Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45C5ACA037711EFA8F17B27017001B1.roa
File: F45C5ACA037711EFA8F17B27017001B1.roa (raw, json)
Hash identifier: JTQYrZWcbA9oiOtBTla2EmNriyWYt3XUckEIwgy3OO8=
Subject key identifier: 9C:87:DE:E6:C1:F1:FA:27:3A:81:A2:63:9C:9D:25:56:0B:F2:9F:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 855A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45C5ACA037711EFA8F17B27017001B1.roa
Signing time: Fri 26 Apr 2024 02:52:01 +0000
ROA not before: Fri 26 Apr 2024 02:51:57 +0000
ROA not after: Tue 28 May 2024 02:51:57 +0000
asID: 23470
IP address blocks: 156.225.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34138 (0x855a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 02:51:57 2024 GMT
Not After : May 28 02:51:57 2024 GMT
Subject: CN=662b16d1-813f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:09:1c:04:26:d1:92:31:89:b6:ce:aa:89:
11:74:54:bc:3f:c3:c0:2d:8c:8c:d5:4c:a2:81:46:
04:24:f6:1c:44:c7:09:1b:bc:cf:1f:f3:60:9a:0b:
65:cc:8c:98:c1:6b:b8:3b:d7:d7:fd:b8:3d:45:b8:
64:4b:4b:b4:bf:57:c2:bb:d9:d5:0a:d0:b4:62:8c:
27:d0:e1:f0:c3:1e:85:bd:56:1a:e7:87:e6:d0:00:
62:51:f5:d3:05:cf:6a:4b:98:74:04:b2:11:01:1b:
9b:26:b5:a0:98:5c:13:52:f1:cd:14:83:04:79:ed:
be:62:a4:b3:bc:9e:84:d2:3b:20:d5:42:e2:2c:df:
c0:18:9c:0e:c7:4c:52:db:09:99:4d:12:45:d7:b6:
fb:84:46:f3:b4:a1:a0:d4:55:3a:da:e1:84:bc:1a:
0f:2d:8a:1d:46:a7:68:60:b8:2e:60:b6:8f:58:ff:
e6:b9:d0:a6:b1:1b:0a:38:36:af:ed:aa:c2:8a:63:
e7:b2:8a:ff:a2:33:6c:09:e0:73:ad:e9:27:9b:1e:
4e:c0:f4:5c:73:05:7f:e4:4c:db:fe:c7:dd:c6:dc:
49:09:69:f7:70:da:88:75:74:8c:bf:c4:ba:03:78:
a3:4f:25:7b:1a:f2:c7:14:0b:fb:c6:80:60:a1:bb:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:DE:E6:C1:F1:FA:27:3A:81:A2:63:9C:9D:25:56:0B:F2:9F:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45C5ACA037711EFA8F17B27017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3d:a3:6a:bc:08:f1:09:72:a7:62:bf:84:5e:39:d3:36:c1:
59:8b:31:be:87:75:74:37:cb:12:fc:8a:2c:25:1a:ec:7b:a6:
2f:76:46:f0:cc:b1:d9:0c:da:2d:9a:f1:2f:c9:a7:fc:2a:45:
2f:04:d5:57:ed:23:50:65:63:ef:6a:a5:e4:f1:ff:c5:ff:e5:
46:73:8f:8c:b9:89:65:db:50:e8:4f:84:9d:8c:b9:60:08:46:
eb:96:60:7b:86:4f:6d:66:2d:08:94:bb:f1:30:7f:5e:f2:1f:
d6:34:82:8f:1a:02:28:c1:00:79:b7:10:64:20:ae:1f:66:a7:
80:bd:33:5a:84:c0:a4:03:fd:7c:f8:1d:6c:5a:09:d2:80:3d:
c7:b1:76:c7:32:c2:f5:b2:65:67:79:01:7c:04:58:4d:9c:0b:
c7:c5:a9:54:0c:cf:8a:70:54:38:79:70:72:ac:4e:e1:51:21:
a4:e3:d8:ff:7d:b7:3a:1e:84:13:58:76:e6:a0:62:de:42:69:
db:46:36:31:5d:c3:d2:4b:1d:9b:4d:e1:63:33:fc:ee:35:b9:
6b:f1:58:39:6b:db:36:90:1c:ae:78:45:95:16:ca:b3:8c:d7:
09:19:b4:d2:76:74:f5:4c:c5:da:71:f1:a7:a0:fb:d2:4c:3f:
4b:0a:e8:96
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIVaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDI2MDI1MTU3WhcNMjQwNTI4MDI1MTU3WjAYMRYw
FAYDVQQDEw02NjJiMTZkMS04MTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqNYJHAQm0ZIxibbOqokRdFS8P8PALYyM1UyigUYEJPYcRMcJG7zPH/Ng
mgtlzIyYwWu4O9fX/bg9RbhkS0u0v1fCu9nVCtC0Yown0OHwwx6FvVYa54fm0ABi
UfXTBc9qS5h0BLIRARubJrWgmFwTUvHNFIMEee2+YqSzvJ6E0jsg1ULiLN/AGJwO
x0xS2wmZTRJF17b7hEbztKGg1FU62uGEvBoPLYodRqdoYLguYLaPWP/mudCmsRsK
ODav7arCimPnsor/ojNsCeBzreknmx5OwPRccwV/5Ezb/sfdxtxJCWn3cNqIdXSM
v8S6A3ijTyV7GvLHFAv7xoBgobuJuQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJyH
3ubB8fonOoGiY5ydJVYL8p+2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNDVDNUFDQTAzNzcxMUVGQThGMTdCMjcwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOFGMA0GCSqGSIb3DQEBCwUA
A4IBAQBzPaNqvAjxCXKnYr+EXjnTNsFZizG+h3V0N8sS/IosJRrse6YvdkbwzLHZ
DNotmvEvyaf8KkUvBNVX7SNQZWPvaqXk8f/F/+VGc4+MuYll21DoT4SdjLlgCEbr
lmB7hk9tZi0IlLvxMH9e8h/WNIKPGgIowQB5txBkIK4fZqeAvTNahMCkA/18+B1s
WgnSgD3HsXbHMsL1smVneQF8BFhNnAvHxalUDM+KcFQ4eXByrE7hUSGk49j/fbc6
HoQTWHbmoGLeQmnbRjYxXcPSSx2bTeFjM/zuNblr8Vg5a9s2kByueEWVFsqzjNcJ
GbTSdnT1TMXacfGnoPvSTD9LCuiW
-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org