Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B425DF9295D711EFA24F4A73762E951A.roa
File: B425DF9295D711EFA24F4A73762E951A.roa (raw, json)
Hash identifier: R/GLyJzAVCfPDynR6GEwh6mr1Z28DaAfi/9S5sr8n3E=
Subject key identifier: F2:1E:C8:E1:3F:42:E6:EF:7A:75:AA:EE:F2:88:3D:E6:D6:DF:4D:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C986
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B425DF9295D711EFA24F4A73762E951A.roa
Signing time: Tue 29 Oct 2024 09:25:14 +0000
ROA not before: Tue 29 Oct 2024 09:25:11 +0000
ROA not after: Wed 27 Nov 2024 09:25:11 +0000
asID: 61112
IP address blocks: 156.229.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51590 (0xc986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 09:25:11 2024 GMT
Not After : Nov 27 09:25:11 2024 GMT
Subject: CN=6720a9fa-e3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:23:4a:d7:20:5b:08:17:24:9a:fa:ce:f7:
93:b0:b6:5d:2d:5b:42:1e:43:d8:44:6d:66:30:7b:
68:8b:aa:42:c5:7a:21:3a:cf:8a:99:f9:7d:96:7d:
62:18:5f:3d:29:3c:49:eb:91:8d:3f:ac:de:1c:49:
05:4a:c7:a4:51:79:58:da:7f:bc:90:0e:e7:47:11:
8f:4f:aa:76:c1:d3:97:94:d7:c5:81:53:c9:5e:80:
8d:ec:8e:09:fd:8f:8c:d5:11:da:b7:24:80:14:7c:
f2:a9:f6:ce:0d:9b:e6:46:bb:c5:32:7a:4f:45:9d:
3e:2c:68:f2:3b:25:eb:03:41:ff:6f:e1:d3:17:78:
f2:ed:eb:b8:78:63:b6:c4:e2:d6:58:f5:56:2f:b8:
60:f1:53:57:ea:d3:56:7b:7b:2b:cc:5f:36:50:3e:
23:e7:f6:2f:70:31:4d:1b:f7:b2:9e:aa:97:91:35:
2d:1c:5d:06:0a:e5:bb:f0:98:5c:41:af:8c:63:f1:
d8:e3:5d:d1:02:94:fe:60:09:ad:16:5a:13:9b:c6:
9c:dd:d3:fd:74:a4:6d:23:3b:d7:64:d6:4e:8f:e9:
4b:93:98:fe:f2:a0:94:43:e2:8f:c1:09:15:d6:1a:
27:6b:a5:50:9b:c8:7b:4a:ac:9f:58:e3:f0:57:1a:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:C8:E1:3F:42:E6:EF:7A:75:AA:EE:F2:88:3D:E6:D6:DF:4D:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B425DF9295D711EFA24F4A73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:31:e2:9a:34:a3:26:16:86:d5:dd:a6:bd:d4:8c:31:45:a7:
33:b4:35:8a:a9:60:87:4a:bb:bb:ff:87:8d:1a:db:29:03:d1:
21:1a:71:bf:e8:46:52:29:b6:a3:7e:87:7f:ca:33:2d:82:24:
0c:ac:2f:c4:66:56:6b:9d:ab:39:03:21:43:24:34:3a:7d:ce:
9f:52:f5:91:66:b4:7a:a2:e8:8a:47:11:ce:11:1f:84:be:2d:
ba:58:be:20:ad:88:d0:85:0d:f5:38:07:0f:b9:35:55:f7:60:
34:ad:7f:8a:8d:b2:b8:23:19:bb:dd:21:4b:46:a3:69:74:d9:
b1:c8:37:71:7d:a9:73:9c:45:6c:6c:44:52:0e:b1:de:2e:cf:
10:1a:07:a2:d3:c2:3f:8d:81:07:81:80:bf:9d:79:93:28:23:
0b:99:46:4a:7c:7d:0c:d4:91:20:3f:f4:40:63:54:e7:5d:31:
6a:3b:9a:0a:30:52:d5:4a:98:71:c7:c1:73:a1:c9:21:af:ac:
d5:52:8a:b9:3c:ba:b1:20:2e:19:79:3e:0f:dc:45:0d:a2:e9:
c6:ff:eb:6a:6d:60:2b:71:85:b0:b1:e6:e3:68:9f:91:73:11:
7b:93:94:78:e5:b8:83:0d:91:3e:5d:29:53:4b:dd:78:48:df:
11:8a:c9:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMmGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI5MDkyNTExWhcNMjQxMTI3MDkyNTExWjAYMRYw
FAYDVQQDEw02NzIwYTlmYS1lM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyUgjStcgWwgXJJr6zveTsLZdLVtCHkPYRG1mMHtoi6pCxXohOs+Kmfl9
ln1iGF89KTxJ65GNP6zeHEkFSsekUXlY2n+8kA7nRxGPT6p2wdOXlNfFgVPJXoCN
7I4J/Y+M1RHatySAFHzyqfbODZvmRrvFMnpPRZ0+LGjyOyXrA0H/b+HTF3jy7eu4
eGO2xOLWWPVWL7hg8VNX6tNWe3srzF82UD4j5/YvcDFNG/eynqqXkTUtHF0GCuW7
8JhcQa+MY/HY413RApT+YAmtFloTm8ac3dP9dKRtIzvXZNZOj+lLk5j+8qCUQ+KP
wQkV1hona6VQm8h7SqyfWOPwVxraiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPIe
yOE/QubvenWq7vKIPebW303xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNDI1REY5Mjk1RDcxMUVGQTI0RjRBNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOWgMA0GCSqGSIb3DQEBCwUA
A4IBAQC7MeKaNKMmFobV3aa91IwxRacztDWKqWCHSru7/4eNGtspA9EhGnG/6EZS
Kbajfod/yjMtgiQMrC/EZlZrnas5AyFDJDQ6fc6fUvWRZrR6ouiKRxHOER+Evi26
WL4grYjQhQ31OAcPuTVV92A0rX+KjbK4Ixm73SFLRqNpdNmxyDdxfalznEVsbERS
DrHeLs8QGgei08I/jYEHgYC/nXmTKCMLmUZKfH0M1JEgP/RAY1TnXTFqO5oKMFLV
Sphxx8Fzockhr6zVUoq5PLqxIC4ZeT4P3EUNounG/+tqbWArcYWwsebjaJ+RcxF7
k5R45biDDZE+XSlTS914SN8Risk0
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org