Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D754B674A4BD11EF9829D57F762E951A.roa
File: D754B674A4BD11EF9829D57F762E951A.roa (raw, json)
Hash identifier: ObbKKrLMY1C8IojNupnQ2oGsZR22h9Aw4u/9jIcPjxU=
Subject key identifier: 4F:96:B4:AF:C3:FD:DC:EC:51:33:46:63:6A:46:B2:C9:7B:95:1A:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D467
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D754B674A4BD11EF9829D57F762E951A.roa
Signing time: Sun 17 Nov 2024 08:27:54 +0000
ROA not before: Sun 17 Nov 2024 08:27:50 +0000
ROA not after: Tue 10 Dec 2024 08:27:50 +0000
asID: 64267
IP address blocks: 156.248.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54375 (0xd467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 08:27:50 2024 GMT
Not After : Dec 10 08:27:50 2024 GMT
Subject: CN=6739a90a-e4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:46:6b:cb:44:9e:94:11:52:e9:b5:7f:5b:
6b:2d:c1:e8:7c:60:7b:ce:12:ac:30:52:65:61:ad:
23:35:ff:32:9d:c1:09:b0:fd:c2:ef:a0:6a:a9:04:
f9:58:ef:e5:d2:8a:40:bc:e6:ba:d5:f1:ba:e3:4f:
50:93:b4:30:5d:79:f7:ae:e8:59:3d:c2:ad:1b:79:
96:75:a8:58:6e:59:6e:63:17:69:60:8d:c0:f9:4c:
0a:2d:a8:2b:6f:d6:0d:99:cf:8f:d7:19:2a:75:ce:
3e:9f:b6:98:a8:a5:6a:8b:3a:4d:87:7f:e1:44:3f:
68:e7:82:60:aa:9d:1c:81:49:8e:5d:5e:70:b0:e1:
3e:23:07:b9:cc:30:01:68:e4:98:62:60:23:a7:10:
f9:6d:3a:77:b8:0c:0e:d1:1b:a7:45:38:45:9f:11:
65:d0:9d:f4:24:d5:fb:8b:c4:eb:60:31:7e:28:32:
53:11:58:b1:44:5f:78:f0:a5:ee:c2:67:ab:4d:f2:
6f:ea:93:68:7f:72:33:47:4a:8c:7f:b9:5a:c2:24:
85:69:17:3d:44:5f:c8:5f:03:2e:97:13:7a:84:e9:
fa:68:76:26:09:30:44:26:d8:98:92:bf:52:68:cd:
db:52:11:fc:c3:37:ff:33:50:c6:00:6d:60:94:47:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:B4:AF:C3:FD:DC:EC:51:33:46:63:6A:46:B2:C9:7B:95:1A:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D754B674A4BD11EF9829D57F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.100.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:c8:35:87:68:ac:a0:cb:b6:54:a6:82:f7:9f:7b:ff:bf:e4:
97:c2:63:fb:b7:31:ba:1e:04:2d:46:8e:99:ab:70:25:34:ec:
9a:02:84:15:69:3d:c5:a2:8a:43:12:2a:d1:dd:b8:13:35:a1:
89:d0:8f:54:b1:43:d5:67:5e:e1:99:25:a5:38:09:dd:d4:de:
f5:08:68:8e:aa:de:49:10:99:03:19:98:2a:e9:c7:e3:76:af:
b5:fa:ab:82:ea:91:17:6c:aa:a5:29:78:f7:7b:f8:f4:95:fc:
1e:42:48:7b:93:a4:66:a1:c2:a8:ff:2a:26:25:a7:93:2d:45:
92:84:8b:fa:44:1e:39:a7:09:c0:ff:5e:b2:67:c2:2e:81:d2:
be:1f:24:8f:c9:b9:13:59:3e:84:49:c2:c9:b9:36:25:39:27:
85:76:af:1d:fb:8c:2c:dd:fb:25:fb:0e:c2:f1:09:e0:bb:93:
69:3c:5e:12:71:47:c8:b5:77:67:8d:ff:03:fd:04:e8:3c:aa:
73:aa:4e:b5:5a:ee:84:88:70:3a:26:c0:25:3b:47:ea:5f:dc:
07:29:30:81:45:cf:75:c8:70:7e:9e:ef:1b:2d:d1:5e:88:8c:
a8:2a:92:37:a4:54:34:0c:99:51:c7:51:54:eb:32:6f:2b:9a:
fa:2c:62:95
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANRnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE3MDgyNzUwWhcNMjQxMjEwMDgyNzUwWjAYMRYw
FAYDVQQDEw02NzM5YTkwYS1lNGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAro5Ga8tEnpQRUum1f1trLcHofGB7zhKsMFJlYa0jNf8yncEJsP3C76Bq
qQT5WO/l0opAvOa61fG6409Qk7QwXXn3ruhZPcKtG3mWdahYblluYxdpYI3A+UwK
Lagrb9YNmc+P1xkqdc4+n7aYqKVqizpNh3/hRD9o54Jgqp0cgUmOXV5wsOE+Iwe5
zDABaOSYYmAjpxD5bTp3uAwO0RunRThFnxFl0J30JNX7i8TrYDF+KDJTEVixRF94
8KXuwmerTfJv6pNof3IzR0qMf7lawiSFaRc9RF/IXwMulxN6hOn6aHYmCTBEJtiY
kr9SaM3bUhH8wzf/M1DGAG1glEfOJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE+W
tK/D/dzsUTNGY2pGssl7lRrLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENzU0QjY3NEE0QkQxMUVGOTgyOUQ1N0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPhkMA0GCSqGSIb3DQEBCwUA
A4IBAQBtyDWHaKygy7ZUpoL3n3v/v+SXwmP7tzG6HgQtRo6Zq3AlNOyaAoQVaT3F
oopDEirR3bgTNaGJ0I9UsUPVZ17hmSWlOAnd1N71CGiOqt5JEJkDGZgq6cfjdq+1
+quC6pEXbKqlKXj3e/j0lfweQkh7k6RmocKo/yomJaeTLUWShIv6RB45pwnA/16y
Z8IugdK+HySPybkTWT6EScLJuTYlOSeFdq8d+4ws3fsl+w7C8Qngu5NpPF4ScUfI
tXdnjf8D/QToPKpzqk61Wu6EiHA6JsAlO0fqX9wHKTCBRc91yHB+nu8bLdFeiIyo
KpI3pFQ0DJlRx1FU6zJvK5r6LGKV
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:52 2024 by rpki-client on console-ams.rpki-client.org