Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE1075BA344B11EF90655083762E951A.roa
File: AE1075BA344B11EF90655083762E951A.roa (raw, json)
Hash identifier: QLqtx7xYACRt4oBpFGF8AiwORpx+dUSg4pR8UjasAb8=
Subject key identifier: D9:CD:85:60:76:8B:51:04:19:7B:2F:FB:E5:BC:1D:45:CC:60:9F:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 95A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE1075BA344B11EF90655083762E951A.roa
Signing time: Thu 27 Jun 2024 06:08:32 +0000
ROA not before: Thu 27 Jun 2024 06:08:29 +0000
ROA not after: Mon 30 Dec 2024 06:08:29 +0000
asID: 984
IP address blocks: 156.247.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38308 (0x95a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 06:08:29 2024 GMT
Not After : Dec 30 06:08:29 2024 GMT
Subject: CN=667d01e0-c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:fe:00:94:ce:30:3c:1a:ac:2f:4c:df:9f:
7f:08:fc:e8:2b:37:6f:ab:eb:28:f3:ed:b9:d4:aa:
d6:b0:d3:b8:a9:16:4f:ce:ae:5c:8f:dc:98:c9:bc:
d5:bd:7a:31:d6:ed:8f:a8:aa:8b:16:ae:0c:47:44:
24:84:ed:49:be:76:ff:48:8d:43:79:d1:e3:96:88:
fa:d4:d3:1a:f8:54:63:6e:b5:86:dd:96:93:b3:51:
8a:ce:7b:a8:67:ee:13:e0:0b:16:ee:84:7d:64:44:
00:8f:33:c6:8a:d9:8a:f8:0f:f5:df:59:fc:05:b6:
fc:85:3c:b1:73:b5:5b:64:b3:5b:3e:44:42:94:bd:
44:1f:af:f0:25:9a:2f:71:a2:af:1a:04:5c:f7:07:
5f:5a:55:f3:69:01:f2:27:4e:47:6f:2c:6a:2a:fa:
09:d2:b5:20:56:7a:d5:d8:eb:db:58:90:19:74:c4:
40:6f:56:ac:44:ee:59:eb:7d:ef:5f:0a:3a:c9:79:
5c:0d:74:43:eb:ee:f6:06:49:8e:5c:64:3f:ce:8a:
35:ac:1f:7d:de:5d:45:02:40:da:83:b8:90:3a:ca:
fc:88:e8:dc:97:0d:67:a8:c4:2d:1b:65:b4:cf:f5:
91:b1:22:7f:9f:3e:a3:b8:85:77:7a:10:a4:84:8b:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:85:60:76:8B:51:04:19:7B:2F:FB:E5:BC:1D:45:CC:60:9F:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE1075BA344B11EF90655083762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:12:45:0a:55:77:38:ef:09:75:9a:d4:4d:9b:7e:68:4f:56:
ae:12:aa:61:40:6b:0a:6a:aa:5e:e8:ba:54:f8:11:a9:d8:4b:
0a:1b:c3:bf:ea:7f:83:b6:cf:ba:24:9a:e0:e9:05:b8:ab:a2:
ff:c2:d2:60:9e:d5:8c:b8:98:12:1b:30:a6:32:bb:26:13:a2:
4c:5b:f3:ce:58:37:44:54:d8:78:a2:9d:00:b2:21:4a:e7:d1:
15:28:69:b0:cf:1f:53:47:c6:be:9f:01:d0:2b:8a:c5:7f:05:
a8:ec:3c:31:36:5f:08:89:94:79:ad:fa:db:99:1c:68:92:27:
89:90:12:6c:fd:7e:49:c7:a8:e7:3e:53:e0:fc:59:72:6b:47:
86:0d:47:a2:ca:b4:2e:f7:9b:b4:53:d0:61:98:e3:57:ae:e1:
5b:2c:5f:2d:e5:54:ee:9e:d2:cc:b1:c1:b8:80:d8:7b:f4:17:
95:60:92:dc:70:a6:3c:05:65:a1:d6:30:e7:8d:b9:68:5f:81:
8a:e5:91:5d:9f:e6:b6:6a:21:55:ff:7d:84:74:46:f4:50:be:
a4:37:9c:a3:ad:aa:c1:65:21:8c:05:77:37:ef:00:83:dc:f0:
8e:f8:ed:f6:9a:29:a0:c0:37:e7:31:76:15:a3:95:fb:5d:e0:
fc:a9:f7:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAJWkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjI3MDYwODI5WhcNMjQxMjMwMDYwODI5WjAYMRYw
FAYDVQQDEw02NjdkMDFlMC1jNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArjv+AJTOMDwarC9M359/CPzoKzdvq+so8+251KrWsNO4qRZPzq5cj9yY
ybzVvXox1u2PqKqLFq4MR0QkhO1Jvnb/SI1DedHjloj61NMa+FRjbrWG3ZaTs1GK
znuoZ+4T4AsW7oR9ZEQAjzPGitmK+A/131n8Bbb8hTyxc7VbZLNbPkRClL1EH6/w
JZovcaKvGgRc9wdfWlXzaQHyJ05HbyxqKvoJ0rUgVnrV2OvbWJAZdMRAb1asRO5Z
633vXwo6yXlcDXRD6+72BkmOXGQ/zoo1rB993l1FAkDag7iQOsr8iOjclw1nqMQt
G2W0z/WRsSJ/nz6juIV3ehCkhItFrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNnN
hWB2i1EEGXsv++W8HUXMYJ+xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRTEwNzVCQTM0NEIxMUVGOTA2NTUwODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPdAMA0GCSqGSIb3DQEBCwUA
A4IBAQCbEkUKVXc47wl1mtRNm35oT1auEqphQGsKaqpe6LpU+BGp2EsKG8O/6n+D
ts+6JJrg6QW4q6L/wtJgntWMuJgSGzCmMrsmE6JMW/POWDdEVNh4op0AsiFK59EV
KGmwzx9TR8a+nwHQK4rFfwWo7DwxNl8IiZR5rfrbmRxokieJkBJs/X5Jx6jnPlPg
/Flya0eGDUeiyrQu95u0U9BhmONXruFbLF8t5VTuntLMscG4gNh79BeVYJLccKY8
BWWh1jDnjbloX4GK5ZFdn+a2aiFV/32EdEb0UL6kN5yjrarBZSGMBXc37wCD3PCO
+O32mimgwDfnMXYVo5X7XeD8qfcx
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:45 2024 by rpki-client on console-ams.rpki-client.org