Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99380CDC976711EF8AE44E4E762E951A.roa
File: 99380CDC976711EF8AE44E4E762E951A.roa (raw, json)
Hash identifier: LniS70959IIqgzEHeoxj0zGawyn61IJW5J/3gU/qZ80=
Subject key identifier: D0:78:DA:02:E6:93:A1:3E:36:0C:A3:E6:CE:7D:B5:34:17:E3:8B:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB06
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99380CDC976711EF8AE44E4E762E951A.roa
Signing time: Thu 31 Oct 2024 09:07:48 +0000
ROA not before: Thu 31 Oct 2024 09:07:44 +0000
ROA not after: Sun 24 Nov 2024 09:07:44 +0000
asID: 54467
IP address blocks: 156.227.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51974 (0xcb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:07:44 2024 GMT
Not After : Nov 24 09:07:44 2024 GMT
Subject: CN=672348e4-4ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:7f:51:98:ff:7a:8d:b2:60:7f:fa:81:3e:
da:cf:e4:e7:a9:42:50:4e:8a:5c:97:82:bc:49:2d:
1d:3b:01:96:f1:20:7a:de:5a:28:69:2b:1b:12:bc:
e4:67:38:44:87:c6:b9:41:e0:19:b3:03:1c:fa:16:
2c:34:28:62:b1:fe:de:bc:0d:01:51:73:0b:53:a2:
db:31:02:63:25:d5:53:fd:64:ad:4d:a3:53:a2:98:
4d:03:26:f9:f7:14:37:85:9f:6f:41:01:02:42:af:
98:e3:8b:b0:b4:58:84:a8:2f:82:4a:d8:31:09:20:
cb:c8:0d:4c:de:5d:c8:0f:b4:c7:78:ed:79:18:3f:
f8:eb:69:82:d3:01:36:2e:34:5d:c2:2e:0d:05:d4:
46:5f:98:a4:c6:16:9d:5b:65:91:b1:93:c5:28:e2:
b5:ad:c0:4a:59:8d:28:0b:89:a7:fe:8d:dd:6c:40:
b2:84:13:08:dc:48:a3:f1:d8:ad:b1:e3:e7:af:db:
48:49:50:38:a7:da:9e:a5:ee:34:a3:99:1c:c7:67:
79:34:2a:e8:b0:86:a5:fe:50:2d:11:15:b9:18:8a:
89:e8:0f:df:fc:98:f6:75:7a:c9:c7:76:01:6d:4e:
5c:0a:58:24:94:f0:0a:bd:b7:d4:e4:cf:bb:ef:e5:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:78:DA:02:E6:93:A1:3E:36:0C:A3:E6:CE:7D:B5:34:17:E3:8B:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99380CDC976711EF8AE44E4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.40.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:22:69:dc:1f:75:2b:fa:c7:bc:bf:49:2b:1f:3c:2f:d0:39:
6e:66:a1:b5:46:bb:38:26:a3:e8:56:9c:02:de:de:d0:62:b0:
b6:5b:3f:87:bc:ba:04:5d:2e:a5:9f:a5:80:03:1b:a3:97:c6:
e3:50:af:47:e5:3b:d7:a0:c5:f8:19:e7:49:5c:97:d1:a4:17:
f6:64:6f:a4:6a:fb:c7:01:4d:88:f0:85:a3:01:8f:e2:68:d1:
dd:57:1f:39:0a:68:9d:bb:be:f8:27:a9:8f:16:a8:d1:90:67:
11:c2:69:65:af:46:7d:38:83:9b:6c:40:d0:bc:83:51:4d:55:
ae:a7:a3:c4:5c:10:0e:76:df:2a:c1:5f:08:8f:b3:69:4c:55:
18:ad:12:d9:bd:ab:7b:63:92:48:b1:c5:e6:10:a9:bf:b1:a6:
0a:b4:af:1c:69:8a:7c:5a:d4:be:88:96:99:db:87:e5:46:bb:
b9:30:ef:bf:d3:d9:bf:cd:8e:b4:81:cf:cc:26:f7:8e:85:d2:
c2:5c:b6:94:3f:19:38:ec:47:bd:22:ce:b2:03:7d:ca:27:5a:
b5:db:72:53:ff:f7:24:d8:ef:60:a4:30:fd:14:72:a5:99:6c:
0d:a7:fa:57:22:fd:de:d6:09:cc:f0:ba:da:13:a5:c7:a2:e9:
4e:a1:33:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMsGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDMxMDkwNzQ0WhcNMjQxMTI0MDkwNzQ0WjAYMRYw
FAYDVQQDEw02NzIzNDhlNC00YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1uN/UZj/eo2yYH/6gT7az+TnqUJQTopcl4K8SS0dOwGW8SB63looaSsb
ErzkZzhEh8a5QeAZswMc+hYsNChisf7evA0BUXMLU6LbMQJjJdVT/WStTaNTophN
Ayb59xQ3hZ9vQQECQq+Y44uwtFiEqC+CStgxCSDLyA1M3l3ID7THeO15GD/462mC
0wE2LjRdwi4NBdRGX5ikxhadW2WRsZPFKOK1rcBKWY0oC4mn/o3dbECyhBMI3Eij
8ditsePnr9tISVA4p9qepe40o5kcx2d5NCrosIal/lAtERW5GIqJ6A/f/Jj2dXrJ
x3YBbU5cClgklPAKvbfU5M+77+VSHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNB4
2gLmk6E+Ngyj5s59tTQX44s3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OTM4MENEQzk3NjcxMUVGOEFFNDRFNEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOMoMA0GCSqGSIb3DQEBCwUA
A4IBAQCrImncH3Ur+se8v0krHzwv0DluZqG1Rrs4JqPoVpwC3t7QYrC2Wz+HvLoE
XS6ln6WAAxujl8bjUK9H5TvXoMX4GedJXJfRpBf2ZG+kavvHAU2I8IWjAY/iaNHd
Vx85Cmidu774J6mPFqjRkGcRwmllr0Z9OIObbEDQvINRTVWup6PEXBAOdt8qwV8I
j7NpTFUYrRLZvat7Y5JIscXmEKm/saYKtK8caYp8WtS+iJaZ24flRru5MO+/09m/
zY60gc/MJveOhdLCXLaUPxk47Ee9Is6yA33KJ1q123JT//ck2O9gpDD9FHKlmWwN
p/pXIv3e1gnM8LraE6XHoulOoTN9
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org