Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99B2816F72C11EE88AA1570017001B1.roa
File: E99B2816F72C11EE88AA1570017001B1.roa (raw, json)
Hash identifier: GTHIRccnyKhKEtEaDtU5RHY/HzxKgDq9qYWmUBcCloc=
Subject key identifier: 5F:04:E6:8E:1C:12:10:5B:72:36:5C:8B:A3:C7:4F:9A:7C:AF:10:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99B2816F72C11EE88AA1570017001B1.roa
Signing time: Wed 10 Apr 2024 11:24:37 +0000
ROA not before: Wed 10 Apr 2024 11:24:33 +0000
ROA not after: Thu 17 Oct 2024 11:24:33 +0000
asID: 137443
IP address blocks: 156.226.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33277 (0x81fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 11:24:33 2024 GMT
Not After : Oct 17 11:24:33 2024 GMT
Subject: CN=661676f4-b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:95:46:c4:47:fe:56:6f:14:c9:5c:f5:9c:
16:cc:2b:7f:d1:2d:4b:95:c6:da:b9:08:08:ae:d2:
fe:59:a9:c9:09:60:96:d0:76:3f:45:a5:80:06:53:
38:c1:5a:65:68:b2:86:96:75:af:c4:08:f9:12:82:
b0:c1:ee:23:8a:a0:f0:c3:60:19:7a:2c:2b:db:bb:
4e:3b:5d:d1:c7:a7:2d:a1:47:51:30:ad:4a:19:d3:
2e:46:74:42:46:15:11:96:53:8b:8d:44:43:db:1e:
6a:f5:6a:e4:03:66:dc:72:b2:a5:2e:d4:b4:07:ed:
90:25:da:cb:a1:6c:36:7f:d0:ec:45:df:ec:52:37:
54:98:da:3b:77:fa:4f:a7:d4:bb:a0:da:00:ec:2c:
80:8e:6f:89:03:46:58:6d:7f:c0:bf:bb:f1:12:e0:
2c:b9:e1:83:b3:7d:67:96:5e:97:16:7e:a9:e0:99:
86:09:00:32:2e:10:b0:4d:a8:a2:69:a5:50:87:49:
5a:4f:6d:7a:ec:cb:9c:3e:b3:0d:20:1f:bb:cf:86:
f2:3d:81:0a:36:ea:aa:dc:3c:48:f4:cf:e2:23:41:
04:f7:20:5a:63:9a:44:de:0c:6d:8c:83:1d:fa:84:
d8:60:5e:57:d7:f5:6f:69:01:b2:c8:01:aa:ed:9a:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:E6:8E:1C:12:10:5B:72:36:5C:8B:A3:C7:4F:9A:7C:AF:10:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E99B2816F72C11EE88AA1570017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.16.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:55:44:14:9a:42:61:64:68:33:a9:74:b9:cd:de:fe:d4:60:
7a:8c:12:9f:7d:1a:0f:19:97:3e:5c:1e:e5:26:73:bb:4b:21:
f8:2f:81:e6:2a:0e:80:d2:2b:d2:8e:72:3e:4a:f1:8a:23:16:
fb:34:d5:7c:3e:07:b8:79:ba:bd:f2:48:37:a7:ca:58:96:a0:
31:1a:6b:4e:42:58:7f:38:1f:9d:cd:e9:f3:71:75:9a:0e:7e:
1c:ca:61:ab:ba:20:a7:1d:26:26:e8:1a:3b:f5:ea:64:ac:80:
10:cd:ef:0c:a3:1e:b0:8c:96:19:80:10:9e:0b:a6:e4:70:61:
4d:b3:a5:c8:23:68:ca:92:1a:db:16:46:47:2f:f2:01:49:86:
f1:0a:ad:91:03:48:85:77:01:1e:0b:e9:fe:8c:b2:7a:3e:02:
bc:a4:98:3c:1d:e4:06:e1:be:de:4e:fe:c7:26:52:29:3e:73:
61:19:6d:5a:ae:2a:e9:bb:19:c1:c4:ae:5e:f5:fb:1b:03:4b:
33:71:5d:1e:fc:48:00:89:08:21:88:73:5e:b6:25:74:ca:16:
71:f9:6f:c8:c1:fe:11:11:07:7e:cd:5a:f9:e5:a5:6d:0d:78:
3e:13:70:01:d7:55:40:c9:68:e8:ff:d2:0c:0a:83:1f:4a:31:
f8:58:f4:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIH9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEwMTEyNDMzWhcNMjQxMDE3MTEyNDMzWjAYMRYw
FAYDVQQDEw02NjE2NzZmNC1iNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAseiVRsRH/lZvFMlc9ZwWzCt/0S1LlcbauQgIrtL+WanJCWCW0HY/RaWA
BlM4wVplaLKGlnWvxAj5EoKwwe4jiqDww2AZeiwr27tOO13Rx6ctoUdRMK1KGdMu
RnRCRhURllOLjURD2x5q9WrkA2bccrKlLtS0B+2QJdrLoWw2f9DsRd/sUjdUmNo7
d/pPp9S7oNoA7CyAjm+JA0ZYbX/Av7vxEuAsueGDs31nll6XFn6p4JmGCQAyLhCw
TaiiaaVQh0laT2167MucPrMNIB+7z4byPYEKNuqq3DxI9M/iI0EE9yBaY5pE3gxt
jIMd+oTYYF5X1/VvaQGyyAGq7ZqvLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF8E
5o4cEhBbcjZci6PHT5p8rxBpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOTlCMjgxNkY3MkMxMUVFODhBQTE1NzAwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOIQMA0GCSqGSIb3DQEBCwUA
A4IBAQB7VUQUmkJhZGgzqXS5zd7+1GB6jBKffRoPGZc+XB7lJnO7SyH4L4HmKg6A
0ivSjnI+SvGKIxb7NNV8Pge4ebq98kg3p8pYlqAxGmtOQlh/OB+dzenzcXWaDn4c
ymGruiCnHSYm6Bo79epkrIAQze8Mox6wjJYZgBCeC6bkcGFNs6XII2jKkhrbFkZH
L/IBSYbxCq2RA0iFdwEeC+n+jLJ6PgK8pJg8HeQG4b7eTv7HJlIpPnNhGW1arirp
uxnBxK5e9fsbA0szcV0e/EgAiQghiHNetiV0yhZx+W/Iwf4REQd+zVr55aVtDXg+
E3AB11VAyWjo/9IMCoMfSjH4WPTe
-----END CERTIFICATE-----
Generated at Thu May 2 17:43:00 2024 by rpki-client on console-fra.rpki-client.org