Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70F845EF70111EEA3FE986D775412E6.roa
File: F70F845EF70111EEA3FE986D775412E6.roa (raw, json)
Hash identifier: w+G1xzGebcEgiC/PeoCG5zpZFHYyG6QG/XCP/cPV6Us=
Subject key identifier: F3:8D:7F:FB:41:71:D2:2B:EA:58:1B:7E:CE:F1:AA:08:D2:A1:05:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70F845EF70111EEA3FE986D775412E6.roa
Signing time: Wed 10 Apr 2024 06:17:11 +0000
ROA not before: Wed 10 Apr 2024 06:17:07 +0000
ROA not after: Sun 13 Apr 2025 06:17:07 +0000
asID: 141210
IP address blocks: 156.227.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33255 (0x81e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 06:17:07 2024 GMT
Not After : Apr 13 06:17:07 2025 GMT
Subject: CN=66162ee7-48eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:c2:a4:ec:4f:56:33:54:9a:94:cf:ad:89:
46:79:c0:c5:e5:f0:87:93:99:ac:f3:15:5d:49:6a:
77:98:1b:47:f5:43:94:8b:61:24:d6:f7:b2:a2:2e:
9e:55:a7:75:16:65:98:c3:eb:d0:9e:d6:bc:69:cb:
2f:ea:6d:7a:43:95:d2:be:02:d4:75:24:58:e8:8b:
67:59:96:30:66:a5:aa:25:6a:c0:19:c0:14:7b:6c:
6d:f3:fb:83:d5:3c:ed:67:d0:ad:02:75:0f:d6:7f:
7f:63:59:03:25:1b:3d:90:f9:ed:55:16:bf:10:54:
b8:13:55:4c:d8:82:b6:9d:af:d3:ec:7c:9f:4b:f9:
75:33:ae:b3:14:3b:09:0b:11:0f:4c:4b:68:c0:05:
55:4d:e4:2e:ee:ba:c4:64:78:a3:f0:7b:41:88:7c:
6e:be:34:6c:e1:d1:1e:e7:8e:7a:e6:a7:2b:05:35:
79:dc:c7:eb:9f:0f:54:93:90:7f:c0:26:f8:84:b4:
69:3c:71:83:68:d2:24:7b:ce:84:2a:d0:3b:db:41:
cb:62:87:fb:56:1c:ca:86:da:eb:d2:ea:91:f6:67:
ed:d0:97:14:d2:3f:6c:0e:ad:12:c7:19:52:2b:a6:
72:59:e4:59:25:83:85:c2:43:07:d9:58:d0:7d:f4:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8D:7F:FB:41:71:D2:2B:EA:58:1B:7E:CE:F1:AA:08:D2:A1:05:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70F845EF70111EEA3FE986D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.216.0/24
Signature Algorithm: sha256WithRSAEncryption
87:de:56:40:e3:44:da:e0:e8:22:a3:41:90:6f:a7:0a:bd:be:
af:5e:5e:ce:e6:27:e7:1b:43:c7:cf:80:5b:a5:38:e9:32:b9:
b1:7c:62:33:3e:3e:23:90:ba:0a:f3:55:4e:7d:4b:64:15:a4:
01:6f:73:9d:e8:fa:8a:a6:db:40:de:ae:19:17:41:20:e3:8e:
c2:ee:88:34:ac:9b:f4:0c:fe:71:5e:f8:1c:89:3e:6e:f0:b3:
76:39:14:58:8a:f8:a9:e4:fe:f2:53:57:64:30:cb:a0:97:90:
3f:bb:3d:69:1a:8d:df:f6:02:75:2d:bf:dc:e2:2e:30:c1:02:
02:0b:99:09:51:5d:2a:76:35:be:f0:58:cb:5f:4b:ba:bf:8a:
11:78:0a:25:75:91:2b:7a:f2:14:a4:0c:50:90:b9:ab:b6:63:
fd:a7:90:29:d5:14:c3:10:34:f3:55:db:ed:7e:fb:80:39:5e:
1e:94:9f:20:a1:c5:22:d8:09:10:55:ad:bc:a4:22:6b:7f:c1:
81:73:4a:62:d7:aa:25:b0:f2:b2:b6:21:c0:0d:32:e4:fa:8a:
71:71:2e:36:e4:65:b2:93:58:36:40:fd:09:03:54:f3:97:b7:
d8:3c:cb:16:3d:99:55:dc:71:01:38:e8:fd:60:9f:74:11:12:
be:59:86:e6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIHnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDEwMDYxNzA3WhcNMjUwNDEzMDYxNzA3WjAYMRYw
FAYDVQQDEw02NjE2MmVlNy00OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4jHCpOxPVjNUmpTPrYlGecDF5fCHk5ms8xVdSWp3mBtH9UOUi2Ek1vey
oi6eVad1FmWYw+vQnta8acsv6m16Q5XSvgLUdSRY6ItnWZYwZqWqJWrAGcAUe2xt
8/uD1TztZ9CtAnUP1n9/Y1kDJRs9kPntVRa/EFS4E1VM2IK2na/T7HyfS/l1M66z
FDsJCxEPTEtowAVVTeQu7rrEZHij8HtBiHxuvjRs4dEe54565qcrBTV53Mfrnw9U
k5B/wCb4hLRpPHGDaNIke86EKtA720HLYof7VhzKhtrr0uqR9mft0JcU0j9sDq0S
xxlSK6ZyWeRZJYOFwkMH2VjQffQbWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPON
f/tBcdIr6lgbfs7xqgjSoQW1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNzBGODQ1RUY3MDExMUVFQTNGRTk4NkQ3NzU0MTJFNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOPYMA0GCSqGSIb3DQEBCwUA
A4IBAQCH3lZA40Ta4Ogio0GQb6cKvb6vXl7O5ifnG0PHz4BbpTjpMrmxfGIzPj4j
kLoK81VOfUtkFaQBb3Od6PqKpttA3q4ZF0Eg447C7og0rJv0DP5xXvgciT5u8LN2
ORRYivip5P7yU1dkMMugl5A/uz1pGo3f9gJ1Lb/c4i4wwQICC5kJUV0qdjW+8FjL
X0u6v4oReAoldZErevIUpAxQkLmrtmP9p5Ap1RTDEDTzVdvtfvuAOV4elJ8gocUi
2AkQVa28pCJrf8GBc0pi16olsPKytiHADTLk+opxcS425GWyk1g2QP0JA1Tzl7fY
PMsWPZlV3HEBOOj9YJ90ERK+WYbm
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:20 2024 by rpki-client on console-fra.rpki-client.org