Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CFCC063B2311EE9888532B4AD9E6FC.roa
File: B4CFCC063B2311EE9888532B4AD9E6FC.roa (raw, json)
Hash identifier: xT5rDOwyxCpv3Qj0bmJkyddTva/x4wTTMYXGHWFYbKo=
Subject key identifier: E5:C9:D7:4E:66:DE:C5:5B:10:F3:61:B8:9C:E6:CF:35:E1:23:5B:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 356F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CFCC063B2311EE9888532B4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:25:04 +0000
ROA not before: Tue 15 Aug 2023 04:25:01 +0000
ROA not after: Mon 27 May 2024 04:25:01 +0000
asID: 140627
IP address blocks: 156.247.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13679 (0x356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:25:01 2023 GMT
Not After : May 27 04:25:01 2024 GMT
Subject: CN=64dafe20-6c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:45:6a:e1:38:6c:fd:fb:ef:5d:b5:c4:f2:38:
cb:8c:1a:d8:38:d5:2b:c3:fe:8c:e4:54:8f:a8:36:
4d:34:8c:aa:e0:d8:bf:bb:d5:c6:76:7e:91:a6:0e:
a4:9f:74:a9:47:ca:13:59:2d:51:70:bf:6a:e5:61:
20:69:c8:96:f6:3b:9c:dc:0a:f9:ef:43:55:15:af:
bd:c9:70:90:9f:d5:b6:3c:aa:24:fc:56:2b:9e:43:
bb:01:bd:61:e9:c5:de:ab:4d:1c:d2:2a:39:a2:2a:
9f:85:b5:be:8c:6c:1b:4f:49:4a:07:82:72:89:fb:
21:ca:70:5f:4f:9b:d3:06:94:65:81:a5:53:69:df:
6d:f9:92:2d:88:11:b7:66:4d:4f:97:f8:62:f1:ab:
15:97:26:d1:54:a5:3e:d5:d6:e1:24:c5:c0:72:a5:
3f:f2:27:10:46:86:e3:88:c1:22:51:e0:f0:84:c0:
9b:e3:4d:7e:7d:87:28:40:3f:99:3c:a3:65:69:cb:
c2:b0:4f:c9:6a:c9:42:d2:50:dd:f4:73:88:5e:32:
54:db:9e:01:7f:10:a4:79:63:ed:fa:ce:8b:54:3c:
18:a1:7e:6b:3b:b0:83:dd:25:ae:8c:c7:81:19:4d:
fe:7c:38:2a:25:1f:56:08:97:5a:9d:53:6b:be:78:
82:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:D7:4E:66:DE:C5:5B:10:F3:61:B8:9C:E6:CF:35:E1:23:5B:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CFCC063B2311EE9888532B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.214.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7b:bd:cb:09:ae:fb:c2:c6:c9:16:e5:e0:04:70:bd:4e:1f:
37:0f:eb:55:fd:73:9c:30:0a:2f:67:36:ce:2c:2b:e2:df:f7:
0b:c4:9f:ed:d6:7d:32:3d:e7:96:a5:48:c0:ee:2f:6a:87:7b:
16:6f:e4:a4:bb:86:ea:5a:9c:fb:88:95:6a:39:85:d5:81:06:
6b:53:73:79:5f:e0:ec:4a:d6:86:b2:32:c6:ed:9e:06:a4:b9:
22:f4:2b:ba:48:5b:be:8b:1e:3f:69:6a:19:f1:5e:4e:46:bb:
75:c8:90:73:b3:a5:77:ed:89:9a:c8:1f:82:3d:f5:7c:f8:0c:
a8:89:ed:9f:e5:a5:65:90:65:11:ce:33:84:49:aa:7c:d0:30:
18:30:9d:f6:0c:24:c7:41:d2:e0:ea:34:13:85:80:fa:18:69:
7e:a9:91:68:be:86:cd:8e:9b:8b:08:89:b9:e4:11:d5:d3:71:
ef:7e:c0:8f:b0:bc:9a:30:a7:48:a6:56:38:43:46:df:cf:c7:
bd:73:58:69:e3:29:ef:36:56:58:a1:90:78:86:5f:05:2a:d9:
46:4e:c0:fb:0e:b1:91:d5:d0:fc:c6:85:17:d8:bc:e3:2c:40:
bb:04:7d:e3:01:bf:50:10:24:1e:bd:1d:05:61:be:81:c6:de:
58:78:75:4c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNW8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTUwNDI1MDFaFw0yNDA1MjcwNDI1MDFaMBgxFjAU
BgNVBAMTDTY0ZGFmZTIwLTZjOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhRWrhOGz9++9dtcTyOMuMGtg41SvD/ozkVI+oNk00jKrg2L+71cZ2fpGm
DqSfdKlHyhNZLVFwv2rlYSBpyJb2O5zcCvnvQ1UVr73JcJCf1bY8qiT8ViueQ7sB
vWHpxd6rTRzSKjmiKp+Ftb6MbBtPSUoHgnKJ+yHKcF9Pm9MGlGWBpVNp3235ki2I
EbdmTU+X+GLxqxWXJtFUpT7V1uEkxcBypT/yJxBGhuOIwSJR4PCEwJvjTX59hyhA
P5k8o2Vpy8KwT8lqyULSUN30c4heMlTbngF/EKR5Y+36zotUPBihfms7sIPdJa6M
x4EZTf58OColH1YIl1qdU2u+eILpAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5cnX
TmbexVsQ82G4nObPNeEjW5QwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0I0Q0ZDQzA2M0IyMzExRUU5ODg4NTMyQjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc99YwDQYJKoZIhvcNAQELBQAD
ggEBAId7vcsJrvvCxskW5eAEcL1OHzcP61X9c5wwCi9nNs4sK+Lf9wvEn+3WfTI9
55alSMDuL2qHexZv5KS7hupanPuIlWo5hdWBBmtTc3lf4OxK1oayMsbtngakuSL0
K7pIW76LHj9pahnxXk5Gu3XIkHOzpXftiZrIH4I99Xz4DKiJ7Z/lpWWQZRHOM4RJ
qnzQMBgwnfYMJMdB0uDqNBOFgPoYaX6pkWi+hs2Om4sIibnkEdXTce9+wI+wvJow
p0imVjhDRt/Px71zWGnjKe82VlihkHiGXwUq2UZOwPsOsZHV0PzGhRfYvOMsQLsE
feMBv1AQJB69HQVhvoHG3lh4dUw=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:15 2024 by rpki-client on console-fra.rpki-client.org