Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B57CA296ECA811EE8926526C775412E6.roa
File: B57CA296ECA811EE8926526C775412E6.roa (raw, json)
Hash identifier: Jpgxsn+i++0KtWC+x4INp0Dr/1O3Cj7WDCOnV5ohhnE=
Subject key identifier: 5C:4F:E8:E7:22:8A:AD:87:B8:AC:C7:86:93:78:0F:34:9C:42:01:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 80D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B57CA296ECA811EE8926526C775412E6.roa
Signing time: Thu 28 Mar 2024 02:13:04 +0000
ROA not before: Thu 28 Mar 2024 02:13:01 +0000
ROA not after: Tue 25 Feb 2025 02:13:01 +0000
asID: 140227
IP address blocks: 156.240.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32981 (0x80d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 02:13:01 2024 GMT
Not After : Feb 25 02:13:01 2025 GMT
Subject: CN=6604d230-8a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:f9:0e:78:35:48:9b:32:84:71:7f:96:fc:
79:55:7d:e3:7f:92:99:d2:28:9e:45:47:54:b8:e0:
bc:58:b5:9d:9f:e6:77:52:22:48:27:bb:98:c7:3f:
ca:db:1d:e4:7c:10:27:c9:1c:a0:66:e2:ba:96:51:
3b:c2:01:11:be:7f:28:3e:0b:8f:d3:a7:e5:50:17:
35:2b:26:a6:26:ec:c3:f5:47:af:a4:c0:b6:7e:6b:
d1:84:1d:45:c0:91:00:03:43:b6:b2:5f:d3:d6:3b:
64:a6:70:f5:b7:fb:80:4b:5e:5d:aa:b2:c6:04:c2:
cd:4d:46:5c:59:76:a4:20:eb:74:cb:52:a8:e1:63:
3f:82:1d:cd:f6:fe:e8:e3:8d:8a:6d:bf:99:5f:76:
73:be:38:86:e6:37:e3:bb:2b:19:e5:8d:dd:39:63:
36:f2:d3:e3:80:bf:d4:56:57:e7:43:d0:00:dd:31:
a2:af:87:4c:fe:57:7e:b9:8c:0d:6c:28:55:ac:12:
a5:6c:3f:af:c8:c4:5a:a5:d9:32:d3:ee:2a:4d:49:
bd:3f:f5:b0:e4:35:93:dc:21:64:0f:28:43:0a:fe:
4a:51:8a:45:df:4d:52:6b:79:71:0e:70:b5:d5:16:
22:56:a9:f1:f1:e0:3b:76:51:2d:5a:d1:45:2d:f7:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:E8:E7:22:8A:AD:87:B8:AC:C7:86:93:78:0F:34:9C:42:01:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B57CA296ECA811EE8926526C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:ad:82:71:93:c8:d9:5d:a5:a2:5d:1c:f7:47:25:5d:d4:
56:44:32:09:17:6f:32:54:70:39:40:4d:ea:9b:c9:2f:33:f9:
f0:72:ae:bc:77:4a:d4:56:b1:92:41:86:8c:17:fa:d4:68:fe:
6a:48:b3:93:be:98:fd:40:59:1e:b0:a2:b6:9a:dd:d2:6b:fe:
a4:41:3f:3e:97:52:30:b3:00:8c:32:c5:d2:9a:47:44:ac:a2:
5c:d7:b2:bf:e1:d8:82:68:9e:e0:a7:74:53:eb:d7:7e:a4:31:
d0:8a:4c:10:e1:f6:1f:8a:ba:67:f0:62:68:23:00:95:56:8a:
17:9b:f8:b6:78:cc:af:65:ef:0e:02:d7:96:3f:05:ce:9a:98:
83:c0:4c:9c:68:b8:a7:6f:2f:5b:66:e5:cb:57:8b:f1:6d:90:
a6:5d:1a:d1:e3:07:ec:7f:f8:3c:e6:f4:d0:9d:52:91:39:c1:
89:31:e9:22:ef:5b:3f:49:be:a1:1c:de:e8:58:3e:cd:70:4d:
0d:b2:d8:45:eb:1f:53:4c:12:fe:c9:a4:a3:31:69:97:d0:74:
e1:e8:61:37:0f:87:df:3e:0e:c5:db:f7:ee:00:c5:4b:de:0d:
e9:34:cb:15:ae:bb:5d:d4:e1:bb:f5:d4:ff:b3:bb:07:98:f9:
47:3e:e4:63
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIDVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwMzI4MDIxMzAxWhcNMjUwMjI1MDIxMzAxWjAYMRYw
FAYDVQQDEw02NjA0ZDIzMC04YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Yv5Dng1SJsyhHF/lvx5VX3jf5KZ0iieRUdUuOC8WLWdn+Z3UiJIJ7uY
xz/K2x3kfBAnyRygZuK6llE7wgERvn8oPguP06flUBc1KyamJuzD9UevpMC2fmvR
hB1FwJEAA0O2sl/T1jtkpnD1t/uAS15dqrLGBMLNTUZcWXakIOt0y1Ko4WM/gh3N
9v7o442Kbb+ZX3ZzvjiG5jfjuysZ5Y3dOWM28tPjgL/UVlfnQ9AA3TGir4dM/ld+
uYwNbChVrBKlbD+vyMRapdky0+4qTUm9P/Ww5DWT3CFkDyhDCv5KUYpF301Sa3lx
DnC11RYiVqnx8eA7dlEtWtFFLffuQQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFxP
6Ociiq2HuKzHhpN4DzScQgFLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNTdDQTI5NkVDQTgxMUVFODkyNjUyNkM3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPBpMA0GCSqGSIb3DQEBCwUA
A4IBAQCK7K2CcZPI2V2lol0c90clXdRWRDIJF28yVHA5QE3qm8kvM/nwcq68d0rU
VrGSQYaMF/rUaP5qSLOTvpj9QFkesKK2mt3Sa/6kQT8+l1IwswCMMsXSmkdErKJc
17K/4diCaJ7gp3RT69d+pDHQikwQ4fYfirpn8GJoIwCVVooXm/i2eMyvZe8OAteW
PwXOmpiDwEycaLinby9bZuXLV4vxbZCmXRrR4wfsf/g85vTQnVKROcGJMeki71s/
Sb6hHN7oWD7NcE0NsthF6x9TTBL+yaSjMWmX0HTh6GE3D4ffPg7F2/fuAMVL3g3p
NMsVrrtd1OG79dT/s7sHmPlHPuRj
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org