Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B789548E2411EFA98AC26B762E951A.roa
File: B2B789548E2411EFA98AC26B762E951A.roa (raw, json)
Hash identifier: You5oa7pmUpTUqCQ7S8fDPI1F5Kn2up24R7gOPukJt8=
Subject key identifier: FB:E4:EB:DD:DF:8A:28:E4:79:8E:05:07:AF:AF:12:60:02:B6:06:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C6FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B789548E2411EFA98AC26B762E951A.roa
Signing time: Sat 19 Oct 2024 14:16:14 +0000
ROA not before: Sat 19 Oct 2024 14:16:10 +0000
ROA not after: Fri 22 Nov 2024 14:16:10 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50939 (0xc6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 19 14:16:10 2024 GMT
Not After : Nov 22 14:16:10 2024 GMT
Subject: CN=6713bf2e-60fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c4:2f:14:27:4e:95:45:03:d5:54:a8:60:4c:
37:2d:ec:c4:70:53:1f:a2:93:4c:39:3a:83:b0:d5:
fe:bb:75:11:bc:7a:6c:6a:e5:30:46:e9:5b:4b:62:
86:39:9d:c8:49:08:38:4d:0e:5b:1f:11:05:30:07:
ef:64:9e:58:21:67:3b:c0:75:5b:b9:ae:46:5c:10:
61:34:89:fd:3a:ff:90:fe:a0:f8:0b:ee:a3:ce:b0:
f4:0f:f1:e4:17:0a:c2:48:2e:37:56:ab:27:5c:57:
59:b2:e5:dc:b0:32:30:e3:50:10:37:97:04:91:fb:
fc:8a:38:c1:1a:4d:39:42:96:e4:ab:d9:64:55:08:
c9:47:1f:aa:23:c5:6c:38:83:ca:cc:da:7d:0c:e6:
76:2a:c0:be:6f:4b:72:d8:8f:c4:b7:b8:79:3c:ac:
91:c5:b0:07:46:f9:c8:39:09:f6:1c:14:dd:87:f7:
54:92:36:c2:86:12:e7:b3:4b:14:ca:9b:66:b9:86:
6b:f6:76:b9:4a:ef:9b:51:94:1a:8a:40:aa:1f:21:
0d:6d:26:6a:5e:de:d8:7a:fb:41:96:99:57:34:95:
de:38:77:75:b9:16:5a:57:51:4e:bf:a4:50:b6:e0:
fd:fb:be:6e:dc:5e:0f:76:6b:2c:1a:76:d3:85:29:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:EB:DD:DF:8A:28:E4:79:8E:05:07:AF:AF:12:60:02:B6:06:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B789548E2411EFA98AC26B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5f:a2:46:b8:89:a9:84:f5:5b:07:91:07:43:9b:0c:8d:a3:
05:ff:2e:92:d7:fc:ae:21:c6:23:16:63:c8:bc:f6:b5:03:79:
aa:ad:2c:84:c6:35:d3:46:bc:d4:09:db:fb:b9:d3:da:f0:b3:
80:e3:72:3c:dd:66:ea:1f:d7:df:91:c6:09:6c:dc:2e:b1:8a:
26:46:06:a0:b7:85:8e:0f:63:62:3a:a1:c9:2b:a3:ff:19:49:
3c:a8:de:df:70:83:59:c9:94:d4:49:3b:5b:1a:44:c4:6c:63:
21:ec:0c:b8:ce:66:13:4c:b7:74:72:9f:c2:0f:45:75:ca:f1:
68:63:39:ef:6f:e0:7b:0e:85:ba:60:7d:0d:b2:f9:2a:fc:c8:
a6:2b:66:db:b8:33:de:ad:86:ff:68:eb:6b:71:c5:22:a7:e3:
f8:3f:79:65:b4:c3:83:76:9c:4c:7a:a0:54:8b:f3:30:18:d9:
c3:57:50:7f:3b:d5:df:b9:da:71:7c:e0:97:02:19:64:61:70:
e1:91:61:49:1f:dd:5b:31:99:06:1a:8c:4a:d4:36:8f:e1:3c:
c6:bb:37:a7:b2:4d:87:a5:96:1b:44:58:8c:e1:93:f6:30:4e:
e1:d5:dc:56:54:e9:e3:75:a5:65:53:c7:7a:f3:af:98:cf:1f:
45:02:fb:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMb7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDE5MTQxNjEwWhcNMjQxMTIyMTQxNjEwWjAYMRYw
FAYDVQQDEw02NzEzYmYyZS02MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7MQvFCdOlUUD1VSoYEw3LezEcFMfopNMOTqDsNX+u3URvHpsauUwRulb
S2KGOZ3ISQg4TQ5bHxEFMAfvZJ5YIWc7wHVbua5GXBBhNIn9Ov+Q/qD4C+6jzrD0
D/HkFwrCSC43VqsnXFdZsuXcsDIw41AQN5cEkfv8ijjBGk05Qpbkq9lkVQjJRx+q
I8VsOIPKzNp9DOZ2KsC+b0ty2I/Et7h5PKyRxbAHRvnIOQn2HBTdh/dUkjbChhLn
s0sUyptmuYZr9na5Su+bUZQaikCqHyENbSZqXt7YevtBlplXNJXeOHd1uRZaV1FO
v6RQtuD9+75u3F4PdmssGnbThSm7zQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPvk
693fiijkeY4FB6+vEmACtgYtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMkI3ODk1NDhFMjQxMUVGQTk4QUMyNkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwAMA0GCSqGSIb3DQEBCwUA
A4IBAQAeX6JGuImphPVbB5EHQ5sMjaMF/y6S1/yuIcYjFmPIvPa1A3mqrSyExjXT
RrzUCdv7udPa8LOA43I83WbqH9ffkcYJbNwusYomRgagt4WOD2NiOqHJK6P/GUk8
qN7fcINZyZTUSTtbGkTEbGMh7Ay4zmYTTLd0cp/CD0V1yvFoYznvb+B7DoW6YH0N
svkq/MimK2bbuDPerYb/aOtrccUip+P4P3lltMODdpxMeqBUi/MwGNnDV1B/O9Xf
udpxfOCXAhlkYXDhkWFJH91bMZkGGoxK1DaP4TzGuzensk2HpZYbRFiM4ZP2ME7h
1dxWVOnjdaVlU8d686+Yzx9FAvvr
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org