c:1b:e5:f8:2f:b7:7e:0e:ad:3d:06:8b:20:b9:9b:de:06:
bf:f3:1f:1f:80:cb:5d:cd:ee:84:e3:e7:b6:95:a5:d6:a7:46:
bf:eb:6d:37:14:4d:08:03:18:12:60:68:d6:a5:bb:4f:06:ff:
48:e7:4d:04:46:22:e7:9e:b1:fc:38:f2:8e:03:8d:56:66:3f:
d7:9a:a6:c8:f3:e1:6f:58:02:51:f2:4e:04:c7:13:0c:79:3b:
d9:42:63:6b:75:11:ea:bb:4c:38:6b:46:ad:4c:ca:20:6f:40:
57:a4:b8:b0:c8:21:f7:e8:a7:59:21:8b:95:ca:f9:7a:33:48:
de:d9:e9:73:ab:4e:71:62:ad:c6:e8:31:e6:8b:ee:e9:67:74:
06:f1:6e:8c:ce:0e:b9:26:f3:e2:23:be:ca:07:90:6d:bc:4c:
ca:e0:ab:33:b2:c4:32:0d:63:5c:42:33:78:52:6a:d2:a1:bd:
5d:41:66:f0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTUwNDI0MDhaFw0yNDA1MjcwNDI0MDhaMBgxFjAU
BgNVBAMTDTY0ZGFmZGViLWJjZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC45A/NNG+FjzmyfjKPtb2ncaTsSb5kId8Ubv+rgYMdrFiFZbwOHKkmfhPo
Gg2yPCjXFYpLvFkm3JE0YXKcIrSlO8/I+OiO68ZBRf0xELig5CLFL5FWE4FcREmE
5mWOFviBXky6FVDB7x8CWEJknSY5lZb1/eARBxhEdPhCDu7zHWKIGldIcEPFQglt
v4+xcoaZpQpi58lee3h2DmUqUHzGrL3of7dM05Jsc3xFKFLUrXfakayy+hQdgpEZ
5L6xVRyR5ekoQs3LjYoPL654FyM8UKF7UkMUvBR0a7YlM0akHadIiLASN+P1sc0j
nGJf485PJwkNzXnkoG/z5PDa4TPpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU30X8
1525H3GQLcOlLbjHQBXc3ZowHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4Lzk1MkY4NDQwM0IyMzExRUU4RThDRjMyQTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc99UwDQYJKoZIhvcNAQELBQAD
ggEBABirLOTmUkLZBE+rMiFs4Mx/N24xnqYwTzfm+N4MOHu2nvt9SoOrAfmuiaNA
Ca675IuKa+tQkiW4mmXVe1e5kev3vnXlDYSJk+wMG+X4L7d+Dq09BosguZveBr/z
Hx+Ay13N7oTj57aVpdanRr/rbTcUTQgDGBJgaNalu08G/0jnTQRGIueesfw48o4D
jVZmP9eapsjz4W9YAlHyTgTHEwx5O9lCY2t1Eeq7TDhrRq1MyiBvQFekuLDIIffo
p1khi5XK+XozSN7Z6XOrTnFircboMeaL7ulndAbxbozODrkm8+IjvsoHkG28TMrg
qzOyxDINY1xCM3hSatKhvV1BZvA=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org