Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BE96EEF49211EEB6F2B65F775412E6.roa
File: B7BE96EEF49211EEB6F2B65F775412E6.roa (raw, json)
Hash identifier: hPPis4XctNVwo819ogJLKN6YxZ8kQ9g3ZLJ8OopMFis=
Subject key identifier: 04:D6:68:A9:57:15:1F:DD:72:02:2A:B2:6A:40:07:28:F8:44:CE:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 819F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BE96EEF49211EEB6F2B65F775412E6.roa
Signing time: Sun 07 Apr 2024 03:55:48 +0000
ROA not before: Sun 07 Apr 2024 03:55:45 +0000
ROA not after: Fri 17 May 2024 03:55:45 +0000
asID: 133952
IP address blocks: 156.225.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33183 (0x819f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 03:55:45 2024 GMT
Not After : May 17 03:55:45 2024 GMT
Subject: CN=66121944-ec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:01:83:de:37:72:02:27:a6:4c:91:7a:b9:
8d:22:35:9b:9d:d2:11:10:5e:46:f7:b7:46:a2:5b:
5f:16:22:27:d4:a9:91:d7:a1:1a:aa:d5:0e:6a:b1:
5a:a0:98:28:df:32:00:9e:f1:11:01:c6:bb:05:6e:
ca:b0:d3:72:67:81:3a:db:a2:a5:71:46:ba:ba:af:
27:0b:e5:81:99:fa:a0:5e:7a:0c:ae:d6:46:ac:ce:
b1:09:97:1f:e4:14:d3:fa:37:e5:9e:f7:b8:f9:20:
bc:f2:02:18:b0:11:64:13:d5:08:2c:5f:59:75:2f:
2c:bb:c3:53:a0:35:65:87:07:10:cf:50:11:4c:2d:
97:5c:03:bd:6c:b3:35:a3:24:fc:cc:29:0c:71:ea:
d8:9b:ae:b9:f2:bb:5b:f6:c5:39:37:0f:f4:3b:bc:
6e:1c:0a:54:d4:be:7c:b3:29:d1:df:5f:77:5b:8c:
32:74:86:44:d1:ef:5c:cf:16:19:b5:6a:99:7a:d2:
94:eb:41:34:e8:b1:f5:16:ac:09:c9:10:7d:a1:d0:
92:77:18:03:45:82:e3:3c:7d:76:8f:26:45:8c:45:
71:79:6f:53:31:39:6d:ae:c6:57:93:5a:c9:58:fd:
fe:e4:be:28:be:76:77:d3:de:c1:e8:05:77:39:f0:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:68:A9:57:15:1F:DD:72:02:2A:B2:6A:40:07:28:F8:44:CE:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BE96EEF49211EEB6F2B65F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.130.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4f:74:79:35:69:20:50:02:fa:aa:a1:c7:53:66:72:89:60:
5b:3b:e7:06:68:c8:88:ec:64:c4:1f:47:b1:1e:a1:15:26:17:
5a:38:38:3c:27:8d:e5:46:f0:c9:4c:82:a1:45:7b:ce:67:e3:
2c:1d:a0:1e:9f:5e:ce:21:86:2c:63:6d:0e:76:dd:33:3e:7b:
82:08:19:21:53:37:20:10:86:be:03:24:51:ef:ea:09:ca:c5:
bc:62:0f:ea:cb:44:f6:f4:7f:95:e9:c9:2d:9b:08:09:20:03:
08:12:5b:ab:7f:42:49:95:97:f2:91:e7:0c:ea:f6:1d:37:56:
1e:72:70:26:5b:f6:35:7a:d1:96:f5:56:09:38:12:25:93:84:
25:ae:da:7a:94:c3:df:92:b6:95:f6:76:21:fd:84:34:0e:52:
c2:c5:2b:33:d4:b2:fd:e6:e9:09:cb:96:28:01:92:bb:91:d0:
08:d7:c5:aa:57:4c:6d:c1:df:f5:0a:56:9e:6f:77:09:8c:4b:
9d:e3:c2:5c:b6:80:9e:4c:41:2b:eb:01:76:62:67:d8:59:de:
e3:06:ab:c0:05:ba:97:8a:d6:3d:58:30:14:26:31:81:6d:e6:
bd:6c:b0:b6:3f:c6:5c:81:f8:99:7e:db:48:47:39:b7:bb:7a:
49:29:c5:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIGfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDA3MDM1NTQ1WhcNMjQwNTE3MDM1NTQ1WjAYMRYw
FAYDVQQDEw02NjEyMTk0NC1lYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA37cBg943cgInpkyRermNIjWbndIREF5G97dGoltfFiIn1KmR16EaqtUO
arFaoJgo3zIAnvERAca7BW7KsNNyZ4E626KlcUa6uq8nC+WBmfqgXnoMrtZGrM6x
CZcf5BTT+jflnve4+SC88gIYsBFkE9UILF9ZdS8su8NToDVlhwcQz1ARTC2XXAO9
bLM1oyT8zCkMcerYm6658rtb9sU5Nw/0O7xuHApU1L58synR3193W4wydIZE0e9c
zxYZtWqZetKU60E06LH1FqwJyRB9odCSdxgDRYLjPH12jyZFjEVxeW9TMTltrsZX
k1rJWP3+5L4ovnZ3097B6AV3OfBe+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFATW
aKlXFR/dcgIqsmpAByj4RM6pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CN0JFOTZFRUY0OTIxMUVFQjZGMkI2NUY3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOGCMA0GCSqGSIb3DQEBCwUA
A4IBAQA2T3R5NWkgUAL6qqHHU2ZyiWBbO+cGaMiI7GTEH0exHqEVJhdaODg8J43l
RvDJTIKhRXvOZ+MsHaAen17OIYYsY20Odt0zPnuCCBkhUzcgEIa+AyRR7+oJysW8
Yg/qy0T29H+V6cktmwgJIAMIElurf0JJlZfykecM6vYdN1YecnAmW/Y1etGW9VYJ
OBIlk4Qlrtp6lMPfkraV9nYh/YQ0DlLCxSsz1LL95ukJy5YoAZK7kdAI18WqV0xt
wd/1Claeb3cJjEud48JctoCeTEEr6wF2YmfYWd7jBqvABbqXitY9WDAUJjGBbea9
bLC2P8ZcgfiZfttIRzm3u3pJKcXB
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org