Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B4991DA6AA311EF9A97287D762E951A.roa
File: 9B4991DA6AA311EF9A97287D762E951A.roa (raw, json)
Hash identifier: NUizZwQurTmGLve+1IjbiANJeDwx5WD2s1eS6w0vFdE=
Subject key identifier: 0D:13:EC:77:47:A1:01:C5:19:E7:0F:9B:1D:C7:CB:9E:E0:9A:10:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B1C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B4991DA6AA311EF9A97287D762E951A.roa
Signing time: Wed 04 Sep 2024 09:53:59 +0000
ROA not before: Wed 04 Sep 2024 09:53:55 +0000
ROA not after: Thu 24 Apr 2025 09:53:55 +0000
asID: 63888
IP address blocks: 156.255.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45507 (0xb1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 09:53:55 2024 GMT
Not After : Apr 24 09:53:55 2025 GMT
Subject: CN=66d82e37-8bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:79:f5:4d:30:b2:13:c6:eb:9d:55:f3:a7:
63:51:86:5f:b4:36:65:65:2e:f8:c6:38:8b:00:47:
88:5a:c5:e3:4c:86:e6:d6:3a:61:3c:c9:0a:c2:0c:
87:c1:cd:a1:8d:8b:85:d5:8f:eb:38:06:36:12:10:
1f:5e:77:ff:8c:6e:37:bb:15:25:57:f2:b7:20:ae:
0c:28:14:1e:fb:36:ea:ca:de:7f:4a:19:fe:01:f6:
ab:66:5b:b8:51:85:83:ef:7e:1e:ff:3f:14:a8:74:
d4:06:89:30:d7:38:79:35:ed:bb:ef:51:3d:93:43:
06:f4:43:59:64:52:79:62:6d:b8:7e:4b:3b:1f:72:
62:5f:3b:eb:66:55:2d:02:be:4d:a6:4c:74:e1:c5:
92:40:04:9d:3e:f2:59:d9:94:89:0d:0d:43:83:74:
b4:52:b1:fb:48:0a:9a:41:df:08:c7:e3:26:56:b2:
23:1e:9e:e6:20:d3:b6:f8:83:ac:43:50:8e:42:60:
a7:2b:b6:09:a9:ad:95:fa:41:ec:0d:56:87:38:0f:
eb:69:a0:23:5e:df:71:18:45:1b:15:e0:00:ef:42:
b2:26:99:52:2a:39:32:3a:e7:66:2f:da:79:ef:84:
4e:fd:7d:a8:ce:30:ab:ba:8a:35:93:fc:01:31:3e:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:13:EC:77:47:A1:01:C5:19:E7:0F:9B:1D:C7:CB:9E:E0:9A:10:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B4991DA6AA311EF9A97287D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.68.0/22
Signature Algorithm: sha256WithRSAEncryption
47:8f:3d:7e:07:2b:4f:2b:a6:35:c6:15:21:64:07:01:c4:d6:
ee:db:9b:b5:77:4a:38:b2:05:69:b8:52:86:b4:9b:24:56:68:
7c:ed:97:1f:1e:b8:87:6b:23:76:2c:75:2c:dd:6f:e6:3d:3e:
94:17:ef:58:ab:28:07:4f:7f:cd:17:e0:41:59:10:08:db:9d:
7d:e5:11:df:9a:cf:8c:9d:95:32:91:8d:7f:7c:a3:4d:fc:04:
08:37:6b:97:0b:9a:77:ad:f3:e4:93:ac:66:56:fc:a0:de:c4:
21:12:b0:68:e0:c3:b9:8d:3f:0a:8b:13:e4:36:49:b6:aa:7a:
32:b5:92:00:3a:16:2a:df:09:cd:22:43:d4:5f:56:60:ce:a2:
af:ca:1a:6b:97:49:d8:42:1d:7f:fc:30:95:23:fd:e0:a5:e0:
60:53:fd:ca:e7:5c:14:43:7c:7f:7c:22:42:7a:db:b6:86:6f:
dc:c3:a4:d6:2e:b0:08:1c:c5:54:7c:f6:7d:0e:cb:b1:99:c3:
20:6e:c7:b4:81:cc:15:32:60:ee:52:4f:3d:67:66:85:94:17:
38:a8:ae:7c:79:17:4b:fd:14:e0:05:3c:b2:61:9f:49:8e:b0:
dc:47:08:c8:b5:6e:93:30:8b:d8:34:aa:ea:40:44:d3:10:06:
82:b8:7d:f3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALHDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTA0MDk1MzU1WhcNMjUwNDI0MDk1MzU1WjAYMRYw
FAYDVQQDEw02NmQ4MmUzNy04YmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoTV59U0wshPG651V86djUYZftDZlZS74xjiLAEeIWsXjTIbm1jphPMkK
wgyHwc2hjYuF1Y/rOAY2EhAfXnf/jG43uxUlV/K3IK4MKBQe+zbqyt5/Shn+Afar
Zlu4UYWD734e/z8UqHTUBokw1zh5Ne2771E9k0MG9ENZZFJ5Ym24fks7H3JiXzvr
ZlUtAr5Npkx04cWSQASdPvJZ2ZSJDQ1Dg3S0UrH7SAqaQd8Ix+MmVrIjHp7mINO2
+IOsQ1COQmCnK7YJqa2V+kHsDVaHOA/raaAjXt9xGEUbFeAA70KyJplSKjkyOudm
L9p574RO/X2ozjCruoo1k/wBMT66hwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA0T
7HdHoQHFGecPmx3Hy57gmhAnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QjQ5OTFEQTZBQTMxMUVGOUE5NzI4N0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP9EMA0GCSqGSIb3DQEBCwUA
A4IBAQBHjz1+BytPK6Y1xhUhZAcBxNbu25u1d0o4sgVpuFKGtJskVmh87ZcfHriH
ayN2LHUs3W/mPT6UF+9YqygHT3/NF+BBWRAI25195RHfms+MnZUykY1/fKNN/AQI
N2uXC5p3rfPkk6xmVvyg3sQhErBo4MO5jT8KixPkNkm2qnoytZIAOhYq3wnNIkPU
X1ZgzqKvyhprl0nYQh1//DCVI/3gpeBgU/3K51wUQ3x/fCJCetu2hm/cw6TWLrAI
HMVUfPZ9DsuxmcMgbse0gcwVMmDuUk89Z2aFlBc4qK58eRdL/RTgBTyyYZ9JjrDc
RwjItW6TMIvYNKrqQETTEAaCuH3z
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:42 2024 by rpki-client on console-ams.rpki-client.org