Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2C75862037811EF80CA6231017001B1.roa
File: F2C75862037811EF80CA6231017001B1.roa (raw, json)
Hash identifier: Ygk1fHhMzXbx8b5VMahOW+9NkcfXx56Qyyv6iopamwo=
Subject key identifier: 97:79:B2:94:B2:A7:21:B2:84:55:05:AB:01:B5:40:AE:77:81:06:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8566
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2C75862037811EF80CA6231017001B1.roa
Signing time: Fri 26 Apr 2024 02:59:08 +0000
ROA not before: Fri 26 Apr 2024 02:59:04 +0000
ROA not after: Sun 12 May 2024 02:59:04 +0000
asID: 397630
IP address blocks: 156.239.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34150 (0x8566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 02:59:04 2024 GMT
Not After : May 12 02:59:04 2024 GMT
Subject: CN=662b187b-4193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:a4:f5:a2:fc:68:42:6d:c2:a5:f2:4e:b2:
97:0f:03:f5:8b:83:4b:60:4c:6f:28:99:03:8f:80:
7b:56:47:21:be:f1:ba:88:c8:9b:e8:7c:f5:ab:89:
26:2f:24:7c:91:e3:31:5b:1f:9c:50:23:ad:45:ff:
04:6d:d0:ca:6c:22:3c:bc:7f:c1:7c:a1:5e:e9:cb:
bf:ba:06:20:ff:93:d3:78:3a:c1:f3:42:d0:9e:ae:
ea:a4:62:be:b6:5d:94:ef:ba:e9:1e:b3:3b:0b:e1:
a0:de:14:6c:82:fc:71:4b:54:70:3c:8b:77:1f:48:
c1:6b:53:1a:97:9b:56:d5:1f:f6:96:88:6c:49:0f:
4e:f3:cf:83:1f:da:ab:9d:39:4d:c6:8e:32:c4:2d:
50:b7:d6:3f:2f:4f:82:9e:e0:84:fe:5c:e0:9d:de:
0a:df:30:35:de:ea:21:fc:9d:e3:da:0a:3d:3d:1a:
cb:e5:36:ab:8b:d4:8a:d5:ed:45:3a:36:1d:c0:cf:
3a:96:dd:5a:3b:9f:08:c7:9c:11:25:fd:e2:15:99:
b1:61:52:f9:72:dc:52:35:9e:cd:fc:7d:fc:ff:23:
b4:d3:06:04:23:59:07:2a:ae:0f:3a:b1:48:43:26:
2f:03:1a:f4:58:84:a0:89:34:e1:ce:16:1e:db:bd:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:B2:94:B2:A7:21:B2:84:55:05:AB:01:B5:40:AE:77:81:06:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2C75862037811EF80CA6231017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d0:63:94:17:03:fc:a4:ac:d9:37:98:c1:8b:46:7e:04:25:
77:41:6b:66:1a:5c:16:cf:d8:4e:68:e9:55:2b:2b:4d:65:2a:
8f:ed:c3:eb:17:36:dd:67:5e:53:8c:6e:95:e8:56:b0:cf:df:
73:b9:e1:41:eb:d5:f7:98:1b:95:42:0b:ea:c2:58:1c:1d:d1:
6e:8c:88:af:f5:31:a7:75:e6:e2:7b:14:e7:d7:24:e0:c8:b1:
e4:50:45:f3:96:af:86:39:a1:34:db:47:c1:78:f2:bb:39:d3:
22:15:b5:53:a2:fc:d0:79:b2:2a:30:a7:8b:ac:8d:63:96:1f:
5c:44:f0:b9:0d:92:16:0d:d3:72:48:75:5c:77:ec:d6:4d:5d:
b3:2d:b3:1c:1b:40:cf:34:8a:b0:78:ed:3d:a3:f0:22:9a:40:
70:0b:94:54:c4:bc:8f:ff:c0:e9:d3:1a:b4:5b:4b:d7:e1:df:
57:a1:d9:37:28:e0:ab:a2:f7:f5:5a:f6:b8:2c:b0:aa:80:ac:
48:0b:59:0d:4e:7e:80:cb:79:00:84:9d:ea:5b:85:98:34:82:
a4:69:a9:a4:40:a8:2f:64:e9:0d:c7:8d:05:96:c4:92:d8:77:
e4:f0:fe:4e:b5:d0:85:3d:1c:81:ed:6f:5c:ae:d6:e6:d0:f9:
af:1b:bc:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIVmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDI1OTA0WhcNMjQwNTEyMDI1OTA0WjAYMRYw
FAYDVQQDEw02NjJiMTg3Yi00MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1fWk9aL8aEJtwqXyTrKXDwP1i4NLYExvKJkDj4B7VkchvvG6iMib6Hz1
q4kmLyR8keMxWx+cUCOtRf8EbdDKbCI8vH/BfKFe6cu/ugYg/5PTeDrB80LQnq7q
pGK+tl2U77rpHrM7C+Gg3hRsgvxxS1RwPIt3H0jBa1Mal5tW1R/2lohsSQ9O88+D
H9qrnTlNxo4yxC1Qt9Y/L0+CnuCE/lzgnd4K3zA13uoh/J3j2go9PRrL5Tari9SK
1e1FOjYdwM86lt1aO58Ix5wRJf3iFZmxYVL5ctxSNZ7N/H38/yO00wYEI1kHKq4P
OrFIQyYvAxr0WISgiTThzhYe271c0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJd5
spSypyGyhFUFqwG1QK53gQarMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMkM3NTg2MjAzNzgxMUVGODBDQTYyMzEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO83MA0GCSqGSIb3DQEBCwUA
A4IBAQAL0GOUFwP8pKzZN5jBi0Z+BCV3QWtmGlwWz9hOaOlVKytNZSqP7cPrFzbd
Z15TjG6V6Fawz99zueFB69X3mBuVQgvqwlgcHdFujIiv9TGndebiexTn1yTgyLHk
UEXzlq+GOaE020fBePK7OdMiFbVTovzQebIqMKeLrI1jlh9cRPC5DZIWDdNySHVc
d+zWTV2zLbMcG0DPNIqweO09o/AimkBwC5RUxLyP/8Dp0xq0W0vX4d9Xodk3KOCr
ovf1Wva4LLCqgKxIC1kNTn6Ay3kAhJ3qW4WYNIKkaamkQKgvZOkNx40FlsSS2Hfk
8P5OtdCFPRyB7W9crtbm0PmvG7zo
-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org