Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954396CCF74A11EEA3C31A5E017001B1.roa
File: 954396CCF74A11EEA3C31A5E017001B1.roa (raw, json)
Hash identifier: 6MEe+9nGT6ynM7Wi+eyMNMWvGN0rYVTHhm8d7lKxmSk=
Subject key identifier: 90:94:8B:95:86:AF:8D:20:2A:58:BF:1F:08:94:A6:67:9E:33:27:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8223
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954396CCF74A11EEA3C31A5E017001B1.roa
Signing time: Wed 10 Apr 2024 14:57:00 +0000
ROA not before: Wed 10 Apr 2024 14:56:57 +0000
ROA not after: Thu 17 Oct 2024 14:56:57 +0000
asID: 152450
IP address blocks: 156.226.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33315 (0x8223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 14:56:57 2024 GMT
Not After : Oct 17 14:56:57 2024 GMT
Subject: CN=6616a8bc-fb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:9d:03:e4:dc:b5:72:b9:c6:52:64:d6:11:
52:21:be:f3:76:53:22:d5:42:2f:71:81:d2:4b:c8:
26:61:20:a2:87:24:6f:ec:93:42:19:05:e6:23:c2:
08:80:3a:11:45:77:8c:71:5b:51:d0:a0:20:4f:37:
0b:3c:0a:14:db:8a:b6:bf:81:c7:2e:3e:8a:7e:ec:
6f:6a:a1:09:4c:c7:6c:35:42:9f:b2:0b:5f:31:db:
7b:44:65:9d:e5:ae:d8:9f:9e:ae:65:29:2d:ef:55:
f2:e3:d8:1e:d4:ee:78:5b:d6:6e:b3:39:ab:b4:4d:
35:57:5a:0e:26:cc:31:89:1e:6c:b2:eb:3e:cb:ee:
0b:5c:3f:14:d3:42:f8:96:80:7d:1f:ba:86:3b:be:
65:10:b9:f4:40:b6:5d:da:d0:e0:96:01:c2:8d:01:
3e:9e:7d:fe:f8:94:39:a0:9a:4c:88:3e:2e:88:e5:
c3:ea:b9:4f:07:5c:ff:ab:a3:c4:2f:17:1e:0b:25:
98:6d:b9:4f:6b:e9:59:b2:da:3d:c5:68:54:da:e4:
71:34:52:db:04:a5:90:6b:5c:16:9a:6b:26:4f:81:
a7:34:79:ee:98:df:6b:09:39:22:4e:3d:54:32:bb:
88:f8:51:97:6f:88:38:ec:82:be:c2:97:2f:72:e9:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:94:8B:95:86:AF:8D:20:2A:58:BF:1F:08:94:A6:67:9E:33:27:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954396CCF74A11EEA3C31A5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.16.0/21
Signature Algorithm: sha256WithRSAEncryption
50:3d:6b:67:07:a9:4c:cf:5e:56:10:88:5c:94:1e:ce:1c:c1:
cc:c0:12:2f:b1:5a:8a:20:e1:93:76:67:9e:56:25:a3:55:a8:
57:da:37:36:4d:05:e5:3c:13:c8:50:26:a1:34:91:e6:cb:e3:
c7:6a:fa:23:a3:00:5c:9f:d6:14:40:cd:b5:53:30:dd:09:7b:
c1:e8:ae:8a:1a:c4:4c:52:00:b6:14:3e:74:f6:87:58:64:6a:
fd:2e:58:58:50:09:06:1a:59:f8:b5:6f:5e:13:43:22:c7:54:
88:65:23:b2:37:2c:ca:2e:05:97:06:b6:54:3c:64:f5:41:1c:
54:15:34:dc:7a:ec:57:1b:9a:04:6d:c7:4b:25:8d:8c:b4:68:
6f:fc:b5:8e:0e:91:30:1f:95:50:e9:24:56:41:13:96:1a:43:
f5:7a:97:12:60:16:30:15:d5:bf:32:32:1d:75:b8:af:bf:60:
d6:ec:79:9d:a5:39:92:db:e0:61:75:06:8a:87:b5:f9:2a:52:
09:6e:e2:ad:13:01:22:94:b6:68:76:94:62:9f:44:06:03:a6:
21:93:3f:5f:b9:46:a3:bc:5e:a1:29:cd:04:cc:1e:ec:a8:34:
19:94:fd:fc:42:24:c0:76:56:a4:ad:84:f8:b8:13:f9:29:7e:
91:d4:17:58
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIIjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEwMTQ1NjU3WhcNMjQxMDE3MTQ1NjU3WjAYMRYw
FAYDVQQDEw02NjE2YThiYy1mYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4FCdA+TctXK5xlJk1hFSIb7zdlMi1UIvcYHSS8gmYSCihyRv7JNCGQXm
I8IIgDoRRXeMcVtR0KAgTzcLPAoU24q2v4HHLj6KfuxvaqEJTMdsNUKfsgtfMdt7
RGWd5a7Yn56uZSkt71Xy49ge1O54W9ZuszmrtE01V1oOJswxiR5ssus+y+4LXD8U
00L4loB9H7qGO75lELn0QLZd2tDglgHCjQE+nn3++JQ5oJpMiD4uiOXD6rlPB1z/
q6PELxceCyWYbblPa+lZsto9xWhU2uRxNFLbBKWQa1wWmmsmT4GnNHnumN9rCTki
Tj1UMruI+FGXb4g47IK+wpcvcukQGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJCU
i5WGr40gKli/HwiUpmeeMyeAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTQzOTZDQ0Y3NEExMUVFQTNDMzFBNUUwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOIQMA0GCSqGSIb3DQEBCwUA
A4IBAQBQPWtnB6lMz15WEIhclB7OHMHMwBIvsVqKIOGTdmeeViWjVahX2jc2TQXl
PBPIUCahNJHmy+PHavojowBcn9YUQM21UzDdCXvB6K6KGsRMUgC2FD509odYZGr9
LlhYUAkGGln4tW9eE0Mix1SIZSOyNyzKLgWXBrZUPGT1QRxUFTTceuxXG5oEbcdL
JY2MtGhv/LWODpEwH5VQ6SRWQROWGkP1epcSYBYwFdW/MjIddbivv2DW7HmdpTmS
2+BhdQaKh7X5KlIJbuKtEwEilLZodpRin0QGA6Yhkz9fuUajvF6hKc0EzB7sqDQZ
lP38QiTAdlakrYT4uBP5KX6R1BdY
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org