Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86DA53E3B2F11EE9AFA984F4AD9E6FC.roa
File: B86DA53E3B2F11EE9AFA984F4AD9E6FC.roa (raw, json)
Hash identifier: cgegh/Ud83zCV2IsKzMsPomMw6gXKiAyB6QKHkkgwhY=
Subject key identifier: 77:5E:DE:19:9D:A4:D7:7F:00:15:BD:7C:37:12:6E:59:15:4E:C7:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3629
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86DA53E3B2F11EE9AFA984F4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:51:04 +0000
ROA not before: Tue 15 Aug 2023 05:51:01 +0000
ROA not after: Mon 27 May 2024 05:51:01 +0000
asID: 140627
IP address blocks: 156.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13865 (0x3629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:51:01 2023 GMT
Not After : May 27 05:51:01 2024 GMT
Subject: CN=64db1248-ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:f0:60:a0:ec:64:ee:37:f4:36:a0:88:20:
82:98:ab:68:7f:ff:e3:dc:44:aa:bc:5d:ba:57:e4:
83:62:cc:32:26:c4:68:10:d1:34:2b:92:9b:f8:f0:
32:18:90:ff:4d:2e:85:48:b9:4b:83:57:ee:7b:06:
40:ed:29:c0:4b:1d:2e:3b:ea:db:ba:41:8c:75:4b:
77:32:4c:b1:c5:d6:7d:f0:ae:b6:41:b2:9c:bc:02:
43:83:a3:60:33:22:0c:ae:65:14:3a:d7:5d:bc:bc:
73:6f:34:e9:a8:d6:56:ff:29:25:70:41:60:76:4a:
a3:83:9e:ee:16:a2:41:b6:3a:44:22:2c:df:23:2a:
e9:bc:3e:9f:d0:bf:bc:0c:8d:3e:c8:21:57:0a:a6:
af:97:90:44:a0:cb:a9:92:31:99:ac:5f:b9:a3:8a:
c3:d4:b9:e5:b4:38:b8:8f:72:6d:9f:7a:1c:8a:8d:
71:64:02:fc:f5:bb:13:39:bb:fe:79:c5:ea:74:82:
ef:f1:6c:69:bc:d6:27:b8:8d:8b:25:33:9c:88:ec:
f2:7d:7a:ff:65:c0:23:ba:70:2d:1c:ec:85:20:7a:
68:3d:fa:49:a9:97:9b:92:2f:88:67:45:9a:9b:17:
33:b7:47:fa:8e:62:7c:e3:00:9c:79:ba:65:96:0c:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:DE:19:9D:A4:D7:7F:00:15:BD:7C:37:12:6E:59:15:4E:C7:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86DA53E3B2F11EE9AFA984F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6c:7a:69:16:c0:cc:d2:81:42:3e:e6:bb:8c:0a:b1:03:b7:
5f:70:51:e4:50:07:f1:8d:a0:72:a3:b9:ee:cd:5f:7a:31:bc:
3a:64:b1:99:d3:06:18:9a:58:48:25:a8:13:8e:90:1a:1f:71:
54:ad:13:bf:1a:6f:8d:71:75:71:a2:e4:62:76:c1:22:d0:2b:
0e:07:15:9d:cc:b2:76:b4:53:78:fd:8c:4b:5e:5a:c3:fa:6e:
2c:94:29:d1:cc:fe:d5:a6:bd:88:61:97:c1:e7:d6:1f:e5:5c:
68:dc:20:a5:95:44:7b:ea:ed:07:79:a2:cd:d1:c3:61:c9:ad:
09:3d:76:e1:70:ea:3c:0a:c9:37:6b:94:3e:3b:2a:b6:a1:17:
f0:6b:9a:e0:fe:ad:0a:bf:4e:4f:48:fa:df:67:0b:a8:b8:de:
36:7a:3d:50:9f:ef:93:71:47:df:2b:7b:73:a0:2d:8f:c0:14:
40:1d:3d:f7:0c:46:1f:d2:73:96:2e:4b:85:d7:37:69:3c:75:
fe:65:95:48:b4:0e:0d:96:fe:22:6c:1b:11:53:70:b9:0d:17:
ba:c7:d2:98:61:07:fa:38:33:0d:58:da:5b:44:94:c9:9f:b7:
e6:46:d7:13:d2:d8:80:bc:4b:c2:9f:18:4c:23:bf:3b:8b:03:
2e:34:89:9d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNikwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTUwNTUxMDFaFw0yNDA1MjcwNTUxMDFaMBgxFjAU
BgNVBAMTDTY0ZGIxMjQ4LWVhN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEivBgoOxk7jf0NqCIIIKYq2h//+PcRKq8XbpX5INizDImxGgQ0TQrkpv4
8DIYkP9NLoVIuUuDV+57BkDtKcBLHS476tu6QYx1S3cyTLHF1n3wrrZBspy8AkOD
o2AzIgyuZRQ61128vHNvNOmo1lb/KSVwQWB2SqODnu4WokG2OkQiLN8jKum8Pp/Q
v7wMjT7IIVcKpq+XkESgy6mSMZmsX7mjisPUueW0OLiPcm2fehyKjXFkAvz1uxM5
u/55xep0gu/xbGm81ie4jYslM5yI7PJ9ev9lwCO6cC0c7IUgemg9+kmpl5uSL4hn
RZqbFzO3R/qOYnzjAJx5umWWDD1nAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUd17e
GZ2k138AFb18NxJuWRVOx8YwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0I4NkRBNTNFM0IyRjExRUU5QUZBOTg0RjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc97MwDQYJKoZIhvcNAQELBQAD
ggEBABtsemkWwMzSgUI+5ruMCrEDt19wUeRQB/GNoHKjue7NX3oxvDpksZnTBhia
WEglqBOOkBofcVStE78ab41xdXGi5GJ2wSLQKw4HFZ3Msna0U3j9jEteWsP6biyU
KdHM/tWmvYhhl8Hn1h/lXGjcIKWVRHvq7Qd5os3Rw2HJrQk9duFw6jwKyTdrlD47
KrahF/BrmuD+rQq/Tk9I+t9nC6i43jZ6PVCf75NxR98re3OgLY/AFEAdPfcMRh/S
c5YuS4XXN2k8df5llUi0Dg2W/iJsGxFTcLkNF7rH0phhB/o4Mw1Y2ltElMmft+ZG
1xPS2IC8S8KfGEwjvzuLAy40iZ0=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org