Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3474E347EB511EEA99270504AD9E6FC.roa
File: F3474E347EB511EEA99270504AD9E6FC.roa (raw, json)
Hash identifier: LtJ+wOdpv+neejuSV546/P5GnZJ7tfeL0IW3+GG4TNw=
Subject key identifier: 7B:78:65:0B:34:F0:E3:94:47:2C:45:D2:40:4F:A6:8A:68:D9:6D:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3474E347EB511EEA99270504AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:10:43 +0000
ROA not before: Thu 09 Nov 2023 04:10:40 +0000
ROA not after: Thu 08 Aug 2024 04:10:40 +0000
asID: 133861
IP address blocks: 156.245.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17623 (0x44d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 04:10:40 2023 GMT
Not After : Aug 8 04:10:40 2024 GMT
Subject: CN=654c5bc3-2a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:55:18:26:c6:74:a4:a2:65:07:c1:2d:ff:
be:0a:09:d0:68:84:3d:3b:37:02:e6:86:35:24:9e:
a4:62:99:0c:a9:fa:07:29:14:ee:fc:dc:3d:24:80:
f3:c9:de:9b:ae:5f:12:24:a0:65:8b:ea:33:c0:31:
f3:7d:07:f0:1e:79:23:d2:33:2b:cb:5a:e5:45:4b:
72:02:4a:00:dc:21:40:fb:81:67:55:90:07:cb:70:
ab:a4:e2:01:b4:58:04:cb:8b:e8:0d:f1:88:63:53:
3b:06:a8:03:00:68:d3:95:a2:f1:d0:fa:d7:90:df:
9c:3b:60:bb:63:e3:3d:c9:2c:80:90:86:b9:2e:9d:
a8:e4:bb:02:55:92:c2:51:91:87:d1:13:e0:46:70:
7f:74:06:56:ca:3e:0e:a6:08:ef:d6:4a:9c:02:4d:
9e:04:c9:a9:1a:98:f7:ea:cb:99:10:0b:49:f5:db:
cb:fe:d8:8f:46:f2:fc:5d:6b:7d:7a:4b:0a:38:80:
11:09:c8:90:1d:cf:53:95:c1:cf:51:c1:11:24:6a:
c5:46:aa:1f:70:a0:4c:01:38:71:b9:53:c2:14:44:
f8:b7:38:fc:2e:7c:82:f7:38:b8:1e:d7:1e:4b:b1:
12:e7:a2:bb:92:fd:a2:b0:34:89:d7:e4:64:73:c4:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:65:0B:34:F0:E3:94:47:2C:45:D2:40:4F:A6:8A:68:D9:6D:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3474E347EB511EEA99270504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:87:a0:44:f0:4e:c9:b0:fe:e2:9a:ff:24:67:46:c1:ac:1f:
65:87:f4:57:d8:4c:1d:1b:83:13:9f:0e:d3:ae:ec:94:1a:28:
53:1d:39:66:5b:bd:b0:9b:a6:ac:0d:26:9c:12:6f:60:f9:77:
e1:45:10:7c:b9:37:0b:e4:3b:7c:a7:87:b3:08:44:91:78:b4:
84:27:95:37:a0:51:8c:2c:a1:8d:81:1b:08:70:c8:a5:35:92:
54:86:a3:a7:80:3e:70:7b:94:7c:20:b2:aa:79:a4:ae:a3:15:
95:22:43:c7:c5:0e:a5:d9:9f:60:1b:74:14:f8:fc:b3:28:5b:
1e:ac:3b:76:e3:d5:a8:cb:c8:99:7b:f6:20:47:e3:81:f6:dc:
ed:19:1f:ce:3b:56:01:0f:ec:71:cf:d3:c7:59:48:05:e4:af:
6b:a6:b2:5c:da:d1:a0:e5:20:f1:9c:47:11:da:f2:df:f1:fb:
6e:48:84:68:56:e2:73:f6:e1:a0:97:cc:34:42:86:3a:62:46:
aa:dc:4f:4e:20:c7:91:91:6b:7a:ab:5c:89:37:fb:5f:c4:8c:
4b:1e:b2:29:07:b7:6a:7d:04:88:43:13:b6:4f:f9:3f:94:0c:
19:82:c2:fb:ff:82:2a:db:94:25:5a:b4:28:37:2e:b8:8a:dd:
64:6a:09:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRNcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwNDEwNDBaFw0yNDA4MDgwNDEwNDBaMBgxFjAU
BgNVBAMTDTY1NGM1YmMzLTJhODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG31UYJsZ0pKJlB8Et/74KCdBohD07NwLmhjUknqRimQyp+gcpFO783D0k
gPPJ3puuXxIkoGWL6jPAMfN9B/AeeSPSMyvLWuVFS3ICSgDcIUD7gWdVkAfLcKuk
4gG0WATLi+gN8YhjUzsGqAMAaNOVovHQ+teQ35w7YLtj4z3JLICQhrkunajkuwJV
ksJRkYfRE+BGcH90BlbKPg6mCO/WSpwCTZ4EyakamPfqy5kQC0n128v+2I9G8vxd
a316Swo4gBEJyJAdz1OVwc9RwREkasVGqh9woEwBOHG5U8IURPi3OPwufIL3OLge
1x5LsRLnoruS/aKwNInX5GRzxAELAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUe3hl
CzTw45RHLEXSQE+mimjZbVUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0YzNDc0RTM0N0VCNTExRUVBOTkyNzA1MDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9Q4wDQYJKoZIhvcNAQELBQAD
ggEBAKWHoETwTsmw/uKa/yRnRsGsH2WH9FfYTB0bgxOfDtOu7JQaKFMdOWZbvbCb
pqwNJpwSb2D5d+FFEHy5NwvkO3ynh7MIRJF4tIQnlTegUYwsoY2BGwhwyKU1klSG
o6eAPnB7lHwgsqp5pK6jFZUiQ8fFDqXZn2AbdBT4/LMoWx6sO3bj1ajLyJl79iBH
44H23O0ZH847VgEP7HHP08dZSAXkr2umslza0aDlIPGcRxHa8t/x+25IhGhW4nP2
4aCXzDRChjpiRqrcT04gx5GRa3qrXIk3+1/EjEsesikHt2p9BIhDE7ZP+T+UDBmC
wvv/girblCVatCg3LriK3WRqCdo=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:19 2024 by rpki-client on console-fra.rpki-client.org