Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6E7133A5F1411EFADC9AF83762E951A.roa
File: B6E7133A5F1411EFADC9AF83762E951A.roa (raw, json)
Hash identifier: QS8/2DTI8eEXII6m9MputwvW3QY+NLcJwwd9CYJuxfI=
Subject key identifier: 7E:F1:ED:37:9F:C3:C4:A4:36:1D:EB:0D:1C:D3:39:2B:8A:5F:EB:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6E7133A5F1411EFADC9AF83762E951A.roa
Signing time: Tue 20 Aug 2024 16:53:24 +0000
ROA not before: Tue 20 Aug 2024 16:53:21 +0000
ROA not after: Sun 01 Dec 2024 16:53:21 +0000
asID: 5065
IP address blocks: 156.229.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43602 (0xaa52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 16:53:21 2024 GMT
Not After : Dec 1 16:53:21 2024 GMT
Subject: CN=66c4ca04-0df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:83:0f:c5:1c:a0:a5:2b:71:9e:74:e3:63:
ed:9a:ef:6f:66:21:08:41:e0:83:b0:59:ba:df:cd:
66:77:fa:6d:2f:60:3a:b7:4a:94:f7:d9:d9:5b:b5:
8e:d5:3d:f2:63:1a:64:e2:c1:cb:0d:11:d8:69:cc:
14:f3:e8:77:4a:de:5b:5d:8d:d7:00:f5:ef:f7:f2:
3f:e8:e1:a7:8a:c9:ea:b6:e0:6d:6a:19:12:57:9b:
0c:45:fe:0a:c1:be:44:ee:4a:8c:4c:32:54:57:72:
d2:54:31:fd:63:51:29:39:dd:32:bc:48:7c:15:57:
ca:71:df:48:a1:20:2c:aa:de:50:fa:10:b2:d9:75:
a1:de:d1:6a:0b:83:bd:c9:bd:77:59:8f:2b:ac:d4:
92:df:47:7e:48:63:f6:5f:8c:6c:e2:ab:c0:62:e3:
83:84:a2:47:16:f4:66:56:e2:7f:e9:d1:2e:f8:94:
73:70:66:fe:a7:04:6a:e3:c0:c1:63:e9:9e:3a:73:
94:73:8e:3b:b0:22:17:72:99:9f:01:2a:67:b4:03:
f2:ce:5e:77:29:d5:f4:c7:1b:1d:95:5f:dc:0d:cf:
6b:b6:f0:8b:8e:ee:47:25:15:26:19:59:d7:ff:e6:
9a:36:2d:41:d7:6d:8b:da:e9:85:03:a0:19:a5:0a:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F1:ED:37:9F:C3:C4:A4:36:1D:EB:0D:1C:D3:39:2B:8A:5F:EB:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6E7133A5F1411EFADC9AF83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.58.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:51:1a:3a:91:1b:eb:33:6f:78:65:7c:76:45:b3:da:1a:91:
91:0f:a8:1e:33:c6:f9:9d:7f:7d:9f:2c:e6:9a:72:2a:ac:38:
0b:f6:1b:ae:ce:4c:44:71:d7:fb:6b:69:37:a7:4a:c6:35:92:
ae:c2:17:c3:a9:7a:c1:af:79:71:1f:6e:c7:2e:38:02:77:fe:
14:c5:91:d0:d5:6a:51:a5:27:1c:95:41:dc:cb:b9:c9:2e:8e:
82:fd:e3:c2:79:63:cd:dd:eb:97:d9:c4:d8:27:e7:1b:5e:7d:
dc:9d:b6:8b:2e:d6:ae:28:fa:7a:a0:41:22:79:5e:63:5d:c0:
0b:33:07:3e:25:46:44:c5:f4:3a:fa:4d:e4:0c:8b:0f:2c:99:
e1:49:42:18:eb:53:60:33:f6:a2:f7:b7:80:ef:3f:96:c3:d6:
43:a7:6a:9a:e7:26:a3:cd:d5:df:b4:2b:c2:76:b0:e0:9b:7d:
14:00:a6:aa:b4:17:6c:59:8d:fb:e5:20:1e:1f:91:fa:d7:4b:
39:0f:7d:3a:4f:fb:2c:38:fc:b1:0f:51:04:5c:9b:eb:ff:1f:
c8:d2:86:1c:07:30:db:36:38:00:07:54:ca:50:b4:b6:2d:45:
6f:d7:55:76:a7:c3:8a:b3:83:57:7b:26:56:db:da:69:cd:19:
f7:2f:dc:af
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKpSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTY1MzIxWhcNMjQxMjAxMTY1MzIxWjAYMRYw
FAYDVQQDEw02NmM0Y2EwNC0wZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl/aDD8UcoKUrcZ5042Ptmu9vZiEIQeCDsFm6381md/ptL2A6t0qU99nZ
W7WO1T3yYxpk4sHLDRHYacwU8+h3St5bXY3XAPXv9/I/6OGnisnqtuBtahkSV5sM
Rf4Kwb5E7kqMTDJUV3LSVDH9Y1EpOd0yvEh8FVfKcd9IoSAsqt5Q+hCy2XWh3tFq
C4O9yb13WY8rrNSS30d+SGP2X4xs4qvAYuODhKJHFvRmVuJ/6dEu+JRzcGb+pwRq
48DBY+meOnOUc447sCIXcpmfASpntAPyzl53KdX0xxsdlV/cDc9rtvCLju5HJRUm
GVnX/+aaNi1B122L2umFA6AZpQqEpQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH7x
7Tefw8SkNh3rDRzTOSuKX+tYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNkU3MTMzQTVGMTQxMUVGQURDOUFGODM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOU6MA0GCSqGSIb3DQEBCwUA
A4IBAQB9URo6kRvrM294ZXx2RbPaGpGRD6geM8b5nX99nyzmmnIqrDgL9huuzkxE
cdf7a2k3p0rGNZKuwhfDqXrBr3lxH27HLjgCd/4UxZHQ1WpRpScclUHcy7nJLo6C
/ePCeWPN3euX2cTYJ+cbXn3cnbaLLtauKPp6oEEieV5jXcALMwc+JUZExfQ6+k3k
DIsPLJnhSUIY61NgM/ai97eA7z+Ww9ZDp2qa5yajzdXftCvCdrDgm30UAKaqtBds
WY375SAeH5H610s5D306T/ssOPyxD1EEXJvr/x/I0oYcBzDbNjgAB1TKULS2LUVv
11V2p8OKs4NXeyZW29ppzRn3L9yv
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org