Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFBCD75A944E11EFB1443743762E951A.roa
File: BFBCD75A944E11EFB1443743762E951A.roa (raw, json)
Hash identifier: NfJGLIS4L0Gwe5upmpD4kFQnN8HOq4Ndm7bid5ExPfI=
Subject key identifier: 13:D5:CE:12:1A:3B:36:E5:CD:C8:28:D4:D4:89:D4:EE:F1:D7:5B:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C8F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFBCD75A944E11EFB1443743762E951A.roa
Signing time: Sun 27 Oct 2024 10:32:22 +0000
ROA not before: Sun 27 Oct 2024 10:32:17 +0000
ROA not after: Sun 01 Dec 2024 10:32:17 +0000
asID: 14713
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51443 (0xc8f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 27 10:32:17 2024 GMT
Not After : Dec 1 10:32:17 2024 GMT
Subject: CN=671e16b6-265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:b8:f0:d1:36:f9:d0:2d:85:08:8c:f4:15:
79:ad:f7:fb:aa:3c:08:7a:3b:a1:3c:55:ee:63:28:
43:4e:13:26:be:65:b4:68:ed:38:25:b4:a6:da:fd:
49:82:3a:7f:0c:76:e1:5b:82:19:11:ea:68:1c:15:
0f:7d:95:c7:39:cb:3d:44:cf:01:7b:c1:48:e6:5a:
ca:65:f6:8d:64:be:fb:94:b0:9c:dd:24:9f:98:9d:
e0:84:a0:94:43:d4:f8:33:62:78:d5:bb:df:ad:17:
05:cb:60:9e:fd:fd:cf:1d:73:40:c1:5b:05:4b:1b:
e0:07:8d:52:ca:0a:bd:fe:49:4c:70:6a:db:e1:f8:
71:a9:cf:86:c3:a6:fe:e3:15:42:99:91:93:ae:ed:
5b:bd:25:e9:ed:fb:9a:d4:fd:c2:1b:77:6e:ae:56:
cb:30:4e:9a:d7:5d:61:ee:cd:6e:46:e6:76:09:21:
8c:d6:7d:c5:7b:64:0f:e1:6a:ea:75:a2:ac:69:d8:
a5:7b:6b:d3:ed:94:15:19:54:da:88:54:0e:0c:b9:
ce:bb:4d:a3:bf:bf:cf:bf:16:4a:8a:1b:53:a8:f9:
59:90:67:8c:ee:01:1b:de:dd:3b:5d:1e:00:89:c8:
c0:68:17:40:17:1e:05:6d:d1:f9:4a:55:7b:e7:e9:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:CE:12:1A:3B:36:E5:CD:C8:28:D4:D4:89:D4:EE:F1:D7:5B:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFBCD75A944E11EFB1443743762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
18:90:b1:d9:5e:84:89:72:37:57:ed:9e:90:6c:b0:24:e9:a7:
af:2c:55:ac:7d:b6:28:00:97:7b:8e:e1:88:1e:cb:ce:81:27:
53:b3:35:ca:0f:83:14:c0:47:b5:0f:b7:21:bc:24:20:54:0a:
96:c2:2a:bb:b1:ef:8e:38:bb:1e:ab:56:19:12:c4:10:5b:6c:
fe:0d:fc:79:b9:af:86:e3:fe:78:8e:0b:88:ce:bb:65:10:6f:
bf:b9:d3:97:30:1f:a6:da:4c:4d:7c:84:94:7c:fd:83:8b:34:
a5:75:ca:85:7e:49:63:4e:ec:57:0e:12:79:af:30:ed:e1:94:
05:59:11:4b:11:dc:bb:e8:ef:1c:71:f5:85:5a:af:57:bb:8d:
39:39:0a:2d:5c:39:6c:ba:4b:c2:7f:07:6d:45:55:c6:87:11:
b3:90:09:f7:a5:e7:88:55:2e:17:7b:bd:58:c0:35:c1:97:6b:
2a:85:be:be:bd:70:11:cf:80:fa:39:c8:a6:19:f1:06:9a:2f:
8b:32:02:43:28:6f:ba:2e:e1:22:4e:0b:4e:76:05:97:61:5f:
6d:a0:ed:2f:b1:23:a3:92:db:1f:af:01:e5:bf:ac:b6:e1:5a:
30:34:c5:a9:de:42:a5:e6:7f:8d:a5:07:46:de:e6:4c:85:13:
9b:f8:6e:79
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMjzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDI3MTAzMjE3WhcNMjQxMjAxMTAzMjE3WjAYMRYw
FAYDVQQDEw02NzFlMTZiNi0yNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyCe48NE2+dAthQiM9BV5rff7qjwIejuhPFXuYyhDThMmvmW0aO04JbSm
2v1Jgjp/DHbhW4IZEepoHBUPfZXHOcs9RM8Be8FI5lrKZfaNZL77lLCc3SSfmJ3g
hKCUQ9T4M2J41bvfrRcFy2Ce/f3PHXNAwVsFSxvgB41Sygq9/klMcGrb4fhxqc+G
w6b+4xVCmZGTru1bvSXp7fua1P3CG3durlbLME6a111h7s1uRuZ2CSGM1n3Fe2QP
4WrqdaKsadile2vT7ZQVGVTaiFQODLnOu02jv7/PvxZKihtTqPlZkGeM7gEb3t07
XR4AicjAaBdAFx4FbdH5SlV75+ldJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBPV
zhIaOzblzcgo1NSJ1O7x11t5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRkJDRDc1QTk0NEUxMUVGQjE0NDM3NDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQAYkLHZXoSJcjdX7Z6QbLAk6aevLFWsfbYoAJd7juGIHsvOgSdTszXKD4MU
wEe1D7chvCQgVAqWwiq7se+OOLseq1YZEsQQW2z+Dfx5ua+G4/54jguIzrtlEG+/
udOXMB+m2kxNfISUfP2DizSldcqFfkljTuxXDhJ5rzDt4ZQFWRFLEdy76O8ccfWF
Wq9Xu405OQotXDlsukvCfwdtRVXGhxGzkAn3peeIVS4Xe71YwDXBl2sqhb6+vXAR
z4D6OcimGfEGmi+LMgJDKG+6LuEiTgtOdgWXYV9toO0vsSOjktsfrwHlv6y24Vow
NMWp3kKl5n+NpQdG3uZMhROb+G55
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org