Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8022F9EA42E11EF8F733374762E951A.roa
File: A8022F9EA42E11EF8F733374762E951A.roa (raw, json)
Hash identifier: dqPoGXFdow/Ht/tdWkSVmA0clouA4xb3LlMVwakB+Zo=
Subject key identifier: E3:DB:FD:C2:22:58:FF:DE:09:ED:00:7A:28:D3:F7:0D:9A:8A:9F:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D32A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8022F9EA42E11EF8F733374762E951A.roa
Signing time: Sat 16 Nov 2024 15:22:57 +0000
ROA not before: Sat 16 Nov 2024 15:22:53 +0000
ROA not after: Wed 18 Dec 2024 15:22:53 +0000
asID: 60223
IP address blocks: 156.253.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54058 (0xd32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 15:22:53 2024 GMT
Not After : Dec 18 15:22:53 2024 GMT
Subject: CN=6738b8d0-8e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:4c:1a:2a:85:bf:9f:6c:20:5b:61:d8:ae:
96:f8:c7:5f:49:71:ad:e3:3e:7f:55:d7:c5:88:3c:
c0:db:b6:29:45:7c:f0:74:ec:68:66:4e:63:9e:23:
c4:73:0e:fc:fd:64:21:a5:fe:aa:f9:86:c2:6a:d2:
0d:7a:58:3a:ce:40:11:8d:fd:c2:eb:d1:a1:54:31:
31:b1:b9:a2:1f:e4:63:d4:a3:28:fb:e1:64:95:1f:
f6:0d:7a:5f:e2:e9:85:2a:9d:6c:2d:c0:e4:57:9d:
08:28:b9:8e:1e:9d:5a:e3:22:4f:8e:02:50:89:a5:
e1:82:cf:4b:13:86:82:b6:81:b3:8f:59:9f:4e:14:
27:d4:9a:0d:ef:9f:ce:a1:9b:5e:f6:04:7f:78:3c:
d0:06:11:ec:c1:ce:dd:fd:ab:18:69:9b:70:f6:fa:
dc:ca:c9:25:03:ab:31:b9:1d:0f:5b:4b:fd:9a:2f:
b8:2d:76:2d:cb:00:d9:61:05:d9:22:5f:48:dd:c3:
03:b9:8f:bf:22:48:0b:5c:85:fa:cd:0d:44:c5:7b:
9d:4e:e4:35:9a:a9:67:18:24:3f:a2:86:55:e5:33:
e8:f6:48:06:93:cb:5d:02:8b:48:94:6a:c4:d2:de:
d5:b6:48:91:ac:5d:c7:a4:1e:87:e8:e2:8b:1a:d0:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DB:FD:C2:22:58:FF:DE:09:ED:00:7A:28:D3:F7:0D:9A:8A:9F:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8022F9EA42E11EF8F733374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:ff:59:7d:5a:ea:be:1a:fe:ae:22:3c:9c:92:bb:73:48:a6:
08:87:86:94:33:48:eb:0a:2a:69:1f:9d:78:43:85:34:7b:e5:
75:58:9c:5f:b4:11:5f:84:3e:ef:ec:6b:6e:5d:ff:6f:29:10:
d0:de:13:72:44:22:ca:17:3c:af:17:ae:c2:73:19:fb:23:1d:
97:c1:c0:26:49:65:21:79:f7:3e:19:b0:0b:d0:1e:62:bb:35:
7a:2b:3a:38:96:28:ed:a5:23:02:87:c2:ed:b0:b2:45:23:f3:
7b:77:9c:1c:b1:8f:ca:07:54:51:0e:66:e1:fe:76:75:b2:97:
9e:e8:6e:2a:f5:08:a1:ac:48:b5:8f:9e:47:a0:b8:03:01:58:
0d:ba:0b:dd:7a:21:02:b1:d5:e0:79:d2:98:b9:cc:f2:2a:e7:
f2:df:2e:b8:28:5d:36:d0:91:48:a5:57:65:76:9e:b6:c4:5b:
d5:be:17:e6:64:85:c0:86:2a:ce:ef:2e:f3:c9:dd:44:e3:7b:
0c:51:05:20:ac:11:7a:b9:28:5d:ad:f9:64:a1:f6:c5:6b:1d:
35:c6:7b:bd:8f:24:2a:bd:ca:e5:3b:73:f7:07:c4:12:19:bd:
1a:78:5f:7d:48:a0:bb:b3:75:cf:e0:7d:b6:16:b5:21:b2:72:
fb:8c:9e:05
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANMqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTUyMjUzWhcNMjQxMjE4MTUyMjUzWjAYMRYw
FAYDVQQDEw02NzM4YjhkMC04ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq1ZMGiqFv59sIFth2K6W+MdfSXGt4z5/VdfFiDzA27YpRXzwdOxoZk5j
niPEcw78/WQhpf6q+YbCatINelg6zkARjf3C69GhVDExsbmiH+Rj1KMo++FklR/2
DXpf4umFKp1sLcDkV50IKLmOHp1a4yJPjgJQiaXhgs9LE4aCtoGzj1mfThQn1JoN
75/OoZte9gR/eDzQBhHswc7d/asYaZtw9vrcysklA6sxuR0PW0v9mi+4LXYtywDZ
YQXZIl9I3cMDuY+/IkgLXIX6zQ1ExXudTuQ1mqlnGCQ/ooZV5TPo9kgGk8tdAotI
lGrE0t7VtkiRrF3HpB6H6OKLGtDaOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOPb
/cIiWP/eCe0AeijT9w2aip+UMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODAyMkY5RUE0MkUxMUVGOEY3MzMzNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnP3gMA0GCSqGSIb3DQEBCwUA
A4IBAQBN/1l9Wuq+Gv6uIjyckrtzSKYIh4aUM0jrCippH514Q4U0e+V1WJxftBFf
hD7v7GtuXf9vKRDQ3hNyRCLKFzyvF67Ccxn7Ix2XwcAmSWUhefc+GbAL0B5iuzV6
Kzo4lijtpSMCh8LtsLJFI/N7d5wcsY/KB1RRDmbh/nZ1spee6G4q9QihrEi1j55H
oLgDAVgNugvdeiECsdXgedKYuczyKufy3y64KF020JFIpVdldp62xFvVvhfmZIXA
hirO7y7zyd1E43sMUQUgrBF6uShdrflkofbFax01xnu9jyQqvcrlO3P3B8QSGb0a
eF99SKC7s3XP4H22FrUhsnL7jJ4F
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:05 2024 by rpki-client on console-ams.rpki-client.org