Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5988020EDAE11EEBAEB376C775412E6.roa
File: D5988020EDAE11EEBAEB376C775412E6.roa (raw, json)
Hash identifier: KLoRkk2VfK0ZGeM9F/QCJDW0PY1FslJpSnic91Y1BY0=
Subject key identifier: BA:4B:55:F2:D0:00:B7:10:71:3A:8C:9D:DA:C0:51:E6:C8:EC:16:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 80EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5988020EDAE11EEBAEB376C775412E6.roa
Signing time: Fri 29 Mar 2024 09:29:26 +0000
ROA not before: Fri 29 Mar 2024 09:29:22 +0000
ROA not after: Mon 01 Jul 2024 09:29:22 +0000
asID: 328608
IP address blocks: 156.227.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33004 (0x80ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 29 09:29:22 2024 GMT
Not After : Jul 1 09:29:22 2024 GMT
Subject: CN=660689f6-31c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:da:24:40:7d:a3:3a:27:12:12:7f:9e:f2:
0e:7b:6f:6a:43:c9:f1:fc:c4:ff:a4:b0:3a:3b:b8:
7b:bc:f1:a2:5a:c0:2c:55:e3:92:9f:83:0e:ec:7b:
81:4b:18:b9:47:15:1f:78:22:a3:4c:5b:52:87:d6:
0c:c4:20:7b:af:94:bf:e9:bf:25:04:52:53:cd:6b:
52:a7:b2:43:91:7c:f4:70:53:b8:20:0f:31:16:17:
00:bc:f8:da:65:ae:ec:10:85:07:ac:32:73:0b:6b:
c0:42:d5:a1:31:d3:ec:88:84:f9:ec:8a:79:1c:9d:
8e:a5:ff:a5:f8:6e:00:1c:d8:e7:af:00:be:be:db:
ff:24:5d:97:94:8d:23:e2:22:8b:c7:85:57:16:64:
f1:0f:e6:79:a1:b9:ca:38:02:84:9c:2f:fb:ed:1f:
50:dd:06:d8:30:90:c8:cf:4d:b1:14:17:f7:b9:08:
a8:cc:d1:d7:af:08:3b:22:94:df:9e:da:3f:50:da:
53:95:80:52:a8:2c:32:b8:b5:f0:52:87:df:d8:22:
57:51:13:62:b0:c9:fa:01:36:47:d8:80:2e:45:94:
54:7c:d9:e7:0c:e8:72:86:ad:f7:db:aa:34:5b:ef:
ba:b9:79:9b:31:28:e2:af:14:39:24:8f:c9:e5:54:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:55:F2:D0:00:B7:10:71:3A:8C:9D:DA:C0:51:E6:C8:EC:16:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5988020EDAE11EEBAEB376C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.220.0/22
Signature Algorithm: sha256WithRSAEncryption
68:dc:b2:66:76:68:b5:c8:67:14:14:ad:39:09:41:f7:63:07:
c1:07:cf:a5:aa:39:50:35:3c:78:3f:b5:e4:d9:c7:b1:40:7d:
d1:ec:c9:2b:e5:a3:a5:b9:3e:d0:0a:d2:56:44:66:10:2e:52:
54:7c:b8:91:53:de:49:f6:db:18:af:9d:d8:40:06:d9:f5:d2:
c1:0b:b0:fb:7c:87:b9:fe:ec:79:d8:5d:b2:4d:0f:23:32:46:
e7:63:d4:a0:0c:a9:76:30:a1:24:b7:8b:8c:f1:9c:a7:cf:4d:
35:39:82:58:da:9d:da:e8:23:ae:03:76:bb:24:13:95:5c:e8:
79:28:75:52:ee:e3:f1:58:67:f8:d8:2f:c2:d9:24:de:64:61:
f8:55:ce:15:09:13:f6:56:7c:01:b2:52:85:b3:db:52:48:e0:
c9:9e:f7:4e:1b:78:24:a6:69:93:f5:df:39:ea:68:6d:f8:0e:
7a:79:ae:f4:89:de:6e:df:e7:bf:e7:e7:69:b9:44:95:90:0d:
fb:b4:88:b7:64:3c:ef:4e:67:fd:15:82:63:d2:81:8d:ab:3e:
a1:66:08:79:f5:44:92:e4:90:e5:f2:7e:8b:db:05:a9:b6:e0:
c2:49:d9:bd:d8:2f:67:21:64:cd:cb:91:db:f7:1f:be:19:0c:
9a:25:b8:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIDsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwMzI5MDkyOTIyWhcNMjQwNzAxMDkyOTIyWjAYMRYw
FAYDVQQDEw02NjA2ODlmNi0zMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuNzaJEB9ozonEhJ/nvIOe29qQ8nx/MT/pLA6O7h7vPGiWsAsVeOSn4MO
7HuBSxi5RxUfeCKjTFtSh9YMxCB7r5S/6b8lBFJTzWtSp7JDkXz0cFO4IA8xFhcA
vPjaZa7sEIUHrDJzC2vAQtWhMdPsiIT57Ip5HJ2Opf+l+G4AHNjnrwC+vtv/JF2X
lI0j4iKLx4VXFmTxD+Z5obnKOAKEnC/77R9Q3QbYMJDIz02xFBf3uQiozNHXrwg7
IpTfnto/UNpTlYBSqCwyuLXwUoff2CJXURNisMn6ATZH2IAuRZRUfNnnDOhyhq33
26o0W++6uXmbMSjirxQ5JI/J5VS9mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLpL
VfLQALcQcTqMndrAUebI7BZgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENTk4ODAyMEVEQUUxMUVFQkFFQjM3NkM3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOPcMA0GCSqGSIb3DQEBCwUA
A4IBAQBo3LJmdmi1yGcUFK05CUH3YwfBB8+lqjlQNTx4P7Xk2cexQH3R7Mkr5aOl
uT7QCtJWRGYQLlJUfLiRU95J9tsYr53YQAbZ9dLBC7D7fIe5/ux52F2yTQ8jMkbn
Y9SgDKl2MKEkt4uM8Zynz001OYJY2p3a6COuA3a7JBOVXOh5KHVS7uPxWGf42C/C
2STeZGH4Vc4VCRP2VnwBslKFs9tSSODJnvdOG3gkpmmT9d856mht+A56ea70id5u
3+e/5+dpuUSVkA37tIi3ZDzvTmf9FYJj0oGNqz6hZgh59USS5JDl8n6L2wWptuDC
Sdm92C9nIWTNy5Hb9x++GQyaJbhn
-----END CERTIFICATE-----
Generated at Wed May 1 13:30:10 2024 by rpki-client on console-fra.rpki-client.org