Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A532149E5DCC11EF9053047F762E951A.roa
File: A532149E5DCC11EF9053047F762E951A.roa (raw, json)
Hash identifier: TQHv5YcqLZvedaDOyXACuL56PhP89mr85LlkdrZZpbg=
Subject key identifier: 54:25:00:E8:B8:24:8E:22:67:93:F5:53:FA:CD:F1:C0:3A:D7:00:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A85D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A532149E5DCC11EF9053047F762E951A.roa
Signing time: Mon 19 Aug 2024 01:45:00 +0000
ROA not before: Mon 19 Aug 2024 01:44:56 +0000
ROA not after: Thu 31 Dec 2026 01:44:56 +0000
asID: 17561
IP address blocks: 156.227.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43101 (0xa85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 01:44:56 2024 GMT
Not After : Dec 31 01:44:56 2026 GMT
Subject: CN=66c2a39c-253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:d9:0e:68:8d:48:d2:11:af:83:15:bb:bb:
29:f0:05:68:98:d1:bf:d3:84:15:98:be:83:ee:d0:
6a:fb:87:11:31:71:b2:24:c6:29:4f:ee:e7:1f:46:
1e:93:6d:22:0f:51:08:ce:65:53:c1:6d:e1:92:c8:
99:4e:1c:f3:8b:36:6e:21:b5:d6:9c:7d:30:a4:d8:
fe:fd:e0:5e:b8:1a:d6:0d:8c:c9:64:1f:1a:4c:31:
5f:25:57:0b:f3:5a:55:9a:3a:d0:f5:07:d6:a5:80:
7b:af:72:e4:32:44:9c:c3:e6:b9:3e:34:27:93:17:
d4:4c:5c:2d:1f:16:34:94:66:0d:e2:8d:d7:32:c0:
3d:d0:ab:09:cd:e1:8f:a8:21:8e:2b:72:c9:f0:6a:
cc:d5:14:e9:e1:27:60:54:dd:cf:93:fb:1d:df:c2:
46:1f:47:b8:ba:9f:00:4c:de:cf:88:e7:37:ad:87:
c0:3b:45:22:ec:3b:2c:da:6e:87:63:f3:e5:73:0b:
32:ca:b0:94:b3:b4:50:e3:c7:39:4d:77:29:29:37:
6f:d6:9e:bb:cc:6e:6d:e3:6b:26:89:90:74:f3:51:
f7:1a:9d:fd:47:0e:fe:70:ae:08:22:43:f3:de:51:
86:be:d2:29:3e:28:30:28:7a:e4:3e:c0:e7:52:36:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:00:E8:B8:24:8E:22:67:93:F5:53:FA:CD:F1:C0:3A:D7:00:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A532149E5DCC11EF9053047F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.129.0/24
Signature Algorithm: sha256WithRSAEncryption
16:18:2e:3b:c8:5c:12:0f:f7:85:33:d7:b1:e8:08:f1:00:23:
34:85:20:59:30:45:07:5c:36:17:a1:5f:62:86:e4:ee:29:c2:
f9:97:6c:ec:9d:f2:a3:c6:96:f9:60:5c:be:e0:32:63:27:00:
bc:41:7f:3e:69:0e:a9:85:cf:c7:72:a2:f6:03:7d:86:ae:ff:
da:91:14:ba:be:42:91:97:b0:6e:18:9f:fb:36:ac:fe:d5:e1:
d1:35:a7:c7:ba:e2:b3:5b:1a:bc:28:3a:e5:9a:0f:56:9e:0a:
4a:53:2c:75:75:37:f0:cf:fd:09:c0:58:57:74:eb:d1:b1:3d:
5e:09:39:73:4c:68:70:d2:a1:43:14:29:74:89:21:5d:3c:17:
c4:7e:c8:e9:ab:0c:d3:9e:1b:29:0b:69:e7:b3:52:6a:17:04:
26:86:3b:17:3a:64:9f:fd:e2:a1:c5:56:ce:df:b7:0c:8a:b1:
34:33:ae:0c:33:62:61:70:72:f6:a3:23:2f:fd:fd:db:28:1d:
7c:01:9d:29:d8:f4:2d:4b:d0:4c:6d:60:90:bd:da:3f:87:2e:
33:a0:da:84:2e:06:c2:4c:b5:46:14:53:78:86:26:93:c2:a6:
48:83:0b:35:ac:8a:50:96:92:2d:82:67:65:8c:61:b0:3b:ff:
fb:b0:5a:b2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKhdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODE5MDE0NDU2WhcNMjYxMjMxMDE0NDU2WjAYMRYw
FAYDVQQDEw02NmMyYTM5Yy0yNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuOvZDmiNSNIRr4MVu7sp8AVomNG/04QVmL6D7tBq+4cRMXGyJMYpT+7n
H0Yek20iD1EIzmVTwW3hksiZThzzizZuIbXWnH0wpNj+/eBeuBrWDYzJZB8aTDFf
JVcL81pVmjrQ9QfWpYB7r3LkMkScw+a5PjQnkxfUTFwtHxY0lGYN4o3XMsA90KsJ
zeGPqCGOK3LJ8GrM1RTp4SdgVN3Pk/sd38JGH0e4up8ATN7PiOc3rYfAO0Ui7Dss
2m6HY/PlcwsyyrCUs7RQ48c5TXcpKTdv1p67zG5t42smiZB081H3Gp39Rw7+cK4I
IkPz3lGGvtIpPigwKHrkPsDnUja7ewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFQl
AOi4JI4iZ5P1U/rN8cA61wAsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTMyMTQ5RTVEQ0MxMUVGOTA1MzA0N0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOOBMA0GCSqGSIb3DQEBCwUA
A4IBAQAWGC47yFwSD/eFM9ex6AjxACM0hSBZMEUHXDYXoV9ihuTuKcL5l2zsnfKj
xpb5YFy+4DJjJwC8QX8+aQ6phc/HcqL2A32Grv/akRS6vkKRl7BuGJ/7Nqz+1eHR
NafHuuKzWxq8KDrlmg9WngpKUyx1dTfwz/0JwFhXdOvRsT1eCTlzTGhw0qFDFCl0
iSFdPBfEfsjpqwzTnhspC2nns1JqFwQmhjsXOmSf/eKhxVbO37cMirE0M64MM2Jh
cHL2oyMv/f3bKB18AZ0p2PQtS9BMbWCQvdo/hy4zoNqELgbCTLVGFFN4hiaTwqZI
gws1rIpQlpItgmdljGGwO//7sFqy
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org