Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF526BF8539D11EEA25514594AD9E6FC.roa
File: EF526BF8539D11EEA25514594AD9E6FC.roa (raw, json)
Hash identifier: e4DSbJRIUbB0GGk9LKEedZ1LPMGkCACD0++d64CIVEM=
Subject key identifier: 11:9D:6E:05:55:6C:04:E3:55:D0:2A:62:A1:38:75:67:DC:0B:DE:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3960
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF526BF8539D11EEA25514594AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:00:29 +0000
ROA not before: Fri 15 Sep 2023 08:00:25 +0000
ROA not after: Sat 08 Jun 2024 08:00:25 +0000
asID: 138152
IP address blocks: 156.236.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14688 (0x3960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:00:25 2023 GMT
Not After : Jun 8 08:00:25 2024 GMT
Subject: CN=65040f1c-4b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:fc:67:38:98:ad:94:ed:25:f3:cc:0d:c7:
d6:20:00:f0:5c:12:b6:40:81:a9:84:39:f0:0e:07:
ab:6d:a1:de:56:ca:79:4e:d3:87:e2:fa:f2:6d:40:
d5:5a:2a:63:3a:79:fa:2a:13:59:28:56:46:2c:4a:
cd:4e:9a:5a:57:84:01:2b:fc:8a:a3:2a:6c:02:50:
ee:62:db:8e:71:a6:83:b9:53:91:1b:5e:a2:bd:94:
04:eb:9a:02:d3:a3:99:41:e1:f2:59:45:d2:1a:a6:
9b:d0:c3:e9:90:ad:88:b3:1d:21:5e:10:98:1b:d2:
db:8b:e0:67:7d:70:33:91:a9:d7:63:ff:59:7b:07:
6c:a4:8c:7c:11:65:8f:0f:5d:20:82:2a:94:42:1d:
76:48:d1:a0:5e:60:96:d8:73:fb:74:86:a9:0b:cc:
48:43:1f:d9:cd:ff:a3:38:c5:34:a7:45:87:0b:13:
0d:ae:eb:5c:77:7f:95:72:f5:bc:48:98:fa:d9:0a:
98:75:17:07:ce:7d:1c:68:ae:bb:50:aa:5d:1a:49:
71:f8:f3:7d:c9:ed:42:bb:72:d3:ce:69:0a:61:51:
80:71:d5:7b:e4:0e:8b:a3:d7:0a:47:06:f2:e0:42:
17:3a:ac:0e:38:61:c8:10:2d:32:7b:4b:55:87:ed:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:6E:05:55:6C:04:E3:55:D0:2A:62:A1:38:75:67:DC:0B:DE:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF526BF8539D11EEA25514594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.74.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a9:de:29:da:b8:5c:ef:60:11:b8:e5:29:db:d8:5f:d4:56:
ca:dc:83:ad:2d:f5:8f:dd:09:33:c4:fa:dd:9f:3b:e9:ed:92:
63:5d:f0:59:b7:18:e4:cc:ed:74:50:ff:ce:54:51:28:c0:f7:
56:d3:20:74:80:f3:80:42:ca:67:7d:ec:88:53:2a:a5:a2:c9:
63:f5:ce:c4:81:39:e6:b3:64:5f:09:17:74:02:fa:3a:fa:67:
c5:50:38:dd:55:6e:d9:1f:75:a0:c3:04:a3:84:df:59:28:7c:
55:f6:b4:a2:52:13:36:b7:bf:68:4b:9c:42:15:f2:4f:ff:d2:
ed:8d:ab:98:c6:06:df:64:f8:39:57:58:c8:84:7d:7d:2c:b8:
dc:f4:e0:58:76:5d:88:34:bb:4a:39:b0:08:78:52:05:4f:59:
95:8f:bf:f2:81:db:d4:4e:4b:4a:b6:92:4a:9a:35:a0:82:5c:
ea:91:27:1d:bc:b1:36:76:85:ec:6d:63:93:fb:c6:11:d8:39:
60:85:8a:e3:b3:f6:e8:7d:16:c0:a6:6c:47:49:b7:82:a2:93:
e8:ff:0b:25:9e:ab:02:c4:06:66:b9:cc:8a:2b:5f:60:4b:ac:
65:f6:e1:fe:2b:66:e6:01:d6:c6:ad:27:8b:a3:a2:a0:b8:44:
fd:08:19:f3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOWAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MTUwODAwMjVaFw0yNDA2MDgwODAwMjVaMBgxFjAU
BgNVBAMTDTY1MDQwZjFjLTRiMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU/vxnOJitlO0l88wNx9YgAPBcErZAgamEOfAOB6ttod5WynlO04fi+vJt
QNVaKmM6efoqE1koVkYsSs1OmlpXhAEr/IqjKmwCUO5i245xpoO5U5EbXqK9lATr
mgLTo5lB4fJZRdIappvQw+mQrYizHSFeEJgb0tuL4Gd9cDORqddj/1l7B2ykjHwR
ZY8PXSCCKpRCHXZI0aBeYJbYc/t0hqkLzEhDH9nN/6M4xTSnRYcLEw2u61x3f5Vy
9bxImPrZCph1FwfOfRxorrtQql0aSXH4833J7UK7ctPOaQphUYBx1XvkDouj1wpH
BvLgQhc6rA44YcgQLTJ7S1WH7Y3xAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUEZ1u
BVVsBONV0CpioTh1Z9wL3qwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0VGNTI2QkY4NTM5RDExRUVBMjU1MTQ1OTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7EowDQYJKoZIhvcNAQELBQAD
ggEBAESp3inauFzvYBG45Snb2F/UVsrcg60t9Y/dCTPE+t2fO+ntkmNd8Fm3GOTM
7XRQ/85UUSjA91bTIHSA84BCymd97IhTKqWiyWP1zsSBOeazZF8JF3QC+jr6Z8VQ
ON1VbtkfdaDDBKOE31kofFX2tKJSEza3v2hLnEIV8k//0u2Nq5jGBt9k+DlXWMiE
fX0suNz04Fh2XYg0u0o5sAh4UgVPWZWPv/KB29ROS0q2kkqaNaCCXOqRJx28sTZ2
hextY5P7xhHYOWCFiuOz9uh9FsCmbEdJt4Kik+j/CyWeqwLEBma5zIorX2BLrGX2
4f4rZuYB1satJ4ujoqC4RP0IGfM=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:19 2024 by rpki-client on console-fra.rpki-client.org