Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33FCD7086F811EF92806AA3762E951A.roa
File: F33FCD7086F811EF92806AA3762E951A.roa (raw, json)
Hash identifier: i93X3K4sP0k8+fSqLyzAyv/HgFaNZUX5mcmoHUh6a50=
Subject key identifier: C9:08:20:75:8E:28:E7:09:F2:02:64:6E:5C:41:88:23:3F:9A:B8:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C2EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33FCD7086F811EF92806AA3762E951A.roa
Signing time: Thu 10 Oct 2024 11:15:26 +0000
ROA not before: Thu 10 Oct 2024 11:15:22 +0000
ROA not after: Fri 20 Dec 2024 11:15:22 +0000
asID: 142286
IP address blocks: 156.250.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49899 (0xc2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 11:15:22 2024 GMT
Not After : Dec 20 11:15:22 2024 GMT
Subject: CN=6707b74e-1b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:d1:64:2f:e3:2b:14:ba:1b:d5:c3:8d:9a:
5c:b5:fc:e7:bd:7d:9d:22:03:dc:32:ec:26:f5:f8:
6f:fa:9d:3a:d1:3c:12:3f:03:a1:ff:31:f9:b9:01:
25:09:95:25:0f:7c:d0:92:79:f1:35:04:79:1b:4a:
06:a0:d7:27:26:41:33:00:c5:ff:e6:30:58:74:89:
0f:45:af:65:8c:31:92:04:9c:4b:38:36:0a:33:1c:
13:42:98:f8:f6:61:23:bf:c2:dd:75:93:eb:8a:c1:
e9:ce:38:a5:cc:30:2d:3f:3f:bd:ed:30:19:40:e5:
e0:3e:d1:dd:48:97:04:0b:7d:a3:8e:9a:b6:e3:79:
23:da:25:c1:8e:c7:7a:a5:45:db:05:90:8b:56:3b:
63:5f:4b:09:4c:31:b5:18:dd:df:cf:86:60:e5:95:
ff:ba:c7:e2:02:07:89:21:bc:27:d3:40:02:56:b8:
1f:1d:e9:02:d9:04:78:c8:de:80:d9:7d:60:3b:74:
d4:86:94:5e:95:a9:40:f1:2a:3b:2e:3f:c1:a1:f0:
48:a9:05:72:97:33:fa:9f:c6:02:5e:71:e4:a8:95:
96:17:0a:ba:8d:4a:a3:46:5f:53:6c:33:79:3e:73:
fd:2c:cc:53:8b:e0:8a:74:de:42:eb:72:15:51:69:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:08:20:75:8E:28:E7:09:F2:02:64:6E:5C:41:88:23:3F:9A:B8:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F33FCD7086F811EF92806AA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:e0:14:aa:1b:78:9a:56:a6:74:6d:23:e7:54:f0:8e:19:ea:
a0:bb:38:0e:2d:7b:e5:c3:ac:fd:fc:a4:25:b1:fc:2e:c1:8c:
84:46:4b:49:c9:d0:ce:2e:d6:f2:64:18:ef:f0:f5:7b:3a:47:
48:b7:20:ac:fa:19:f3:1f:61:00:f0:af:a2:bb:c5:f4:0a:58:
1c:f9:72:d5:c2:97:ec:d3:90:67:3b:a0:23:16:c6:7a:9a:56:
9b:dd:ab:d9:1b:a3:f8:52:85:31:ff:66:8b:0c:c1:3a:a0:52:
9f:38:bc:ca:83:b2:6c:df:df:df:64:89:f9:6c:b3:2d:b9:2b:
44:58:00:04:31:09:1d:88:b2:c5:1b:46:b6:0b:d6:fb:6b:49:
20:08:19:bb:28:2d:cb:2b:c3:fa:58:84:a1:f1:45:a5:bc:8e:
5c:27:46:54:4d:ce:f2:aa:ad:a3:0c:c1:69:2e:6a:7a:a9:c4:
fd:13:ff:c6:06:b9:1f:8d:fa:5f:42:57:8a:ef:57:2b:c2:a2:
da:0c:3c:19:37:9a:e3:19:ef:9a:76:f9:e9:5a:26:f1:83:b0:
c9:af:fc:c6:86:27:0b:ab:9e:de:a2:da:90:00:26:6d:82:41:
88:76:ac:f1:7c:e0:31:96:c9:b7:0c:5d:5d:56:6c:35:8a:d3:
24:7b:18:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMLrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDEwMTExNTIyWhcNMjQxMjIwMTExNTIyWjAYMRYw
FAYDVQQDEw02NzA3Yjc0ZS0xYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxi/RZC/jKxS6G9XDjZpctfznvX2dIgPcMuwm9fhv+p060TwSPwOh/zH5
uQElCZUlD3zQknnxNQR5G0oGoNcnJkEzAMX/5jBYdIkPRa9ljDGSBJxLODYKMxwT
Qpj49mEjv8LddZPrisHpzjilzDAtPz+97TAZQOXgPtHdSJcEC32jjpq243kj2iXB
jsd6pUXbBZCLVjtjX0sJTDG1GN3fz4Zg5ZX/usfiAgeJIbwn00ACVrgfHekC2QR4
yN6A2X1gO3TUhpRelalA8So7Lj/BofBIqQVylzP6n8YCXnHkqJWWFwq6jUqjRl9T
bDN5PnP9LMxTi+CKdN5C63IVUWmAswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMkI
IHWOKOcJ8gJkblxBiCM/mrhSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzNGQ0Q3MDg2RjgxMUVGOTI4MDZBQTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPpAMA0GCSqGSIb3DQEBCwUA
A4IBAQA74BSqG3iaVqZ0bSPnVPCOGeqguzgOLXvlw6z9/KQlsfwuwYyERktJydDO
LtbyZBjv8PV7OkdItyCs+hnzH2EA8K+iu8X0Clgc+XLVwpfs05BnO6AjFsZ6mlab
3avZG6P4UoUx/2aLDME6oFKfOLzKg7Js39/fZIn5bLMtuStEWAAEMQkdiLLFG0a2
C9b7a0kgCBm7KC3LK8P6WISh8UWlvI5cJ0ZUTc7yqq2jDMFpLmp6qcT9E//GBrkf
jfpfQleK71crwqLaDDwZN5rjGe+advnpWibxg7DJr/zGhicLq57eotqQACZtgkGI
dqzxfOAxlsm3DF1dVmw1itMkexiQ
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:54 2024 by rpki-client on console-fra.rpki-client.org