Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4CAED18A44311EF8B1C9E75762E951A.roa
File: C4CAED18A44311EF8B1C9E75762E951A.roa (raw, json)
Hash identifier: GBQCVyxSywzrlzlh8C3HPTo9sGKcqmap8Ocx/A9VHKI=
Subject key identifier: 7E:75:12:AB:B8:D8:64:40:D6:1D:8B:10:39:BF:AE:F9:83:F8:A0:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D36C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4CAED18A44311EF8B1C9E75762E951A.roa
Signing time: Sat 16 Nov 2024 17:54:04 +0000
ROA not before: Sat 16 Nov 2024 17:54:01 +0000
ROA not after: Mon 25 Nov 2024 17:54:01 +0000
asID: 141167
IP address blocks: 156.228.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54124 (0xd36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:54:01 2024 GMT
Not After : Nov 25 17:54:01 2024 GMT
Subject: CN=6738dc3c-0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:5d:1f:9c:f2:ea:aa:5c:17:31:46:8e:e6:
c6:cf:5e:a3:86:01:62:ea:38:d0:a2:f0:1f:56:92:
16:0b:2e:3e:ae:7a:c5:32:8c:3f:84:c3:da:49:cf:
39:27:09:ed:47:4c:f6:c8:e0:64:be:68:4c:78:cd:
8b:a9:7f:a5:13:ae:96:bc:62:fd:bc:22:ee:da:9d:
f0:fb:9e:b9:3f:cb:36:98:a6:d0:85:c6:27:04:46:
f9:d3:3b:ae:63:e0:e9:a3:df:44:5f:9e:28:a3:45:
86:9f:9d:7f:3e:29:bb:5b:46:6a:f0:9e:4d:04:39:
d7:45:76:8f:c5:2a:e5:a0:6b:7c:93:1a:b6:4e:29:
a6:05:06:00:41:7b:32:4e:39:a3:1f:51:b7:bc:68:
1b:95:d0:9e:63:e9:6d:84:10:c5:86:ff:70:4d:9e:
c0:31:d7:a4:e5:a1:38:e1:db:b0:ce:c4:d4:d2:6b:
09:f8:7e:17:03:ff:ca:37:2e:73:48:f0:95:79:f1:
dc:71:92:ba:2a:73:91:0b:0d:92:05:51:87:86:cf:
b9:99:40:e2:bd:a6:2d:f1:e4:28:af:19:16:4f:5b:
40:3c:d1:76:d1:85:9e:45:fd:d9:22:12:3d:80:9d:
45:4f:58:3f:5c:a1:f5:23:42:d9:8d:e4:e5:56:de:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:12:AB:B8:D8:64:40:D6:1D:8B:10:39:BF:AE:F9:83:F8:A0:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4CAED18A44311EF8B1C9E75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4b:1d:00:6b:1f:9a:e0:c5:e6:a3:86:d9:b3:48:38:01:ae:
13:ac:b5:ec:67:69:9b:15:da:ac:69:1f:32:41:cf:73:53:fd:
25:88:45:d6:71:14:b4:28:ee:9d:22:d8:53:3e:f2:c3:de:23:
65:b4:2a:46:b9:59:bd:60:1c:24:c0:61:cd:18:7f:c4:a5:a2:
37:c8:8b:fc:72:79:b5:3d:2b:02:d5:24:67:6c:c2:f1:b9:47:
88:f6:54:ac:da:da:e5:ab:60:8d:75:eb:99:df:e5:f6:20:05:
8e:92:0b:ff:64:5e:59:34:a4:aa:a2:ee:d9:8e:35:a4:92:ea:
c0:9b:2d:38:dd:45:7a:e3:fb:f9:15:9a:21:1d:42:09:e4:27:
d8:9c:5c:a3:4b:b9:23:e6:e6:5a:2f:ab:b7:9a:d7:7e:a6:41:
42:ba:1d:e0:ce:b1:9a:c4:84:55:57:d7:ca:65:c9:72:7e:39:
e3:f4:c8:4d:68:c5:7f:2e:1e:41:f2:f8:81:5b:d2:5e:49:d0:
44:17:7e:f8:cf:c4:b2:78:50:67:11:53:6c:6c:82:af:46:df:
df:13:23:ae:f5:4d:3c:bf:8c:f2:35:bd:3b:aa:c2:5d:b5:94:
1c:70:ab:40:cd:eb:78:3c:95:06:4e:93:f5:86:c3:75:bb:08:
86:6d:27:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANNsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE2MTc1NDAxWhcNMjQxMTI1MTc1NDAxWjAYMRYw
FAYDVQQDEw02NzM4ZGMzYy0wZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8chdH5zy6qpcFzFGjubGz16jhgFi6jjQovAfVpIWCy4+rnrFMow/hMPa
Sc85JwntR0z2yOBkvmhMeM2LqX+lE66WvGL9vCLu2p3w+565P8s2mKbQhcYnBEb5
0zuuY+Dpo99EX54oo0WGn51/Pim7W0Zq8J5NBDnXRXaPxSrloGt8kxq2TimmBQYA
QXsyTjmjH1G3vGgbldCeY+lthBDFhv9wTZ7AMdek5aE44duwzsTU0msJ+H4XA//K
Ny5zSPCVefHccZK6KnORCw2SBVGHhs+5mUDivaYt8eQorxkWT1tAPNF20YWeRf3Z
IhI9gJ1FT1g/XKH1I0LZjeTlVt7UhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH51
Equ42GRA1h2LEDm/rvmD+KBQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNENBRUQxOEE0NDMxMUVGOEIxQzlFNzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQDMA0GCSqGSIb3DQEBCwUA
A4IBAQBxSx0Aax+a4MXmo4bZs0g4Aa4TrLXsZ2mbFdqsaR8yQc9zU/0liEXWcRS0
KO6dIthTPvLD3iNltCpGuVm9YBwkwGHNGH/EpaI3yIv8cnm1PSsC1SRnbMLxuUeI
9lSs2trlq2CNdeuZ3+X2IAWOkgv/ZF5ZNKSqou7ZjjWkkurAmy043UV64/v5FZoh
HUIJ5CfYnFyjS7kj5uZaL6u3mtd+pkFCuh3gzrGaxIRVV9fKZclyfjnj9MhNaMV/
Lh5B8viBW9JeSdBEF374z8SyeFBnEVNsbIKvRt/fEyOu9U08v4zyNb07qsJdtZQc
cKtAzet4PJUGTpP1hsN1uwiGbScn
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org