Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC85672E0D311EEA11E6E87775412E6.roa
File: BFC85672E0D311EEA11E6E87775412E6.roa (raw, json)
Hash identifier: 40GTL2nyzM2w2dl9NtJ4mCFwfeWbQX2g6nA9N2+GcGc=
Subject key identifier: B9:4E:3B:AE:24:ED:7F:FC:28:3F:0A:B3:96:CA:27:77:FF:46:50:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC85672E0D311EEA11E6E87775412E6.roa
Signing time: Wed 13 Mar 2024 00:50:55 +0000
ROA not before: Wed 13 Mar 2024 00:00:52 +0000
ROA not after: Sat 14 Sep 2024 00:00:52 +0000
asID: 197730
IP address blocks: 156.237.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32296 (0x7e28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 00:00:52 2024 GMT
Not After : Sep 14 00:00:52 2024 GMT
Subject: CN=65f0f86f-1e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:2c:1e:0f:4d:7d:bb:f8:69:ec:08:8e:c7:
04:ea:6f:f8:60:ea:eb:2b:12:84:c2:76:36:5e:3f:
4e:52:eb:11:07:03:e6:fe:43:62:a3:05:b9:4c:52:
3d:f0:da:4d:0d:8d:84:f3:df:e2:81:f5:43:7f:dd:
05:04:f6:b3:7d:52:95:da:c0:5f:e8:c7:a0:e8:b5:
89:14:38:95:95:bf:29:98:72:56:78:16:40:b4:49:
05:c7:d9:cd:f9:f6:65:82:73:ce:0d:28:19:79:be:
07:ba:54:7e:ec:00:35:81:c2:0c:63:b8:80:78:d8:
11:dc:a1:7a:7d:68:ba:3f:82:a1:d7:d2:fb:f4:01:
6d:0a:e8:68:da:00:af:38:e9:b6:b5:04:6d:a5:92:
1f:80:6d:0b:98:ab:90:35:fd:4e:ba:d0:4e:a3:9a:
66:32:07:6c:a2:c4:d7:1e:03:58:82:ea:14:33:bf:
2e:82:ac:69:d8:95:89:52:a1:2e:53:81:51:b6:49:
07:fa:9d:ed:65:c4:06:e8:48:42:3b:6c:25:93:15:
52:9c:da:cf:c0:11:21:b5:b1:47:de:8b:98:b0:e3:
70:04:14:bf:fa:a3:79:f0:74:05:99:43:79:07:5a:
b1:25:ae:69:3d:d2:57:ab:68:a3:09:08:ab:6e:02:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4E:3B:AE:24:ED:7F:FC:28:3F:0A:B3:96:CA:27:77:FF:46:50:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC85672E0D311EEA11E6E87775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:88:b4:bc:54:cb:df:ed:79:8e:95:a1:c1:74:cb:47:cb:af:
77:c1:3c:29:e6:fc:aa:5e:f9:33:2a:49:20:76:1c:83:e1:3e:
df:1c:04:75:bb:99:78:5a:fb:ce:2f:ba:b5:a7:eb:3f:89:c9:
e9:a9:cc:63:49:a3:b1:98:d1:64:f0:8f:c5:62:7f:61:81:33:
24:de:90:8e:6e:b4:57:1a:ea:9b:a3:85:d7:db:23:a0:63:18:
46:35:72:a8:2c:d9:7f:ff:3e:5b:6b:d4:d8:66:af:e3:22:b0:
15:1c:b0:fb:24:2a:78:56:0d:0f:2f:20:76:7f:df:b5:2b:4b:
0e:e4:af:1a:b9:c7:51:cb:15:36:d8:4a:c6:5c:64:d4:86:a2:
a6:49:87:ce:75:c2:d9:33:ed:62:46:21:a6:42:46:98:35:15:
d2:aa:4e:07:02:f5:31:b1:ca:9e:ea:e8:b2:76:91:4f:0e:23:
1f:44:88:58:05:80:fc:18:e4:14:63:87:42:b9:c8:87:8b:1e:
17:2d:6b:b6:4f:d5:8b:33:df:fb:26:19:70:a4:b0:74:95:31:
ad:06:54:6b:2d:a4:70:5c:0a:89:8a:64:56:ae:44:2e:f9:70:
85:e7:16:6c:a8:8c:e6:87:70:f9:c2:e7:ef:a0:b2:7c:57:6e:
9f:a1:e8:c7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICfigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAzMTMwMDAwNTJaFw0yNDA5MTQwMDAwNTJaMBgxFjAU
BgNVBAMTDTY1ZjBmODZmLTFlMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXOiweD019u/hp7AiOxwTqb/hg6usrEoTCdjZeP05S6xEHA+b+Q2KjBblM
Uj3w2k0NjYTz3+KB9UN/3QUE9rN9UpXawF/ox6DotYkUOJWVvymYclZ4FkC0SQXH
2c359mWCc84NKBl5vge6VH7sADWBwgxjuIB42BHcoXp9aLo/gqHX0vv0AW0K6Gja
AK846ba1BG2lkh+AbQuYq5A1/U660E6jmmYyB2yixNceA1iC6hQzvy6CrGnYlYlS
oS5TgVG2SQf6ne1lxAboSEI7bCWTFVKc2s/AESG1sUfei5iw43AEFL/6o3nwdAWZ
Q3kHWrElrmk90leraKMJCKtuAjOTAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUuU47
riTtf/woPwqzlsond/9GUOIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0JGQzg1NjcyRTBEMzExRUVBMTFFNkU4Nzc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOc7WAwDQYJKoZIhvcNAQELBQAD
ggEBACyItLxUy9/teY6VocF0y0fLr3fBPCnm/Kpe+TMqSSB2HIPhPt8cBHW7mXha
+84vurWn6z+JyempzGNJo7GY0WTwj8Vif2GBMyTekI5utFca6pujhdfbI6BjGEY1
cqgs2X//Pltr1Nhmr+MisBUcsPskKnhWDQ8vIHZ/37UrSw7krxq5x1HLFTbYSsZc
ZNSGoqZJh851wtkz7WJGIaZCRpg1FdKqTgcC9TGxyp7q6LJ2kU8OIx9EiFgFgPwY
5BRjh0K5yIeLHhcta7ZP1Ysz3/smGXCksHSVMa0GVGstpHBcComKZFauRC75cIXn
FmyojOaHcPnC5++gsnxXbp+h6Mc=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org