Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B09D5D2AA0E311EFBA2A7F8E762E951A.roa
File: B09D5D2AA0E311EFBA2A7F8E762E951A.roa (raw, json)
Hash identifier: Ik4UQ5P+In7mQQfXZPpOVFohbhzHSxBidCtOJIaSAbA=
Subject key identifier: 77:32:13:9A:07:67:6B:1A:7F:CD:5B:30:F8:58:08:77:75:84:89:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B09D5D2AA0E311EFBA2A7F8E762E951A.roa
Signing time: Tue 12 Nov 2024 10:48:45 +0000
ROA not before: Tue 12 Nov 2024 10:48:42 +0000
ROA not after: Fri 22 Nov 2024 10:48:42 +0000
asID: 39600
IP address blocks: 156.255.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53671 (0xd1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:48:42 2024 GMT
Not After : Nov 22 10:48:42 2024 GMT
Subject: CN=6733328d-4281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:6a:ee:78:f2:6e:8a:33:92:68:e0:df:91:
61:f5:93:44:ba:ff:c9:00:3a:06:3a:28:55:30:9e:
e2:97:ef:67:eb:cf:30:99:24:b6:a5:94:64:5d:1e:
80:a8:a7:04:7c:85:7a:03:58:a6:fe:10:87:e2:3b:
61:f3:41:a4:a0:25:1f:13:1f:a3:3a:b7:ff:ff:0c:
bf:01:e2:a1:88:6d:71:30:db:5d:37:ba:5a:4b:63:
49:cf:1a:67:11:8b:53:02:b2:7e:cd:fe:1a:47:b4:
e9:c8:9f:6d:18:9a:1e:88:ef:2d:69:11:8e:fc:5c:
07:53:e2:32:b5:e3:aa:f5:04:07:38:a1:d8:d5:a3:
11:7d:87:72:ce:8b:9f:0b:a3:1b:e9:f7:48:35:3a:
0e:25:18:f6:9b:9e:e4:6a:9e:1d:e9:8c:2c:23:66:
2f:07:5c:e6:af:24:ba:9d:32:3b:27:44:ba:19:e3:
ca:bb:10:91:ff:ea:b4:70:82:07:fa:21:22:bc:6f:
0c:83:d2:df:68:2f:76:a6:49:74:9f:8f:77:6b:ef:
db:1e:e1:ae:39:bb:91:97:ad:c0:a3:da:e6:d8:5f:
11:b2:52:4e:9e:f8:55:65:a3:1b:18:7f:28:d5:aa:
74:f2:96:55:c2:d7:77:03:cc:54:67:67:a4:0c:86:
7d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:13:9A:07:67:6B:1A:7F:CD:5B:30:F8:58:08:77:75:84:89:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B09D5D2AA0E311EFBA2A7F8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.86.0/24
Signature Algorithm: sha256WithRSAEncryption
77:39:3e:0b:48:56:c4:3d:e6:2d:31:a3:7d:1c:24:b1:e2:88:
3f:ad:3f:12:ee:5d:ba:dd:2b:13:3b:6c:11:cf:4b:0a:59:7c:
b7:83:e8:81:9f:26:33:5c:c2:03:00:7a:87:fc:f6:a8:0a:36:
37:90:25:77:7e:21:85:17:39:ff:1e:54:3f:e0:e2:18:e2:d3:
cf:11:80:97:d6:b9:42:d1:1e:09:35:97:0e:82:ed:ce:68:13:
e2:c5:03:fb:de:70:9a:ba:b6:99:7e:7a:33:56:96:e0:e9:f1:
56:a2:85:fd:38:dc:95:c9:45:5c:c9:55:2e:47:6d:57:23:4f:
b4:38:16:7d:98:e7:1b:b0:8a:8e:08:b2:77:e3:a9:8f:33:ff:
9a:68:41:e7:f8:91:7b:65:73:ca:16:d5:00:f3:94:6f:50:84:
84:99:3b:53:94:08:2f:b5:da:b6:99:9b:b0:2f:83:db:94:f9:
a3:05:d9:2b:36:ab:a5:d0:02:13:81:02:5a:05:39:e0:ab:a7:
d4:ef:60:e3:1b:94:6b:0c:5a:af:aa:04:99:de:ef:78:a1:5c:
c4:d4:ec:4b:ab:e4:9d:11:c4:68:40:a5:af:d3:5f:6d:58:c2:
7f:91:45:b7:83:3c:4c:e8:47:b5:92:94:0a:c5:e8:1f:d8:62:
60:53:99:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANGnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEyMTA0ODQyWhcNMjQxMTIyMTA0ODQyWjAYMRYw
FAYDVQQDEw02NzMzMzI4ZC00MjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtCNq7njyboozkmjg35Fh9ZNEuv/JADoGOihVMJ7il+9n688wmSS2pZRk
XR6AqKcEfIV6A1im/hCH4jth80GkoCUfEx+jOrf//wy/AeKhiG1xMNtdN7paS2NJ
zxpnEYtTArJ+zf4aR7TpyJ9tGJoeiO8taRGO/FwHU+IyteOq9QQHOKHY1aMRfYdy
zoufC6Mb6fdINToOJRj2m57kap4d6YwsI2YvB1zmryS6nTI7J0S6GePKuxCR/+q0
cIIH+iEivG8Mg9LfaC92pkl0n493a+/bHuGuObuRl63Ao9rm2F8RslJOnvhVZaMb
GH8o1ap08pZVwtd3A8xUZ2ekDIZ9dQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHcy
E5oHZ2saf81bMPhYCHd1hInaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMDlENUQyQUEwRTMxMUVGQkEyQTdGOEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP9WMA0GCSqGSIb3DQEBCwUA
A4IBAQB3OT4LSFbEPeYtMaN9HCSx4og/rT8S7l263SsTO2wRz0sKWXy3g+iBnyYz
XMIDAHqH/PaoCjY3kCV3fiGFFzn/HlQ/4OIY4tPPEYCX1rlC0R4JNZcOgu3OaBPi
xQP73nCauraZfnozVpbg6fFWooX9ONyVyUVcyVUuR21XI0+0OBZ9mOcbsIqOCLJ3
46mPM/+aaEHn+JF7ZXPKFtUA85RvUISEmTtTlAgvtdq2mZuwL4PblPmjBdkrNqul
0AITgQJaBTngq6fU72DjG5RrDFqvqgSZ3u94oVzE1OxLq+SdEcRoQKWv019tWMJ/
kUW3gzxM6Ee1kpQKxegf2GJgU5l8
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org