Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBCE46C87EB511EE845609504AD9E6FC.roa
File: CBCE46C87EB511EE845609504AD9E6FC.roa (raw, json)
Hash identifier: OW8hJkzHNo7+SPJOPBsGTQe8aGmWJ2DuSgqwX5bX4Vg=
Subject key identifier: 93:8D:39:AE:61:28:04:54:8B:6F:90:E2:37:14:C1:D6:2F:05:A2:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBCE46C87EB511EE845609504AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:09:37 +0000
ROA not before: Thu 09 Nov 2023 04:09:33 +0000
ROA not after: Thu 08 Aug 2024 04:09:33 +0000
asID: 133861
IP address blocks: 156.245.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17621 (0x44d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 04:09:33 2023 GMT
Not After : Aug 8 04:09:33 2024 GMT
Subject: CN=654c5b81-3b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:43:3a:35:b3:2a:47:c4:2b:d3:d1:d4:e4:
87:44:64:ba:32:21:a0:11:3d:b9:c6:fe:97:94:cb:
1e:94:86:ec:0c:5c:07:d2:da:d0:0c:e8:ad:1b:74:
ea:8c:1a:30:53:e6:9e:f8:5e:19:9f:3a:a9:c8:51:
f9:01:1b:b5:cf:22:13:6a:11:35:89:e4:bd:07:d2:
c1:82:ff:6a:d8:b5:a6:97:37:81:dc:bd:c7:03:e6:
de:a9:43:df:01:3c:ab:ca:ce:40:50:ab:cc:71:87:
71:2d:20:19:c3:47:0b:3f:9a:0e:53:4e:79:17:8b:
1f:cb:ef:72:96:72:69:2a:5a:6f:b5:71:46:a0:bc:
6c:4c:b9:15:b2:16:e5:d0:fa:6c:f5:e3:30:97:9b:
d4:bd:95:37:06:8c:d6:40:f0:4d:14:96:63:b7:ae:
02:be:6a:9d:48:b4:91:4e:88:fe:9b:dc:e6:c5:43:
9f:c5:2c:95:56:d7:72:1b:74:99:7b:fb:e7:6e:54:
96:02:ef:19:11:e1:29:5e:6b:af:60:91:ea:78:bb:
23:8e:37:8d:66:dc:dc:73:d0:3b:d8:4d:c3:85:72:
b6:81:0e:bc:b8:b2:b1:81:f1:72:3a:ea:a3:6e:e1:
38:02:98:8e:62:32:c5:62:0c:5d:f2:df:df:7a:a0:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:39:AE:61:28:04:54:8B:6F:90:E2:37:14:C1:D6:2F:05:A2:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBCE46C87EB511EE845609504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.16.0/24
Signature Algorithm: sha256WithRSAEncryption
49:16:49:f7:ea:33:33:fe:90:5f:0a:1b:5f:e7:3a:6b:e6:e6:
a3:11:1e:68:0f:b1:de:cd:82:bd:ab:88:12:6c:39:51:12:a9:
fb:18:c6:c8:5b:02:12:76:7f:86:06:8f:fa:7b:8a:8d:6c:f9:
47:3d:b1:90:96:c6:c6:2e:ec:3e:3e:5b:45:63:ab:2c:54:d2:
ff:48:7f:e1:0d:ec:65:61:20:e6:97:2b:5a:bb:ef:7c:26:c7:
0b:e9:b4:e2:75:41:4b:ef:47:03:a8:71:06:6f:74:66:69:17:
e7:c6:70:b5:93:b7:6f:8d:dd:89:c2:ae:14:66:66:c9:c0:3b:
f4:b8:e3:f3:cc:9a:0e:14:61:a5:52:de:ad:84:91:1b:e8:66:
d4:d8:92:3e:9d:4d:13:cc:a1:d7:1a:63:9d:26:2a:2d:2f:f1:
f8:22:50:72:63:e7:df:18:19:9e:7c:6a:38:3f:91:6d:bf:32:
f9:04:5c:cd:4e:e6:bb:0b:8e:2e:89:3b:ec:12:fc:1b:a2:09:
64:31:5f:d8:3e:84:c8:c2:26:2b:f4:b3:1e:0a:0d:ec:65:40:
38:e4:74:41:74:88:ba:b5:17:e0:44:1c:ec:07:59:37:37:79:
a2:f5:c3:32:7f:4d:ca:0b:45:ad:a6:29:1f:92:24:12:ec:43:
8a:89:9b:c8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRNUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNDA5MzNaFw0yNDA4MDgwNDA5MzNaMBgxFjAU
BgNVBAMTDTY1NGM1YjgxLTNiN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDArkM6NbMqR8Qr09HU5IdEZLoyIaARPbnG/peUyx6UhuwMXAfS2tAM6K0b
dOqMGjBT5p74XhmfOqnIUfkBG7XPIhNqETWJ5L0H0sGC/2rYtaaXN4HcvccD5t6p
Q98BPKvKzkBQq8xxh3EtIBnDRws/mg5TTnkXix/L73KWcmkqWm+1cUagvGxMuRWy
FuXQ+mz14zCXm9S9lTcGjNZA8E0UlmO3rgK+ap1ItJFOiP6b3ObFQ5/FLJVW13Ib
dJl7++duVJYC7xkR4Slea69gkep4uyOON41m3Nxz0DvYTcOFcraBDry4srGB8XI6
6qNu4TgCmI5iMsViDF3y3996oNEjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUk405
rmEoBFSLb5DiNxTB1i8FomIwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0NCQ0U0NkM4N0VCNTExRUU4NDU2MDk1MDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9RAwDQYJKoZIhvcNAQELBQAD
ggEBAEkWSffqMzP+kF8KG1/nOmvm5qMRHmgPsd7Ngr2riBJsOVESqfsYxshbAhJ2
f4YGj/p7io1s+Uc9sZCWxsYu7D4+W0VjqyxU0v9If+EN7GVhIOaXK1q773wmxwvp
tOJ1QUvvRwOocQZvdGZpF+fGcLWTt2+N3YnCrhRmZsnAO/S44/PMmg4UYaVS3q2E
kRvoZtTYkj6dTRPModcaY50mKi0v8fgiUHJj598YGZ58ajg/kW2/MvkEXM1O5rsL
ji6JO+wS/BuiCWQxX9g+hMjCJiv0sx4KDexlQDjkdEF0iLq1F+BEHOwHWTc3eaL1
wzJ/TcoLRa2mKR+SJBLsQ4qJm8g=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org