Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF81387CA2C911EE934CA932D25BE465.roa
File: EF81387CA2C911EE934CA932D25BE465.roa (raw, json)
Hash identifier: 0qVDkX9rfl7nWktEJnlTpoV/ElONjyZQsRnME5pV3X0=
Subject key identifier: C7:ED:9E:89:83:ED:69:39:23:85:89:A9:16:CF:A5:96:F9:4E:D3:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 58EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF81387CA2C911EE934CA932D25BE465.roa
Signing time: Mon 25 Dec 2023 02:04:28 +0000
ROA not before: Mon 25 Dec 2023 02:04:25 +0000
ROA not after: Mon 13 Jan 2025 02:04:25 +0000
asID: 139057
IP address blocks: 156.251.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22764 (0x58ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 02:04:25 2023 GMT
Not After : Jan 13 02:04:25 2025 GMT
Subject: CN=6588e32c-f305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a4:f8:ed:3a:04:1c:0e:87:22:7b:b4:db:61:
c6:58:de:e6:26:9b:b8:41:00:92:9e:ad:90:eb:e2:
7c:cd:53:6e:8a:6b:5a:1f:b7:0c:81:05:a6:2f:8a:
d6:c6:a7:46:5e:c1:b0:06:0b:ce:a1:a9:ca:22:d9:
3b:dc:b3:bf:9f:90:e9:1a:e0:86:67:10:fb:35:ff:
ba:8e:74:7e:92:cf:91:76:88:13:08:8a:29:43:c5:
6d:ed:c9:cf:aa:89:59:af:03:83:fc:3a:46:42:5b:
83:2e:3e:51:4a:96:7e:1c:15:a7:99:2d:73:5f:c0:
f6:b9:3f:da:b8:6c:89:b9:8e:e8:00:4d:0c:62:63:
35:e8:bc:26:e7:70:3a:be:62:b7:e9:79:5e:ec:f4:
b6:e5:df:61:1f:8d:4e:a0:69:5a:a5:37:15:58:09:
a7:3d:18:56:fc:0d:cd:56:02:cc:e9:4d:09:2a:59:
d6:60:6c:93:60:1c:ab:19:4b:2f:f3:9c:2b:29:9c:
48:48:bd:18:55:b8:eb:e8:bd:bf:b8:e2:8f:24:42:
a7:7d:ae:c2:7c:e4:0e:8c:9a:2b:e1:e5:06:1d:d7:
85:22:ff:15:dc:9a:1f:9f:50:8d:fc:74:d7:bb:9d:
90:6b:f2:c7:a2:66:ea:47:5d:b3:b3:38:70:94:30:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:9E:89:83:ED:69:39:23:85:89:A9:16:CF:A5:96:F9:4E:D3:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF81387CA2C911EE934CA932D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.72.0/24
Signature Algorithm: sha256WithRSAEncryption
94:07:ce:ef:e0:e4:b2:47:da:29:d0:82:bf:35:a8:5d:4e:e5:
e8:b3:33:e0:a2:d0:1b:22:11:4c:2f:ef:24:b0:cc:e8:52:f2:
89:30:62:64:46:60:7b:7d:85:53:d5:27:bc:6a:c9:53:ec:4b:
3a:aa:0b:81:23:e8:37:a7:a2:13:44:7e:e9:8d:e8:dc:7b:e7:
c1:bf:77:b9:ba:e3:65:6e:8e:d9:e6:0e:4c:36:fb:d8:40:18:
c5:cc:fb:8f:4e:63:8d:b1:ff:97:b4:e7:b7:9e:3e:07:ca:fd:
2a:f9:05:10:d7:7f:12:47:f1:c1:87:9a:fc:c4:af:c9:3f:ce:
3b:b0:09:43:61:3f:d2:30:7f:fd:49:71:d2:40:c7:ba:76:14:
68:f8:43:84:1f:e6:6d:28:8b:ce:53:18:ea:69:6f:d5:97:a5:
2b:24:59:7d:45:c6:f4:65:be:85:17:5b:d5:ac:e5:b5:ca:e9:
60:c6:d9:c5:44:94:a4:83:c6:c4:82:eb:b4:ca:e9:95:c2:c0:
57:9a:ed:3a:da:b1:fc:6d:0a:68:36:9d:5c:b7:2c:2b:95:3b:
bb:17:9a:6b:43:d9:85:61:08:ee:11:0d:dd:4d:81:2a:b4:dc:
3c:2e:27:98:a7:5d:b7:bd:1e:cc:71:c8:79:34:0f:1d:cf:f5:
ec:4a:38:46
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICWOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEyMjUwMjA0MjVaFw0yNTAxMTMwMjA0MjVaMBgxFjAU
BgNVBAMTDTY1ODhlMzJjLWYzMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4pPjtOgQcDocie7TbYcZY3uYmm7hBAJKerZDr4nzNU26Ka1oftwyBBaYv
itbGp0ZewbAGC86hqcoi2Tvcs7+fkOka4IZnEPs1/7qOdH6Sz5F2iBMIiilDxW3t
yc+qiVmvA4P8OkZCW4MuPlFKln4cFaeZLXNfwPa5P9q4bIm5jugATQxiYzXovCbn
cDq+YrfpeV7s9Lbl32EfjU6gaVqlNxVYCac9GFb8Dc1WAszpTQkqWdZgbJNgHKsZ
Sy/znCspnEhIvRhVuOvovb+44o8kQqd9rsJ85A6Mmivh5QYd14Ui/xXcmh+fUI38
dNe7nZBr8seiZupHXbOzOHCUMJXZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUx+2e
iYPtaTkjhYmpFs+llvlO078wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0VGODEzODdDQTJDOTExRUU5MzRDQTkzMkQyNUJFNDY1LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+0gwDQYJKoZIhvcNAQELBQAD
ggEBAJQHzu/g5LJH2inQgr81qF1O5eizM+Ci0BsiEUwv7ySwzOhS8okwYmRGYHt9
hVPVJ7xqyVPsSzqqC4Ej6DenohNEfumN6Nx758G/d7m642VujtnmDkw2+9hAGMXM
+49OY42x/5e057eePgfK/Sr5BRDXfxJH8cGHmvzEr8k/zjuwCUNhP9Iwf/1JcdJA
x7p2FGj4Q4Qf5m0oi85TGOppb9WXpSskWX1FxvRlvoUXW9Ws5bXK6WDG2cVElKSD
xsSC67TK6ZXCwFea7TrasfxtCmg2nVy3LCuVO7sXmmtD2YVhCO4RDd1NgSq03Dwu
J5inXbe9HsxxyHk0Dx3P9exKOEY=
-----END CERTIFICATE-----
Generated at Tue May 7 03:10:14 2024 by rpki-client on console-ams.rpki-client.org