Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00057364A5011EF85A12AA5762E951A.roa
File: A00057364A5011EF85A12AA5762E951A.roa (raw, json)
Hash identifier: 7rtGyB5LTKqF5AJubzg+JoZIUXQM+oKvM3MWK3+Wex8=
Subject key identifier: 80:1E:56:FB:82:FE:84:F9:12:A8:DB:84:72:03:62:1C:A7:0A:FA:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00057364A5011EF85A12AA5762E951A.roa
Signing time: Thu 25 Jul 2024 06:39:21 +0000
ROA not before: Thu 25 Jul 2024 06:39:18 +0000
ROA not after: Sat 14 Sep 2024 06:39:18 +0000
asID: 152920
IP address blocks: 156.237.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40823 (0x9f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 06:39:18 2024 GMT
Not After : Sep 14 06:39:18 2024 GMT
Subject: CN=66a1f319-c3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:3f:78:dc:f2:8e:5d:f5:fc:8f:bf:4f:3e:
4e:ae:70:23:96:54:57:2e:e9:3a:9f:e7:05:1a:6b:
e7:9c:e6:fb:41:58:0e:45:36:eb:27:18:36:f7:12:
d5:7c:1d:9f:25:ea:88:0f:f9:e8:5b:e3:ae:42:21:
61:e9:e6:17:e9:e9:1c:65:f6:cd:00:d9:f2:63:7a:
4f:2e:c2:14:93:8c:f0:3d:aa:57:ce:89:49:50:da:
8f:dc:08:a7:8c:6f:a9:d3:39:1c:5b:cc:04:80:e4:
8c:05:3a:90:36:06:3e:b3:ff:99:bc:54:ee:38:5a:
f6:48:eb:84:38:8b:10:fc:a5:cf:de:cc:e1:a6:6d:
1c:d5:62:86:d4:2d:7a:5f:0b:ec:69:96:e0:63:14:
e1:0b:60:1b:34:26:76:1c:d5:01:b7:b0:31:9e:bb:
55:b5:35:1c:6c:da:b5:67:9e:29:aa:af:a6:57:50:
f7:0a:a6:8e:38:b1:76:c5:04:31:6a:ec:c7:a5:2a:
19:4b:a9:2c:d1:fd:b2:a7:10:0d:2c:44:2e:df:fc:
a3:05:74:14:62:fd:7c:3a:04:af:9f:eb:e6:57:80:
9f:cf:82:84:79:0d:92:8a:db:a1:c0:64:58:65:04:
c1:6f:e8:6f:35:91:cc:a8:f4:1f:9b:11:c7:1b:b2:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:56:FB:82:FE:84:F9:12:A8:DB:84:72:03:62:1C:A7:0A:FA:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A00057364A5011EF85A12AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.24.0/21
Signature Algorithm: sha256WithRSAEncryption
52:5b:7b:f7:fe:de:0a:62:88:d1:c0:ba:d3:0d:37:b5:d6:3c:
3a:1d:f2:f9:97:51:8b:dc:1c:6c:18:11:08:6a:f2:ac:2d:24:
48:b1:d3:9e:58:55:f5:b2:9f:15:07:5e:25:50:5b:39:d4:9c:
03:c0:ea:df:e0:7d:0a:b9:df:56:55:0d:a0:65:7b:9e:ef:38:
fa:74:2b:af:b9:8f:82:e8:05:aa:91:08:26:1f:31:ba:e9:6a:
a2:ff:ec:45:c4:34:ff:6d:a7:17:56:0f:d6:c5:83:c9:10:8f:
d5:8e:af:73:6b:16:b0:0c:83:47:bd:80:27:f8:fa:05:25:36:
86:8d:dc:84:06:c8:c3:95:2f:07:0d:50:24:d3:aa:ea:7d:14:
7e:ae:e5:df:b1:e5:af:aa:8f:2c:d4:68:92:01:ec:03:4c:b1:
f2:a7:90:7d:2c:52:2b:ec:52:60:ac:56:fe:76:e2:9f:bb:f4:
c2:f5:fb:d9:c2:f3:99:82:c6:6a:00:7f:59:55:fb:6c:f4:b7:
ed:1a:1f:82:2a:3c:ca:65:01:c3:8e:01:d7:70:2d:5e:48:0b:
1c:19:9a:a5:95:41:d0:c0:23:8e:22:9c:17:1f:32:7a:54:b1:
99:08:77:97:66:7e:88:39:10:b4:3e:8f:0d:19:95:d7:24:3e:
e2:7c:8f:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJ93MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNzI1MDYzOTE4WhcNMjQwOTE0MDYzOTE4WjAYMRYw
FAYDVQQDEw02NmExZjMxOS1jM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAti8/eNzyjl31/I+/Tz5OrnAjllRXLuk6n+cFGmvnnOb7QVgORTbrJxg2
9xLVfB2fJeqID/noW+OuQiFh6eYX6ekcZfbNANnyY3pPLsIUk4zwPapXzolJUNqP
3AinjG+p0zkcW8wEgOSMBTqQNgY+s/+ZvFTuOFr2SOuEOIsQ/KXP3szhpm0c1WKG
1C16XwvsaZbgYxThC2AbNCZ2HNUBt7AxnrtVtTUcbNq1Z54pqq+mV1D3CqaOOLF2
xQQxauzHpSoZS6ks0f2ypxANLEQu3/yjBXQUYv18OgSvn+vmV4Cfz4KEeQ2Situh
wGRYZQTBb+hvNZHMqPQfmxHHG7K/iwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIAe
VvuC/oT5EqjbhHIDYhynCvrTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMDAwNTczNjRBNTAxMUVGODVBMTJBQTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO0YMA0GCSqGSIb3DQEBCwUA
A4IBAQBSW3v3/t4KYojRwLrTDTe11jw6HfL5l1GL3BxsGBEIavKsLSRIsdOeWFX1
sp8VB14lUFs51JwDwOrf4H0Kud9WVQ2gZXue7zj6dCuvuY+C6AWqkQgmHzG66Wqi
/+xFxDT/bacXVg/WxYPJEI/Vjq9zaxawDINHvYAn+PoFJTaGjdyEBsjDlS8HDVAk
06rqfRR+ruXfseWvqo8s1GiSAewDTLHyp5B9LFIr7FJgrFb+duKfu/TC9fvZwvOZ
gsZqAH9ZVfts9LftGh+CKjzKZQHDjgHXcC1eSAscGZqllUHQwCOOIpwXHzJ6VLGZ
CHeXZn6IORC0Po8NGZXXJD7ifI8u
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:09 2024 by rpki-client on console-ams.rpki-client.org