Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B20E6A34A72111EF9693637D762E951A.roa
File: B20E6A34A72111EF9693637D762E951A.roa (raw, json)
Hash identifier: o0vz0mhpGrZnYEnCAk200lApunnKdbDgjDO9ywhUZ9w=
Subject key identifier: F5:63:AE:08:29:FF:01:44:C6:68:13:AD:BD:C0:4F:FE:12:50:FA:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B20E6A34A72111EF9693637D762E951A.roa
Signing time: Wed 20 Nov 2024 09:27:43 +0000
ROA not before: Wed 20 Nov 2024 09:27:40 +0000
ROA not after: Mon 02 Dec 2024 09:27:40 +0000
asID: 39600
IP address blocks: 156.238.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54727 (0xd5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:27:40 2024 GMT
Not After : Dec 2 09:27:40 2024 GMT
Subject: CN=673dab8f-1d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:d0:cf:46:03:9d:c2:13:53:41:2c:af:97:
c2:73:cc:7e:80:f6:f6:13:ba:fc:f3:7c:f2:6e:8a:
70:13:f8:d6:f5:10:1f:60:f6:e8:39:e8:a7:7f:20:
bd:a8:9d:e5:47:a4:a3:68:23:24:74:b9:4a:b5:5f:
51:1e:d7:e4:37:34:3b:58:4e:13:73:06:9e:30:de:
db:ba:a8:2e:2c:66:33:ce:fe:de:6b:02:df:66:b1:
47:1e:3f:73:ac:33:7e:4d:a8:bd:e4:8a:10:fa:20:
c6:7d:d7:7c:ab:9a:58:2c:96:ab:20:26:19:43:1f:
94:76:67:d2:ef:3e:39:f6:ca:be:d5:6d:67:e6:87:
61:56:87:06:cd:98:e4:fe:0c:d7:be:88:7a:9b:b0:
5a:c5:c4:03:b8:dd:b1:99:80:fe:6e:a0:11:8c:7e:
fe:77:a6:26:e4:61:1c:d5:c0:40:80:4b:db:c1:fb:
6c:a6:4f:1e:c8:30:1e:e1:58:75:fb:a5:64:a2:73:
8b:3f:87:cd:12:94:82:05:09:15:c1:ba:d9:73:19:
ba:f0:0f:c0:da:64:b3:de:ff:f7:f0:a6:d6:5f:cc:
43:a3:82:9a:ae:cc:d9:dc:5c:1e:2d:b2:71:ee:62:
4d:ba:d5:bc:d4:be:a2:3f:f0:23:d0:a5:f5:92:1d:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:AE:08:29:FF:01:44:C6:68:13:AD:BD:C0:4F:FE:12:50:FA:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B20E6A34A72111EF9693637D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.136.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:d5:ca:1a:5b:35:09:2d:7f:cd:65:f6:3d:68:ff:ae:19:60:
5d:3f:83:9f:81:0a:be:e4:7f:d1:a9:9d:fa:68:5f:9b:5b:f9:
85:c5:48:8f:e1:87:27:ed:74:e6:3d:6f:57:47:b1:c5:17:36:
93:9b:c6:75:af:f8:19:7c:92:80:35:31:a6:c6:e3:39:70:b9:
2d:0c:db:0c:5b:a0:cd:43:12:6a:66:f4:13:c9:9d:8a:0c:89:
86:51:c9:df:e6:ef:01:db:38:4a:73:9a:e9:da:23:88:45:0d:
3b:5d:92:20:f9:c4:a4:d9:52:f6:be:f6:83:d4:57:68:1b:3b:
4e:78:f0:91:c7:af:d0:de:4b:7d:17:96:4b:93:da:12:d7:c3:
a8:ff:fe:7b:68:e3:9f:e4:28:be:49:e5:68:54:72:26:d3:b3:
d1:25:94:e7:7f:a9:35:cf:fb:35:71:35:62:8e:55:ec:9f:00:
94:04:ee:cb:2c:2f:14:b0:16:95:a0:50:af:3f:3f:eb:4a:28:
21:0d:4b:2c:88:00:7e:74:26:5d:d5:c0:b6:23:f0:10:b1:f0:
36:70:97:0c:4a:e2:8b:cc:24:f1:06:ed:dd:d2:c2:29:c1:c7:
85:73:e0:cd:ec:66:f7:00:fd:2e:dc:02:09:88:3f:10:22:3d:
1e:bf:96:6a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANXHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTIwMDkyNzQwWhcNMjQxMjAyMDkyNzQwWjAYMRYw
FAYDVQQDEw02NzNkYWI4Zi0xZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy4DQz0YDncITU0Esr5fCc8x+gPb2E7r883zybopwE/jW9RAfYPboOein
fyC9qJ3lR6SjaCMkdLlKtV9RHtfkNzQ7WE4TcwaeMN7buqguLGYzzv7eawLfZrFH
Hj9zrDN+Tai95IoQ+iDGfdd8q5pYLJarICYZQx+UdmfS7z459sq+1W1n5odhVocG
zZjk/gzXvoh6m7BaxcQDuN2xmYD+bqARjH7+d6Ym5GEc1cBAgEvbwftspk8eyDAe
4Vh1+6VkonOLP4fNEpSCBQkVwbrZcxm68A/A2mSz3v/38KbWX8xDo4KarszZ3Fwe
LbJx7mJNutW81L6iP/Aj0KX1kh0eywIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPVj
rggp/wFExmgTrb3AT/4SUPpoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjBFNkEzNEE3MjExMUVGOTY5MzYzN0Q3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO6IMA0GCSqGSIb3DQEBCwUA
A4IBAQBv1coaWzUJLX/NZfY9aP+uGWBdP4OfgQq+5H/RqZ36aF+bW/mFxUiP4Ycn
7XTmPW9XR7HFFzaTm8Z1r/gZfJKANTGmxuM5cLktDNsMW6DNQxJqZvQTyZ2KDImG
Ucnf5u8B2zhKc5rp2iOIRQ07XZIg+cSk2VL2vvaD1FdoGztOePCRx6/Q3kt9F5ZL
k9oS18Oo//57aOOf5Ci+SeVoVHIm07PRJZTnf6k1z/s1cTVijlXsnwCUBO7LLC8U
sBaVoFCvPz/rSighDUssiAB+dCZd1cC2I/AQsfA2cJcMSuKLzCTxBu3d0sIpwceF
c+DN7Gb3AP0u3AIJiD8QIj0ev5Zq
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org