Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3303C9282B311EE809A651C4AD9E6FC.roa
File: F3303C9282B311EE809A651C4AD9E6FC.roa (raw, json)
Hash identifier: qCE35x58DMjZ7VKgBapMhlcyIU1aE4KT90dXE3wQopI=
Subject key identifier: E3:FC:C3:7D:73:66:06:5B:BD:6C:EF:CF:7D:CF:B5:F0:2A:4F:7A:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4910
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3303C9282B311EE809A651C4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:06:29 +0000
ROA not before: Tue 14 Nov 2023 06:06:25 +0000
ROA not after: Tue 12 Nov 2024 06:06:25 +0000
asID: 397630
IP address blocks: 156.239.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18704 (0x4910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 06:06:25 2023 GMT
Not After : Nov 12 06:06:25 2024 GMT
Subject: CN=65530e65-3f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:74:f6:7b:02:fb:f7:46:03:c2:83:3e:39:
7d:e2:5b:a6:8f:c8:01:37:12:0e:15:54:fa:87:2f:
a4:61:b9:39:d4:36:85:83:59:e9:e9:9a:3a:83:ed:
b0:5b:f9:39:6f:da:82:05:63:c4:59:68:49:aa:39:
b8:9e:ef:6b:e1:73:3a:a9:da:e6:4b:1c:39:3a:2e:
e8:a3:ce:15:cb:67:a7:c4:28:75:5d:8a:d7:97:9e:
95:b7:3d:d0:2b:8c:6d:ef:98:51:ac:e1:df:37:db:
93:22:02:fe:a2:40:93:94:d2:b7:bb:7f:56:d2:19:
b0:f6:41:ee:a9:90:6e:da:78:5a:0f:bb:57:03:33:
a5:c9:74:b8:75:ec:a1:10:ca:e9:5f:bc:bd:0e:89:
71:72:c3:f0:cc:f4:b8:21:93:94:3f:63:38:b4:8b:
fc:5e:b4:98:bb:1b:68:b1:0a:f6:d3:bc:fd:e8:5f:
b5:aa:5f:e8:f0:48:78:50:54:99:ef:67:9e:10:60:
40:b5:c7:d0:5b:d9:ac:fb:ec:ad:21:63:85:63:ac:
52:2b:91:b3:45:88:b2:d0:d9:a4:26:35:2b:a5:99:
cc:49:af:f4:1a:9d:7d:b9:f0:a3:cf:98:8e:92:7b:
cb:fe:43:bd:09:dc:5e:77:53:b1:06:7c:61:a4:03:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FC:C3:7D:73:66:06:5B:BD:6C:EF:CF:7D:CF:B5:F0:2A:4F:7A:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3303C9282B311EE809A651C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:87:88:f3:f9:c1:49:e8:5c:87:d8:70:35:7d:c2:95:23:f4:
b8:b5:9d:60:b9:92:29:c8:87:5d:e7:ed:da:8a:4a:b5:9d:c0:
55:0a:9b:35:dd:05:f5:cc:06:3f:7f:fc:b2:bb:57:eb:a0:34:
c7:a8:00:2c:42:f1:5e:09:fb:eb:c2:2a:2f:91:e4:81:5f:5d:
b5:52:f3:ce:5d:e6:97:77:78:3b:56:af:0e:16:10:81:a9:71:
29:bd:75:a1:89:e8:9b:24:63:75:13:4e:88:f6:cc:72:6f:b8:
12:50:78:27:d4:b5:0c:6b:7a:83:94:8f:cb:ae:14:dd:26:9b:
79:db:64:4c:64:86:f0:47:64:dd:8e:56:f2:28:e9:11:a4:14:
d3:5c:0e:59:d3:2a:3f:48:4a:6e:76:3e:38:94:a4:bb:d1:24:
84:bb:c5:c8:b3:67:8e:58:9f:59:02:23:c0:25:1e:0b:66:3c:
94:52:4d:8e:ab:32:53:09:1d:0e:dd:f8:8c:04:6c:c6:42:1f:
5b:9b:c5:61:76:8c:0d:c4:96:91:4d:fd:37:6c:88:aa:3e:43:
0b:1e:e3:d0:4f:9a:37:0c:a6:8e:b9:83:f0:68:aa:61:9e:e6:
32:00:17:bb:9f:42:2e:31:0f:a6:fb:77:98:73:5c:49:36:ef:
f1:b7:d5:44
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICSRAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMTQwNjA2MjVaFw0yNDExMTIwNjA2MjVaMBgxFjAU
BgNVBAMTDTY1NTMwZTY1LTNmMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu7HT2ewL790YDwoM+OX3iW6aPyAE3Eg4VVPqHL6RhuTnUNoWDWenpmjqD
7bBb+Tlv2oIFY8RZaEmqObie72vhczqp2uZLHDk6LuijzhXLZ6fEKHVditeXnpW3
PdArjG3vmFGs4d8325MiAv6iQJOU0re7f1bSGbD2Qe6pkG7aeFoPu1cDM6XJdLh1
7KEQyulfvL0OiXFyw/DM9Lghk5Q/Yzi0i/xetJi7G2ixCvbTvP3oX7WqX+jwSHhQ
VJnvZ54QYEC1x9Bb2az77K0hY4VjrFIrkbNFiLLQ2aQmNSulmcxJr/QanX258KPP
mI6Se8v+Q70J3F53U7EGfGGkA9x3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4/zD
fXNmBlu9bO/Pfc+18CpPeoEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0YzMzAzQzkyODJCMzExRUU4MDlBNjUxQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc7zEwDQYJKoZIhvcNAQELBQAD
ggEBAH2HiPP5wUnoXIfYcDV9wpUj9Li1nWC5kinIh13n7dqKSrWdwFUKmzXdBfXM
Bj9//LK7V+ugNMeoACxC8V4J++vCKi+R5IFfXbVS885d5pd3eDtWrw4WEIGpcSm9
daGJ6JskY3UTToj2zHJvuBJQeCfUtQxreoOUj8uuFN0mm3nbZExkhvBHZN2OVvIo
6RGkFNNcDlnTKj9ISm52PjiUpLvRJIS7xcizZ45Yn1kCI8AlHgtmPJRSTY6rMlMJ
HQ7d+IwEbMZCH1ubxWF2jA3ElpFN/TdsiKo+Qwse49BPmjcMpo65g/BoqmGe5jIA
F7ufQi4xD6b7d5hzXEk27/G31UQ=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:19 2024 by rpki-client on console-fra.rpki-client.org