Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE7090707FD511EEA6F1E56A4AD9E6FC.roa
File: EE7090707FD511EEA6F1E56A4AD9E6FC.roa (raw, json)
Hash identifier: zYydUzNH1fmUg7b0obSOJOv+8ENxImkX1cir+LZiYAM=
Subject key identifier: 2D:7D:AB:5C:F9:2C:B4:6B:8E:BB:79:93:8E:DC:72:DA:74:B3:43:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 462C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE7090707FD511EEA6F1E56A4AD9E6FC.roa
Signing time: Fri 10 Nov 2023 14:32:10 +0000
ROA not before: Fri 10 Nov 2023 14:32:07 +0000
ROA not after: Tue 12 Nov 2024 14:32:07 +0000
asID: 397630
IP address blocks: 156.239.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17964 (0x462c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 14:32:07 2023 GMT
Not After : Nov 12 14:32:07 2024 GMT
Subject: CN=654e3eea-c35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:36:1e:4b:03:48:a7:2a:20:8d:28:72:9e:
b2:03:07:20:d6:fe:69:e4:29:77:c2:1c:aa:19:0d:
ba:dd:eb:b8:e0:51:a2:32:0d:d9:5e:79:5f:e9:96:
dc:58:b1:4e:33:21:8b:33:c1:1c:b3:3a:21:c8:ab:
e9:b6:51:9e:6d:8a:15:d1:e4:fe:29:bd:8e:c3:0a:
a3:7c:58:e0:5e:d1:1f:d3:69:3e:26:54:70:7c:f8:
b6:e9:8e:4c:98:df:a7:42:e7:8e:cd:60:44:35:e1:
77:75:4b:55:f9:d7:c1:82:16:b2:5a:89:99:f2:ab:
62:7d:22:91:27:d6:38:7b:f2:56:c7:3b:16:7d:af:
4e:cf:53:6c:f1:e8:83:68:37:64:b7:ca:33:46:1c:
d7:4b:47:b2:01:ad:b0:89:06:b4:1e:75:93:b9:c0:
c0:f5:fd:f4:fd:7b:4c:cf:ae:98:6e:b3:a4:dc:3f:
c3:b4:f8:39:59:72:97:88:09:a0:f5:5e:6a:8b:cd:
a3:a0:78:a0:a3:5d:a8:cc:01:d0:8f:fe:16:af:e0:
cf:f3:3f:ed:3c:0f:7f:25:27:6a:4a:5d:80:be:01:
91:ff:7f:71:07:6c:77:b9:6c:51:65:4d:d9:94:5e:
71:2b:ec:04:5e:b6:46:0b:77:e0:e0:bb:f7:2b:27:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:AB:5C:F9:2C:B4:6B:8E:BB:79:93:8E:DC:72:DA:74:B3:43:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE7090707FD511EEA6F1E56A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.36.0/24
Signature Algorithm: sha256WithRSAEncryption
57:52:20:ed:60:fe:d7:37:44:b7:9d:03:a2:b7:0d:b9:fd:93:
d9:4d:0f:2b:ca:5d:58:38:f8:31:ed:13:e7:6d:af:5e:c9:90:
43:2c:6a:e9:7e:fe:3b:99:b8:9a:69:ed:77:e7:29:39:e7:30:
8e:24:a6:1b:9e:f9:dc:a1:54:9e:70:36:48:ba:b0:f9:a0:d9:
9f:8d:86:c3:73:b6:24:ab:f2:12:a3:68:9b:0a:6c:f0:b9:fc:
eb:3f:d2:89:2e:89:93:fa:40:7c:41:95:5b:0e:1e:a0:f7:88:
fa:54:05:d9:79:4a:16:86:a5:95:21:4c:6e:5f:b9:14:70:db:
90:df:39:be:fb:4f:5b:2c:5e:3e:ba:3e:e6:34:dc:b5:cb:cb:
7f:c3:f4:ed:35:fa:53:24:8d:69:c2:4a:7d:d8:21:23:04:cf:
ae:05:15:67:ee:d6:77:31:46:21:1d:87:a5:48:87:b0:c0:e7:
51:ad:3a:df:4d:3c:1a:9b:82:fe:b1:4e:3f:92:46:34:e5:49:
3b:3a:f6:7a:da:88:7c:5b:f3:e4:4a:0e:56:77:89:2e:02:84:
b9:a5:32:c9:e7:5a:3d:58:80:ce:d2:bb:7f:01:7a:b2:52:65:
da:aa:66:a0:a5:c5:4e:f9:48:d9:9f:f6:a6:90:2c:62:ac:99:
ff:dc:42:db
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRiwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMTAxNDMyMDdaFw0yNDExMTIxNDMyMDdaMBgxFjAU
BgNVBAMTDTY1NGUzZWVhLWMzNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHKTYeSwNIpyogjShynrIDByDW/mnkKXfCHKoZDbrd67jgUaIyDdleeV/p
ltxYsU4zIYszwRyzOiHIq+m2UZ5tihXR5P4pvY7DCqN8WOBe0R/TaT4mVHB8+Lbp
jkyY36dC547NYEQ14Xd1S1X518GCFrJaiZnyq2J9IpEn1jh78lbHOxZ9r07PU2zx
6INoN2S3yjNGHNdLR7IBrbCJBrQedZO5wMD1/fT9e0zPrphus6TcP8O0+DlZcpeI
CaD1XmqLzaOgeKCjXajMAdCP/hav4M/zP+08D38lJ2pKXYC+AZH/f3EHbHe5bFFl
TdmUXnEr7ARetkYLd+Dgu/crJ+BBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQULX2r
XPkstGuOu3mTjtxy2nSzQwAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0VFNzA5MDcwN0ZENTExRUVBNkYxRTU2QTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7yQwDQYJKoZIhvcNAQELBQAD
ggEBAFdSIO1g/tc3RLedA6K3Dbn9k9lNDyvKXVg4+DHtE+dtr17JkEMsaul+/juZ
uJpp7XfnKTnnMI4kphue+dyhVJ5wNki6sPmg2Z+NhsNztiSr8hKjaJsKbPC5/Os/
0okuiZP6QHxBlVsOHqD3iPpUBdl5ShaGpZUhTG5fuRRw25DfOb77T1ssXj66PuY0
3LXLy3/D9O01+lMkjWnCSn3YISMEz64FFWfu1ncxRiEdh6VIh7DA51GtOt9NPBqb
gv6xTj+SRjTlSTs69nraiHxb8+RKDlZ3iS4ChLmlMsnnWj1YgM7Su38BerJSZdqq
ZqClxU75SNmf9qaQLGKsmf/cQts=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:19 2024 by rpki-client on console-fra.rpki-client.org