Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6420158983511EFBFE39260762E951A.roa
File: E6420158983511EFBFE39260762E951A.roa (raw, json)
Hash identifier: STJ+k18ZzovIpbG5AW+4+1lhTtbPjGK4CsTQJzTCIWg=
Subject key identifier: 15:27:66:18:A9:48:AC:17:79:E2:D9:E7:50:F0:B0:2F:9E:42:44:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6420158983511EFBFE39260762E951A.roa
Signing time: Fri 01 Nov 2024 09:44:33 +0000
ROA not before: Fri 01 Nov 2024 09:44:30 +0000
ROA not after: Mon 25 Nov 2024 09:44:30 +0000
asID: 152092
IP address blocks: 156.245.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52103 (0xcb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:44:30 2024 GMT
Not After : Nov 25 09:44:30 2024 GMT
Subject: CN=6724a301-521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:a1:72:8b:ce:63:4c:ad:62:80:da:a7:96:
2b:74:a4:18:bf:51:db:40:40:1b:58:ff:01:e0:79:
44:8b:38:3a:d9:c1:58:c0:62:bd:da:a4:53:5b:8e:
fa:79:f9:1e:00:a9:db:05:b5:8b:e8:69:1d:f2:35:
56:cc:73:71:93:4d:56:95:d6:a9:6f:de:50:95:ae:
07:09:8a:8e:9c:58:ce:ec:1d:b0:c2:f6:07:96:53:
2e:73:8f:d4:bc:63:58:f6:13:42:18:f7:2e:7d:4e:
bb:a6:2d:7d:97:b7:78:d7:30:87:8b:a8:65:b9:01:
ec:a1:87:52:12:4c:fa:d8:35:85:3d:1c:38:dc:69:
27:12:30:91:61:4f:d8:67:59:b7:52:07:c6:ec:9f:
e4:4e:40:3f:3b:76:2d:57:66:99:f8:07:b8:18:1e:
c4:f4:73:39:d6:ee:58:c2:28:8a:6a:3b:82:53:f8:
cb:e5:ea:9c:31:20:3d:61:db:cc:49:b3:ce:bc:68:
8f:2f:08:2d:98:ed:07:9f:9c:30:12:c0:d3:bb:76:
36:68:48:17:42:55:04:e2:6c:53:c1:dd:cf:d9:f2:
67:f1:8c:ae:b1:d5:e5:ad:3c:b0:e6:08:65:60:8c:
ae:97:1b:f1:e0:d9:66:3f:4e:31:71:15:f7:fb:2f:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:66:18:A9:48:AC:17:79:E2:D9:E7:50:F0:B0:2F:9E:42:44:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6420158983511EFBFE39260762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.198.0/23
Signature Algorithm: sha256WithRSAEncryption
58:06:eb:37:a7:07:94:95:c5:79:f5:8f:fb:dc:46:9a:30:63:
21:1a:be:69:b2:cb:d5:ab:94:a5:00:13:e4:e1:11:17:64:ad:
1e:47:bb:07:4a:3b:a0:44:80:f3:86:dc:c2:25:d7:00:ee:c5:
f8:d9:37:eb:d7:ff:0a:73:37:2b:76:64:34:0a:54:5a:32:86:
8f:c8:37:a8:e3:c5:f8:44:94:7e:76:f1:a7:d0:05:b6:82:5c:
85:71:ce:5a:36:1e:04:ef:c6:cf:31:ba:2c:fe:1a:8d:23:9c:
aa:d6:37:dc:6a:47:38:87:85:58:f8:6d:37:91:6b:f5:14:50:
7c:05:3b:6f:17:65:2a:75:61:5e:5d:58:88:5c:a1:36:5b:5a:
26:81:2f:a9:5c:9b:8b:25:3c:f7:f2:1d:ad:d1:f6:43:23:2e:
2d:47:19:11:ce:96:90:2b:e5:b5:19:5d:e7:3b:7f:c4:59:a4:
40:c7:5c:7d:cc:0b:ef:95:eb:86:0a:2d:65:ba:37:e0:19:c2:
a5:a1:15:1c:b0:83:c8:c6:b5:d2:6f:34:34:c3:75:69:75:da:
72:8e:ce:78:30:93:7b:89:be:6c:a0:32:8b:33:b1:8d:d2:1a:
c2:39:6e:8a:d4:96:c7:5a:90:1d:77:4b:9a:0a:fc:ed:73:e2:
0e:3e:31:55
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMuHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTAxMDk0NDMwWhcNMjQxMTI1MDk0NDMwWjAYMRYw
FAYDVQQDEw02NzI0YTMwMS01MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy96hcovOY0ytYoDap5YrdKQYv1HbQEAbWP8B4HlEizg62cFYwGK92qRT
W476efkeAKnbBbWL6Gkd8jVWzHNxk01Wldapb95Qla4HCYqOnFjO7B2wwvYHllMu
c4/UvGNY9hNCGPcufU67pi19l7d41zCHi6hluQHsoYdSEkz62DWFPRw43GknEjCR
YU/YZ1m3UgfG7J/kTkA/O3YtV2aZ+Ae4GB7E9HM51u5YwiiKajuCU/jL5eqcMSA9
YdvMSbPOvGiPLwgtmO0Hn5wwEsDTu3Y2aEgXQlUE4mxTwd3P2fJn8YyusdXlrTyw
5ghlYIyulxvx4NlmP04xcRX3+y8ldQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBUn
ZhipSKwXeeLZ51DwsC+eQkTQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNjQyMDE1ODk4MzUxMUVGQkZFMzkyNjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPXGMA0GCSqGSIb3DQEBCwUA
A4IBAQBYBus3pweUlcV59Y/73EaaMGMhGr5pssvVq5SlABPk4REXZK0eR7sHSjug
RIDzhtzCJdcA7sX42Tfr1/8KczcrdmQ0ClRaMoaPyDeo48X4RJR+dvGn0AW2glyF
cc5aNh4E78bPMbos/hqNI5yq1jfcakc4h4VY+G03kWv1FFB8BTtvF2UqdWFeXViI
XKE2W1omgS+pXJuLJTz38h2t0fZDIy4tRxkRzpaQK+W1GV3nO3/EWaRAx1x9zAvv
leuGCi1lujfgGcKloRUcsIPIxrXSbzQ0w3Vpddpyjs54MJN7ib5soDKLM7GN0hrC
OW6K1JbHWpAdd0uaCvztc+IOPjFV
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:54 2024 by rpki-client on console-ams.rpki-client.org