Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4A024C8976A11EFBE54B862762E951A.roa
File: D4A024C8976A11EFBE54B862762E951A.roa (raw, json)
Hash identifier: A3R7oliY/Ed3Wtcnrx1aEphqiDNtnJvyDyMkTwPPtk8=
Subject key identifier: D6:B0:CD:36:A0:7C:A9:B9:C7:F7:0E:D9:87:EB:F2:65:53:63:86:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4A024C8976A11EFBE54B862762E951A.roa
Signing time: Thu 31 Oct 2024 09:30:56 +0000
ROA not before: Thu 31 Oct 2024 09:30:52 +0000
ROA not after: Sat 21 Dec 2024 09:30:52 +0000
asID: 63139
IP address blocks: 156.227.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52008 (0xcb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:30:52 2024 GMT
Not After : Dec 21 09:30:52 2024 GMT
Subject: CN=67234e50-b388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:20:d4:ee:f9:53:35:b1:d1:7a:fd:dd:dd:
f5:a2:3e:bc:91:e6:01:6f:93:ba:ee:9f:f9:ea:9f:
c1:5e:4b:e3:c5:e2:2f:6a:73:90:8d:1f:27:93:97:
91:f2:96:3b:76:f6:bc:ee:ac:b7:39:56:64:d6:a4:
32:6e:d0:3d:8f:d3:b8:42:5a:db:2a:91:02:36:a4:
64:1f:a3:f8:2a:48:d8:c7:65:b9:9a:94:60:85:90:
cb:f8:71:5b:7d:bc:f2:86:4a:5a:dc:50:5c:58:da:
35:5b:e6:90:de:3a:73:bc:98:66:60:b5:bc:13:d4:
f6:38:51:a4:d9:a8:bc:09:5f:47:81:c9:e6:c2:3e:
77:fb:38:80:cb:a5:7e:0f:41:e5:20:16:23:2c:1e:
ec:66:9a:17:1e:41:6b:b8:cf:f9:8d:bd:02:a1:fc:
67:1c:67:55:f3:5f:63:f9:ad:4b:e5:2d:32:70:ea:
60:63:b8:0a:a0:6c:43:43:3e:50:17:66:ba:8c:dd:
4e:b7:da:75:27:a8:48:cf:7a:39:c1:00:3a:29:75:
b4:35:60:8f:8c:90:28:f6:90:6c:30:22:9b:43:68:
32:66:e6:b7:b9:c5:de:86:2f:cd:5b:01:24:6a:1a:
1e:cd:75:1d:2a:74:ab:de:f3:2d:c8:ee:c0:b0:63:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:CD:36:A0:7C:A9:B9:C7:F7:0E:D9:87:EB:F2:65:53:63:86:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4A024C8976A11EFBE54B862762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.224.0/21
Signature Algorithm: sha256WithRSAEncryption
38:63:8a:13:65:73:87:e6:21:bc:2a:f1:0e:a0:34:ba:10:72:
dc:a3:43:51:2f:82:75:59:ae:d4:c9:e7:23:35:91:35:68:ed:
a8:77:1a:94:0d:d6:d2:ef:0e:b0:4d:fe:b7:de:0c:35:2a:c1:
1a:69:24:44:ae:e2:04:96:ab:52:f3:34:bf:46:dd:63:5c:94:
12:46:35:95:81:46:a0:24:fd:44:00:af:30:44:70:46:1b:10:
c4:61:45:b7:db:2c:8a:5c:74:ec:59:d4:67:50:3e:3f:5e:0e:
d0:44:b3:7d:4c:ff:78:95:41:f9:ed:eb:17:29:6f:c3:85:73:
cb:fa:87:a5:9d:4d:f2:fb:f4:01:33:e0:31:db:5c:75:ca:93:
ce:33:fe:58:13:33:83:8c:2c:47:5a:3c:e4:00:a1:85:67:3b:
bf:33:01:82:6b:8a:b4:42:dd:75:75:b5:90:08:62:bc:73:dc:
c2:6f:5e:59:81:1c:2b:5d:2c:c4:12:ab:3a:45:e1:1f:6b:e8:
bc:25:8e:a8:c6:83:8a:95:7d:48:11:3c:e7:ff:58:6a:ed:8a:
0f:60:be:82:3d:f0:d0:8a:ed:d3:aa:6d:f8:64:d6:db:af:26:
59:71:f0:65:3f:98:1a:26:03:9f:58:d2:cd:67:9f:63:8b:69:
9a:f6:15:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMsoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDMxMDkzMDUyWhcNMjQxMjIxMDkzMDUyWjAYMRYw
FAYDVQQDEw02NzIzNGU1MC1iMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt4gg1O75UzWx0Xr93d31oj68keYBb5O67p/56p/BXkvjxeIvanOQjR8n
k5eR8pY7dva87qy3OVZk1qQybtA9j9O4QlrbKpECNqRkH6P4KkjYx2W5mpRghZDL
+HFbfbzyhkpa3FBcWNo1W+aQ3jpzvJhmYLW8E9T2OFGk2ai8CV9Hgcnmwj53+ziA
y6V+D0HlIBYjLB7sZpoXHkFruM/5jb0CofxnHGdV819j+a1L5S0ycOpgY7gKoGxD
Qz5QF2a6jN1Ot9p1J6hIz3o5wQA6KXW0NWCPjJAo9pBsMCKbQ2gyZua3ucXehi/N
WwEkahoezXUdKnSr3vMtyO7AsGO/tQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNaw
zTagfKm5x/cO2Yfr8mVTY4a1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENEEwMjRDODk3NkExMUVGQkU1NEI4NjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOPgMA0GCSqGSIb3DQEBCwUA
A4IBAQA4Y4oTZXOH5iG8KvEOoDS6EHLco0NRL4J1Wa7UyecjNZE1aO2odxqUDdbS
7w6wTf633gw1KsEaaSREruIElqtS8zS/Rt1jXJQSRjWVgUagJP1EAK8wRHBGGxDE
YUW32yyKXHTsWdRnUD4/Xg7QRLN9TP94lUH57esXKW/DhXPL+oelnU3y+/QBM+Ax
21x1ypPOM/5YEzODjCxHWjzkAKGFZzu/MwGCa4q0Qt11dbWQCGK8c9zCb15ZgRwr
XSzEEqs6ReEfa+i8JY6oxoOKlX1IETzn/1hq7YoPYL6CPfDQiu3Tqm34ZNbbryZZ
cfBlP5gaJgOfWNLNZ59ji2ma9hVH
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:51 2024 by rpki-client on console-ams.rpki-client.org