Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0530349B8811EF93B96F56762E951A.roa
File: 9F0530349B8811EF93B96F56762E951A.roa (raw, json)
Hash identifier: GgamG4Jpy9zO2BhzUS9yrVx1HkSou9E6Ut0GEm5cXSM=
Subject key identifier: 1D:BC:C3:73:59:FF:5B:72:FB:9E:16:5A:B6:A3:FC:47:53:1C:CE:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CEC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0530349B8811EF93B96F56762E951A.roa
Signing time: Tue 05 Nov 2024 15:14:16 +0000
ROA not before: Tue 05 Nov 2024 15:14:12 +0000
ROA not after: Wed 04 Dec 2024 15:14:12 +0000
asID: 200373
IP address blocks: 156.253.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52937 (0xcec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 15:14:12 2024 GMT
Not After : Dec 4 15:14:12 2024 GMT
Subject: CN=672a3648-6811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:de:93:c0:0d:0b:50:b1:09:f4:2e:32:23:
7b:9a:d1:06:00:d2:07:b2:c5:a0:80:90:ac:f8:bc:
83:9d:41:ac:99:8d:6f:5e:6a:c5:4f:88:03:12:df:
e4:1d:55:71:77:83:50:e6:5a:3f:fe:4d:cd:29:96:
c5:61:2c:01:73:7d:29:5e:56:99:8f:cb:dd:7d:38:
ce:15:33:4f:22:c5:34:7c:6f:35:ce:27:15:7f:18:
44:af:cd:51:b6:43:1a:e6:4b:f8:0c:ca:8e:eb:29:
89:36:84:7f:09:b2:fc:1d:7e:47:4b:9f:70:4c:60:
7e:7a:e7:db:ba:63:87:f0:bf:36:b3:42:7f:69:63:
c3:7d:69:1b:b2:6f:f6:b9:44:65:f2:0a:45:5e:35:
28:73:c2:61:5d:11:af:96:8f:39:4b:c0:c1:cb:b0:
7e:20:74:49:9b:bd:ac:8c:12:8a:d7:88:f8:65:d2:
e5:bb:0f:4a:bc:49:76:0d:a8:2f:a4:10:9c:ca:71:
ec:e3:2d:5c:04:a5:24:ea:e0:37:f5:05:7d:df:21:
63:ba:79:7f:d9:5f:3a:8d:ee:ee:e7:16:32:e9:be:
c3:11:2c:cc:e3:0d:7d:5b:b2:2a:4a:ba:d8:7a:69:
4e:e5:dd:24:a3:aa:ca:11:2d:05:b2:8c:98:f9:ea:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:C3:73:59:FF:5B:72:FB:9E:16:5A:B6:A3:FC:47:53:1C:CE:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0530349B8811EF93B96F56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.168.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:5d:c6:f7:07:63:89:a9:28:bb:c8:34:9f:45:f0:c7:dc:81:
1a:72:ae:fd:d7:38:e7:3b:17:12:fd:2f:ad:0a:a4:88:9c:ef:
41:05:ca:3a:c0:50:6d:e2:86:39:09:f7:77:61:b2:17:76:d6:
c6:fc:b3:ef:b9:c1:05:89:5b:39:a0:73:38:3c:37:de:d2:4d:
c4:7e:c7:67:5e:33:d4:94:58:21:de:79:20:67:01:6b:e0:a3:
05:98:5d:58:bd:04:de:e4:5f:da:d9:58:30:ff:d5:fc:2c:fe:
8d:8a:ef:a6:00:7f:fd:56:b8:16:8f:38:46:b3:3c:0c:ff:f2:
fa:65:2e:3f:05:5f:30:d0:51:08:db:8d:1a:2b:ae:c7:18:b8:
1a:62:b5:27:8f:e4:99:58:4d:60:a2:ad:85:0e:d7:59:d0:05:
f3:79:44:07:cf:8c:4a:71:a7:ed:84:f3:31:cd:75:ea:cc:d2:
f8:32:c0:13:42:87:3e:8c:4f:db:22:c1:87:3e:5f:68:53:ae:
5e:89:51:a7:eb:57:18:00:db:b7:b6:ac:84:e3:6d:df:43:d2:
66:56:f3:18:2e:fe:e2:b6:c8:26:e0:9a:06:2e:6a:05:39:ec:
be:59:9b:c8:6e:27:c5:77:81:7f:f0:db:ef:45:81:ca:e6:d3:
31:d2:b0:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAM7JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTA1MTUxNDEyWhcNMjQxMjA0MTUxNDEyWjAYMRYw
FAYDVQQDEw02NzJhMzY0OC02ODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsC3ek8ANC1CxCfQuMiN7mtEGANIHssWggJCs+LyDnUGsmY1vXmrFT4gD
Et/kHVVxd4NQ5lo//k3NKZbFYSwBc30pXlaZj8vdfTjOFTNPIsU0fG81zicVfxhE
r81RtkMa5kv4DMqO6ymJNoR/CbL8HX5HS59wTGB+eufbumOH8L82s0J/aWPDfWkb
sm/2uURl8gpFXjUoc8JhXRGvlo85S8DBy7B+IHRJm72sjBKK14j4ZdLluw9KvEl2
DagvpBCcynHs4y1cBKUk6uA39QV93yFjunl/2V86je7u5xYy6b7DESzM4w19W7Iq
SrrYemlO5d0ko6rKES0FsoyY+eporwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB28
w3NZ/1ty+54WWraj/EdTHM6+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjA1MzAzNDlCODgxMUVGOTNCOTZGNTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnP2oMA0GCSqGSIb3DQEBCwUA
A4IBAQC4Xcb3B2OJqSi7yDSfRfDH3IEacq791zjnOxcS/S+tCqSInO9BBco6wFBt
4oY5Cfd3YbIXdtbG/LPvucEFiVs5oHM4PDfe0k3EfsdnXjPUlFgh3nkgZwFr4KMF
mF1YvQTe5F/a2Vgw/9X8LP6Niu+mAH/9VrgWjzhGszwM//L6ZS4/BV8w0FEI240a
K67HGLgaYrUnj+SZWE1goq2FDtdZ0AXzeUQHz4xKcafthPMxzXXqzNL4MsATQoc+
jE/bIsGHPl9oU65eiVGn61cYANu3tqyE423fQ9JmVvMYLv7itsgm4JoGLmoFOey+
WZvIbifFd4F/8NvvRYHK5tMx0rAQ
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org