Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33E96303B2411EE8EE97E2E4AD9E6FC.roa
File: D33E96303B2411EE8EE97E2E4AD9E6FC.roa (raw, json)
Hash identifier: lYzEwxSr5dnVYzGyf5CwDEdZmuIyCbJtsb9dOXKUN90=
Subject key identifier: 19:0C:97:A0:4D:D6:51:16:DC:35:0A:9A:10:AF:87:27:62:AB:16:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3581
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33E96303B2411EE8EE97E2E4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:33:05 +0000
ROA not before: Tue 15 Aug 2023 04:33:01 +0000
ROA not after: Mon 27 May 2024 04:33:01 +0000
asID: 140627
IP address blocks: 156.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:33:01 2023 GMT
Not After : May 27 04:33:01 2024 GMT
Subject: CN=64db0000-4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:29:b6:1d:60:6b:a3:25:9c:e4:3d:e8:54:
9f:a8:14:44:a2:0b:a1:8e:b2:cf:ee:02:0d:b9:bb:
c2:0d:44:b7:a4:2e:cb:a6:7d:1b:b1:e7:d3:fe:3a:
35:ed:15:e2:03:c6:15:de:b1:b1:bb:65:68:05:eb:
46:34:c5:a5:68:09:d4:b4:98:d0:f5:b0:9c:4f:7f:
78:aa:54:91:ba:ac:b1:d1:5b:13:06:1f:17:47:8a:
f3:80:6a:6a:b5:90:b2:32:2e:97:66:7d:c6:c8:24:
20:59:ab:9b:91:d8:3a:89:85:20:fe:ef:18:15:47:
18:8b:ea:b4:2a:a2:8d:fd:6d:9e:29:78:f6:63:85:
dd:21:0f:55:44:27:39:1f:9a:c0:17:60:d1:31:92:
93:6f:70:62:2f:29:d7:0e:c6:99:7e:8f:cb:cf:b4:
51:c1:2b:52:d3:a4:f4:62:39:29:b0:3c:7e:d8:1a:
fa:2d:13:3d:c1:70:f4:2a:fb:98:8e:df:f3:21:50:
42:73:3a:0c:c8:2e:53:5c:e6:d3:e4:e3:75:a6:13:
6c:df:db:7d:62:86:4a:89:ed:59:02:92:11:70:d9:
e6:8b:03:84:c0:f8:e7:67:2b:6f:0d:32:16:0c:bf:
6f:fe:d0:c1:f1:d1:d6:05:85:f8:36:0d:d6:68:70:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:97:A0:4D:D6:51:16:DC:35:0A:9A:10:AF:87:27:62:AB:16:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D33E96303B2411EE8EE97E2E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:3f:85:95:db:2d:37:18:94:1e:49:43:3a:7e:30:6d:c2:b0:
f7:81:08:51:d3:bb:a9:c0:93:4c:71:e7:4c:ca:9d:8a:8f:fb:
37:0c:44:7c:e7:d7:e8:24:06:57:4e:c7:f5:dc:2f:43:17:73:
74:19:c6:f1:34:c8:80:67:15:3d:e6:7d:61:49:b0:9a:28:3b:
cb:ef:02:96:cb:3f:e0:e5:b6:bb:4a:3c:db:57:a4:03:9e:40:
f7:e4:dd:a3:cc:79:12:b3:74:ea:78:b6:de:1c:65:1b:7f:b8:
5c:83:dc:b5:e7:c2:5c:de:0b:08:8f:39:b0:6b:ce:38:df:07:
2f:fc:51:24:55:4e:85:61:32:f4:f4:65:61:76:de:4d:c6:b7:
f2:66:5a:eb:97:a1:d9:84:b3:0c:07:1c:e1:ec:08:a2:7a:88:
d4:e0:d5:f9:13:4a:04:6c:b9:a0:6b:07:4d:2d:55:75:a7:62:
99:3d:a6:7f:2a:f7:78:f4:21:92:fa:c1:2f:25:39:67:cf:90:
a5:10:99:7c:2b:68:52:c2:10:1d:81:e9:56:87:4c:ad:11:0d:
9e:4c:04:a1:aa:89:06:c9:6c:b7:48:dd:97:90:07:e2:aa:9b:
dc:8c:29:4b:b4:b6:a0:9b:a9:d7:47:0a:07:7c:8f:14:61:b7:
e3:17:dc:6c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNYEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MTUwNDMzMDFaFw0yNDA1MjcwNDMzMDFaMBgxFjAU
BgNVBAMTDTY0ZGIwMDAwLTRlZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/vCm2HWBroyWc5D3oVJ+oFESiC6GOss/uAg25u8INRLekLsumfRux59P+
OjXtFeIDxhXesbG7ZWgF60Y0xaVoCdS0mND1sJxPf3iqVJG6rLHRWxMGHxdHivOA
amq1kLIyLpdmfcbIJCBZq5uR2DqJhSD+7xgVRxiL6rQqoo39bZ4pePZjhd0hD1VE
JzkfmsAXYNExkpNvcGIvKdcOxpl+j8vPtFHBK1LTpPRiOSmwPH7YGvotEz3BcPQq
+5iO3/MhUEJzOgzILlNc5tPk43WmE2zf231ihkqJ7VkCkhFw2eaLA4TA+OdnK28N
MhYMv2/+0MHx0dYFhfg2DdZocB4HAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUGQyX
oE3WURbcNQqaEK+HJ2KrFokwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0QzM0U5NjMwM0IyNDExRUU4RUU5N0UyRTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc998wDQYJKoZIhvcNAQELBQAD
ggEBAG4/hZXbLTcYlB5JQzp+MG3CsPeBCFHTu6nAk0xx50zKnYqP+zcMRHzn1+gk
BldOx/XcL0MXc3QZxvE0yIBnFT3mfWFJsJooO8vvApbLP+DltrtKPNtXpAOeQPfk
3aPMeRKzdOp4tt4cZRt/uFyD3LXnwlzeCwiPObBrzjjfBy/8USRVToVhMvT0ZWF2
3k3Gt/JmWuuXodmEswwHHOHsCKJ6iNTg1fkTSgRsuaBrB00tVXWnYpk9pn8q93j0
IZL6wS8lOWfPkKUQmXwraFLCEB2B6VaHTK0RDZ5MBKGqiQbJbLdI3ZeQB+Kqm9yM
KUu0tqCbqddHCgd8jxRht+MX3Gw=
-----END CERTIFICATE-----
Generated at Tue May 7 02:00:51 2024 by rpki-client on console-ams.rpki-client.org