Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8BE5366976A11EFB066CA62762E951A.roa
File: F8BE5366976A11EFB066CA62762E951A.roa (raw, json)
Hash identifier: Tg8ZmiPiDMPbYLDbdsFLxEnzhWkMiYYeGKvO0Mbio4U=
Subject key identifier: F1:C4:ED:68:CD:4B:CB:EB:A4:DA:A7:B5:3E:C7:BD:18:BD:0B:C6:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8BE5366976A11EFB066CA62762E951A.roa
Signing time: Thu 31 Oct 2024 09:31:57 +0000
ROA not before: Thu 31 Oct 2024 09:31:53 +0000
ROA not after: Sat 21 Dec 2024 09:31:53 +0000
asID: 63139
IP address blocks: 156.229.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52010 (0xcb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:31:53 2024 GMT
Not After : Dec 21 09:31:53 2024 GMT
Subject: CN=67234e8d-15b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:59:04:0e:cb:0d:30:24:37:31:55:6a:61:
7a:2c:52:5c:1e:74:e8:be:d9:f2:9d:89:e3:4d:34:
bc:48:c0:80:80:38:e7:dd:b8:4c:1f:59:88:87:de:
ee:bb:7b:af:ba:ad:7d:b1:a1:69:23:e6:05:cb:97:
3d:50:e6:33:5b:d6:44:0a:56:cf:34:90:c6:a0:6d:
65:b8:98:0b:55:4c:27:9d:aa:75:b0:d3:a7:9b:0b:
e7:d2:a4:d6:f1:83:e0:0b:cf:37:e4:f6:45:98:50:
10:d3:ab:ba:1e:be:aa:fe:de:cb:f3:80:d7:97:46:
0e:8c:6d:76:54:21:e9:24:d5:8a:08:ef:d9:43:7d:
d1:9a:b1:cd:a7:72:03:fb:2e:62:c3:2f:aa:04:49:
f2:63:c6:53:47:66:95:6f:b1:2e:16:ca:a7:89:4e:
19:3c:fd:b8:fc:9e:2e:ae:8e:6d:8b:22:de:56:6f:
61:91:71:26:21:e0:7a:48:98:52:1b:2c:b1:d6:ae:
03:d4:65:3c:ee:0d:87:1f:39:30:f1:c1:61:2e:f0:
28:56:9c:87:c0:92:10:d5:04:18:78:43:02:6c:f4:
6b:30:f8:ab:8f:14:58:41:dc:2b:6c:34:a0:db:ce:
60:ec:32:aa:7f:7c:00:ab:a1:24:ea:a3:11:44:da:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:ED:68:CD:4B:CB:EB:A4:DA:A7:B5:3E:C7:BD:18:BD:0B:C6:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8BE5366976A11EFB066CA62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:e5:04:e9:93:93:51:34:54:ff:78:36:07:bc:e0:7a:8b:87:
82:f1:6a:aa:43:a7:ed:87:70:f4:4a:6e:58:02:82:8b:30:20:
e9:6a:ee:86:bd:4a:21:24:10:20:f4:83:9d:05:b8:97:7a:f8:
c0:86:06:59:f7:d3:8e:69:21:15:73:ec:96:a9:86:42:8c:5f:
62:a1:b5:21:58:0e:03:dd:0f:48:ba:ec:55:d2:f5:0c:92:78:
9e:73:f8:69:86:7a:57:4e:16:21:25:06:f4:2f:d1:b5:ee:09:
17:7d:24:45:61:d4:9a:4b:fc:6b:c5:28:3f:90:87:ae:05:3e:
92:79:d0:16:68:c8:18:78:fd:55:50:8d:2a:e6:22:16:b0:7c:
4b:66:09:03:56:d5:57:8d:f3:bd:b9:fc:31:2f:82:d1:61:6e:
69:45:f3:31:78:5f:a5:b9:d4:ab:b3:d4:44:36:ab:10:3a:19:
df:db:e0:46:e3:24:d7:6d:e2:95:a2:63:2b:de:e0:09:25:07:
68:ce:8d:0b:b2:cd:a7:3c:1d:1f:0d:9b:fb:5e:33:d5:b5:f5:
ae:69:1f:e9:b7:20:07:cd:25:37:bb:b9:2a:c6:7b:f8:24:b7:
1e:d9:86:1d:94:44:2b:86:5c:34:9c:b3:e3:f5:5a:59:d8:c8:
84:49:4c:9f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAMsqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMDMxMDkzMTUzWhcNMjQxMjIxMDkzMTUzWjAYMRYw
FAYDVQQDEw02NzIzNGU4ZC0xNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuu1ZBA7LDTAkNzFVamF6LFJcHnTovtnynYnjTTS8SMCAgDjn3bhMH1mI
h97uu3uvuq19saFpI+YFy5c9UOYzW9ZEClbPNJDGoG1luJgLVUwnnap1sNOnmwvn
0qTW8YPgC8835PZFmFAQ06u6Hr6q/t7L84DXl0YOjG12VCHpJNWKCO/ZQ33RmrHN
p3ID+y5iwy+qBEnyY8ZTR2aVb7EuFsqniU4ZPP24/J4uro5tiyLeVm9hkXEmIeB6
SJhSGyyx1q4D1GU87g2HHzkw8cFhLvAoVpyHwJIQ1QQYeEMCbPRrMPirjxRYQdwr
bDSg285g7DKqf3wAq6Ek6qMRRNoC9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPHE
7WjNS8vrpNqntT7HvRi9C8avMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOEJFNTM2Njk3NkExMUVGQjA2NkNBNjI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOUCMA0GCSqGSIb3DQEBCwUA
A4IBAQCe5QTpk5NRNFT/eDYHvOB6i4eC8WqqQ6fth3D0Sm5YAoKLMCDpau6GvUoh
JBAg9IOdBbiXevjAhgZZ99OOaSEVc+yWqYZCjF9iobUhWA4D3Q9IuuxV0vUMknie
c/hphnpXThYhJQb0L9G17gkXfSRFYdSaS/xrxSg/kIeuBT6SedAWaMgYeP1VUI0q
5iIWsHxLZgkDVtVXjfO9ufwxL4LRYW5pRfMxeF+ludSrs9RENqsQOhnf2+BG4yTX
beKVomMr3uAJJQdozo0Lss2nPB0fDZv7XjPVtfWuaR/ptyAHzSU3u7kqxnv4JLce
2YYdlEQrhlw0nLPj9VpZ2MiESUyf
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org