Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B252E7361C1B11EFA8ACDB017DDC24C2.roa
File: B252E7361C1B11EFA8ACDB017DDC24C2.roa (raw, json)
Hash identifier: /PnUanzzdzqVT/PX83EF0QWm+TwxUIYO0n1oWKIWRIA=
Subject key identifier: 57:FA:D7:13:06:47:6C:11:20:CE:5B:44:C5:76:56:66:2E:63:C4:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B252E7361C1B11EFA8ACDB017DDC24C2.roa
Signing time: Mon 27 May 2024 11:24:35 +0000
ROA not before: Mon 27 May 2024 11:24:32 +0000
ROA not after: Sat 11 Jan 2025 11:24:32 +0000
asID: 399077
IP address blocks: 156.248.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35885 (0x8c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 11:24:32 2024 GMT
Not After : Jan 11 11:24:32 2025 GMT
Subject: CN=66546d73-1c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:a9:16:45:76:2b:d8:4a:30:de:48:96:7f:
22:d5:2f:3b:b9:3d:8b:69:38:31:82:4d:01:b9:66:
12:20:1b:8f:a9:ec:e4:63:6a:cd:5c:67:f5:cc:1b:
8f:63:7a:fa:1e:37:e0:47:99:86:46:b9:25:b6:ea:
56:25:68:31:06:3d:7c:d3:5e:b7:4f:77:90:37:80:
8c:34:77:cd:24:9f:ac:29:96:f9:99:00:f6:b4:21:
73:e5:c0:ea:c1:a5:8d:13:c6:5d:51:7a:a6:61:71:
4f:48:a6:d7:07:60:a6:57:94:8c:56:ef:b2:7a:36:
c9:b9:6c:2d:38:1c:f5:5d:53:0a:25:c0:0b:da:8a:
86:ca:ed:06:6d:fe:e7:36:f7:99:18:66:bc:4b:ba:
8b:47:e2:26:7d:02:db:90:5d:0a:dc:12:46:80:0c:
f0:22:3d:82:0d:9f:a6:9f:24:a2:0c:01:fc:cd:0f:
af:56:65:a8:cc:2d:b0:a1:3f:00:1d:7f:26:07:2b:
07:78:eb:2c:64:8a:e7:12:c6:10:c3:39:6f:25:29:
1b:17:88:33:fb:2e:37:a0:26:a4:5d:fd:fe:7f:a2:
7e:e3:2f:a1:d8:06:1b:8e:94:0b:b2:55:8e:80:dd:
91:9e:d5:d6:ba:cc:5d:f0:02:6a:0a:7f:a1:85:ed:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:D7:13:06:47:6C:11:20:CE:5B:44:C5:76:56:66:2E:63:C4:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B252E7361C1B11EFA8ACDB017DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.78.0/24
Signature Algorithm: sha256WithRSAEncryption
94:96:0a:28:85:70:a7:9f:bd:b0:af:ad:68:90:68:ef:0d:b1:
3d:d0:8a:87:14:1f:3c:7a:6a:60:17:ed:86:3b:6d:d2:ba:37:
2b:b0:7e:d3:37:f8:f3:4f:30:de:dd:98:99:82:83:73:04:f1:
15:7b:02:9a:bd:97:8c:3a:02:af:9e:78:f3:22:0a:a8:f2:5b:
47:3c:bc:31:3e:ac:ce:70:22:c4:f9:d7:6f:d8:ea:1f:91:fe:
c8:24:a3:e5:6a:67:50:62:63:30:ee:02:61:ad:ad:6f:fc:8b:
a6:58:a9:fe:c2:3c:ba:b9:71:1e:20:56:67:31:69:04:fb:a9:
3a:a0:c3:78:07:b4:4f:0c:2d:99:45:3f:32:f8:88:0a:fa:95:
47:84:54:e2:07:76:5f:45:01:3c:90:8e:22:ae:48:6d:1e:7b:
c6:be:2d:d5:2d:d0:9d:97:1a:f8:66:55:ba:23:a9:ef:c7:4e:
b8:67:32:fb:fa:7d:d0:56:f8:ad:2a:19:ab:9b:39:fe:47:d3:
84:cf:e3:0f:53:ec:f8:0c:0f:18:30:04:2e:73:0e:fe:0b:6e:
6e:40:ea:82:ca:a7:53:61:b9:93:fa:14:af:7d:9d:f0:14:e7:
53:79:d2:ee:23:c4:72:3a:32:02:a6:cc:39:b8:ca:1c:c1:7f:
a6:2b:05:fa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIwtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNTI3MTEyNDMyWhcNMjUwMTExMTEyNDMyWjAYMRYw
FAYDVQQDEw02NjU0NmQ3My0xYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq7ipFkV2K9hKMN5Iln8i1S87uT2LaTgxgk0BuWYSIBuPqezkY2rNXGf1
zBuPY3r6HjfgR5mGRrkltupWJWgxBj180163T3eQN4CMNHfNJJ+sKZb5mQD2tCFz
5cDqwaWNE8ZdUXqmYXFPSKbXB2CmV5SMVu+yejbJuWwtOBz1XVMKJcAL2oqGyu0G
bf7nNveZGGa8S7qLR+ImfQLbkF0K3BJGgAzwIj2CDZ+mnySiDAH8zQ+vVmWozC2w
oT8AHX8mBysHeOssZIrnEsYQwzlvJSkbF4gz+y43oCakXf3+f6J+4y+h2AYbjpQL
slWOgN2RntXWusxd8AJqCn+hhe1GwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFf6
1xMGR2wRIM5bRMV2VmYuY8RgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjUyRTczNjFDMUIxMUVGQThBQ0RCMDE3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhOMA0GCSqGSIb3DQEBCwUA
A4IBAQCUlgoohXCnn72wr61okGjvDbE90IqHFB88empgF+2GO23SujcrsH7TN/jz
TzDe3ZiZgoNzBPEVewKavZeMOgKvnnjzIgqo8ltHPLwxPqzOcCLE+ddv2Oofkf7I
JKPlamdQYmMw7gJhra1v/IumWKn+wjy6uXEeIFZnMWkE+6k6oMN4B7RPDC2ZRT8y
+IgK+pVHhFTiB3ZfRQE8kI4irkhtHnvGvi3VLdCdlxr4ZlW6I6nvx064ZzL7+n3Q
VvitKhmrmzn+R9OEz+MPU+z4DA8YMAQucw7+C25uQOqCyqdTYbmT+hSvfZ3wFOdT
edLuI8RyOjICpsw5uMocwX+mKwX6
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:09 2024 by rpki-client on console-ams.rpki-client.org