Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC587B2A952D11EFBD290CBD762E951A.roa
File: BC587B2A952D11EFBD290CBD762E951A.roa (raw, json)
Hash identifier: KQb0V4QxR5T0ip5SChJOgELqbSwfne0BNJswmIldOFM=
Subject key identifier: EB:9C:B1:05:67:AC:16:97:75:EF:7F:BC:8A:26:4E:DA:09:9F:E9:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C956
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC587B2A952D11EFBD290CBD762E951A.roa
Signing time: Mon 28 Oct 2024 13:08:34 +0000
ROA not before: Mon 28 Oct 2024 13:08:30 +0000
ROA not after: Sat 30 Nov 2024 13:08:30 +0000
asID: 203020
IP address blocks: 156.253.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51542 (0xc956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:08:30 2024 GMT
Not After : Nov 30 13:08:30 2024 GMT
Subject: CN=671f8cd2-acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:30:0e:55:fb:24:cd:e5:ff:7b:dc:47:3b:
02:68:95:84:32:09:c5:c8:ce:b3:8f:7f:46:85:12:
94:84:18:f0:5d:3c:5e:02:29:1c:30:3c:3e:e3:7a:
06:0c:bd:3b:c8:3e:2e:2a:5a:96:df:3b:1e:27:dc:
dd:9b:99:ac:f5:45:04:a4:6c:3d:8c:cf:f2:ae:67:
fc:2d:b6:68:fe:32:5f:f4:21:ba:e9:39:95:cb:6d:
46:b1:81:c2:be:c9:87:60:f9:78:88:35:13:b5:cf:
8f:2e:34:8f:bc:e0:ca:f7:fe:59:fe:86:cf:41:90:
b8:f8:ee:d0:03:ea:15:11:ed:ea:b0:d2:40:cc:ce:
01:a5:fa:3d:16:09:f0:cf:5a:24:90:63:3f:dc:9b:
99:be:7a:ef:fe:22:05:61:c0:5b:90:4a:dd:51:5f:
ed:8d:46:21:24:09:b1:86:7c:93:c7:44:dd:8b:df:
29:11:03:58:29:4d:c9:f6:2e:af:1a:53:84:73:bb:
f4:d3:b0:fc:29:b5:80:12:4a:74:05:89:d1:4d:90:
95:3a:0e:68:b1:a8:a1:ff:65:47:7d:58:0c:b8:a1:
e2:c1:af:2d:da:49:14:58:e7:e6:a8:d2:ce:a5:06:
d3:14:1c:18:18:bd:32:5f:59:4a:75:0a:f1:fd:c2:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:B1:05:67:AC:16:97:75:EF:7F:BC:8A:26:4E:DA:09:9F:E9:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC587B2A952D11EFBD290CBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.136.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ec:f5:57:37:79:69:8c:72:fb:c5:32:16:f6:35:03:06:03:
c1:9e:0d:97:b8:55:b2:3e:d5:3e:27:fc:53:9d:db:35:d1:f5:
de:5f:57:38:30:f1:ea:a9:aa:ba:f5:a3:72:cb:4e:35:68:d7:
a6:0c:74:0b:dd:0b:b3:7a:c4:0b:4e:48:ef:30:de:0e:7d:ff:
59:07:9e:79:af:e6:f1:37:c8:0a:5d:3e:d3:a6:2d:13:c1:c7:
3c:79:a9:8e:29:37:4c:c7:fb:9c:e6:d3:15:8c:fb:6d:3d:81:
4b:f9:34:0c:16:92:4f:9e:47:d4:b9:25:41:27:89:54:7b:0d:
98:aa:01:7d:cb:dd:71:e0:e4:a2:bd:7c:1c:21:12:ee:8b:89:
dc:4b:e0:1f:42:91:66:e1:d9:6c:af:69:8f:51:68:14:da:2c:
42:cd:2a:4b:78:30:13:bc:30:7d:8a:47:99:2c:77:78:d7:f5:
60:fe:8d:b1:b9:00:1e:33:ff:4f:c9:2f:04:d0:6d:7f:32:7b:
ae:37:1d:f1:d0:6b:e2:84:fd:94:6a:7c:05:72:37:75:10:41:
44:7a:c4:8d:b6:5f:c1:6a:1c:90:1e:ad:42:b5:5b:a8:4c:52:
5d:96:d7:02:f7:12:99:ba:85:7c:64:ca:26:80:24:9d:a3:26:
4d:51:66:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMlWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI4MTMwODMwWhcNMjQxMTMwMTMwODMwWjAYMRYw
FAYDVQQDEw02NzFmOGNkMi1hY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA53AwDlX7JM3l/3vcRzsCaJWEMgnFyM6zj39GhRKUhBjwXTxeAikcMDw+
43oGDL07yD4uKlqW3zseJ9zdm5ms9UUEpGw9jM/yrmf8LbZo/jJf9CG66TmVy21G
sYHCvsmHYPl4iDUTtc+PLjSPvODK9/5Z/obPQZC4+O7QA+oVEe3qsNJAzM4Bpfo9
Fgnwz1okkGM/3JuZvnrv/iIFYcBbkErdUV/tjUYhJAmxhnyTx0Tdi98pEQNYKU3J
9i6vGlOEc7v007D8KbWAEkp0BYnRTZCVOg5osaih/2VHfVgMuKHiwa8t2kkUWOfm
qNLOpQbTFBwYGL0yX1lKdQrx/cIogQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOuc
sQVnrBaXde9/vIomTtoJn+mpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzU4N0IyQTk1MkQxMUVGQkQyOTBDQkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP2IMA0GCSqGSIb3DQEBCwUA
A4IBAQAg7PVXN3lpjHL7xTIW9jUDBgPBng2XuFWyPtU+J/xTnds10fXeX1c4MPHq
qaq69aNyy041aNemDHQL3QuzesQLTkjvMN4Off9ZB555r+bxN8gKXT7Tpi0Twcc8
eamOKTdMx/uc5tMVjPttPYFL+TQMFpJPnkfUuSVBJ4lUew2YqgF9y91x4OSivXwc
IRLui4ncS+AfQpFm4dlsr2mPUWgU2ixCzSpLeDATvDB9ikeZLHd41/Vg/o2xuQAe
M/9PyS8E0G1/MnuuNx3x0GvihP2UanwFcjd1EEFEesSNtl/BahyQHq1CtVuoTFJd
ltcC9xKZuoV8ZMomgCSdoyZNUWbO
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org