Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC974462A0C911EFBF42BC6E762E951A.roa
File: FC974462A0C911EFBF42BC6E762E951A.roa (raw, json)
Hash identifier: 41zVOkFikMJJqUoNql0aWrXb1qprYEayDDB1BtLbpTc=
Subject key identifier: E5:24:A2:CE:79:C8:F0:B6:EB:E5:31:AD:B9:AC:9C:5D:0B:D8:3D:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D168
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC974462A0C911EFBF42BC6E762E951A.roa
Signing time: Tue 12 Nov 2024 07:44:46 +0000
ROA not before: Tue 12 Nov 2024 07:44:42 +0000
ROA not after: Mon 13 Jan 2025 07:44:42 +0000
asID: 212238
IP address blocks: 156.232.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53608 (0xd168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 07:44:42 2024 GMT
Not After : Jan 13 07:44:42 2025 GMT
Subject: CN=6733076e-182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:0b:d0:4e:f5:d0:cd:a5:47:91:98:1a:c6:
f5:57:6a:c4:31:7c:a0:a6:78:f6:d4:99:62:e0:d8:
17:36:1d:d3:e3:36:b2:fa:92:b3:09:4e:b4:1e:31:
ba:46:b7:c6:ec:9d:c9:4c:0a:16:56:88:c9:9a:26:
5c:fc:61:9f:04:fe:99:fe:b0:4b:50:22:26:2b:a1:
d4:d8:d2:75:26:de:a3:73:2f:2a:11:e4:85:6a:53:
c2:61:28:f4:7d:29:b4:8c:64:0a:56:d9:eb:e2:ac:
de:33:92:4f:3a:cb:0d:69:77:c5:77:b5:d1:ee:1d:
3d:c3:46:57:e0:08:2d:65:17:6c:fc:20:d5:2e:99:
e1:07:e3:b7:ad:50:b5:b8:7c:01:f0:1e:d8:5f:05:
5b:b2:cc:74:ec:aa:c0:55:46:43:ee:74:a0:e1:2c:
69:20:d1:4e:c7:08:09:b8:ab:e7:41:63:c5:7f:a2:
1e:1a:f0:7b:dc:22:1d:c4:2c:90:db:4e:2a:26:6c:
d4:05:e1:3c:43:14:c5:25:19:6d:d5:f8:c6:10:8c:
e5:4b:d5:30:01:69:ee:da:d9:4f:97:7b:4b:c9:5b:
9b:26:d0:ee:3b:08:16:fa:38:20:88:ac:5b:6f:a7:
bc:c1:bb:07:92:27:c1:50:18:2e:a3:eb:4f:06:37:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:A2:CE:79:C8:F0:B6:EB:E5:31:AD:B9:AC:9C:5D:0B:D8:3D:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC974462A0C911EFBF42BC6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:83:90:15:d4:55:9d:f2:ac:af:72:d5:ae:40:a5:93:d4:d8:
73:81:0d:0d:39:fc:a0:36:e0:e7:01:c8:5d:b2:94:57:e8:fc:
8d:35:68:9d:b0:8b:e8:86:06:e8:4e:84:94:69:72:40:f8:2c:
c8:aa:ae:f0:15:0a:28:56:dc:a3:49:ed:8b:52:91:d5:8e:17:
0a:3a:50:c9:a6:3d:8f:74:1d:8d:ef:9a:1d:61:75:c1:a3:85:
18:6a:48:07:1a:78:9a:ba:ce:f0:d9:bc:54:b7:2e:74:c4:32:
9d:9a:c1:55:d2:e0:66:de:46:92:68:31:7b:73:f6:4b:8a:58:
8d:41:10:fa:e4:dd:32:c4:36:46:87:e5:35:60:8c:9b:59:d4:
90:7d:12:b9:39:a2:cf:97:e5:95:2e:e6:63:c3:fb:b0:a4:ac:
1e:9f:1f:1e:e4:40:85:72:05:61:80:93:a9:1f:85:10:8a:28:
90:21:12:07:09:7e:d4:9a:6e:66:da:28:9a:ec:7b:57:8b:32:
b4:f9:04:ab:d7:bc:a4:04:cd:15:7a:9e:4c:6b:c0:43:69:88:
5f:fa:55:ca:a0:f2:98:16:eb:31:2f:75:93:ca:28:2b:04:43:
52:d9:54:42:da:5f:58:76:e0:23:d2:11:50:d3:fc:7d:14:e0:
25:96:c5:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANFoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTEyMDc0NDQyWhcNMjUwMTEzMDc0NDQyWjAYMRYw
FAYDVQQDEw02NzMzMDc2ZS0xODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyX4L0E710M2lR5GYGsb1V2rEMXygpnj21Jli4NgXNh3T4zay+pKzCU60
HjG6RrfG7J3JTAoWVojJmiZc/GGfBP6Z/rBLUCImK6HU2NJ1Jt6jcy8qEeSFalPC
YSj0fSm0jGQKVtnr4qzeM5JPOssNaXfFd7XR7h09w0ZX4AgtZRds/CDVLpnhB+O3
rVC1uHwB8B7YXwVbssx07KrAVUZD7nSg4SxpINFOxwgJuKvnQWPFf6IeGvB73CId
xCyQ204qJmzUBeE8QxTFJRlt1fjGEIzlS9UwAWnu2tlPl3tLyVubJtDuOwgW+jgg
iKxbb6e8wbsHkifBUBguo+tPBjeNmQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOUk
os55yPC26+UxrbmsnF0L2D2SMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzk3NDQ2MkEwQzkxMUVGQkY0MkJDNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOgBMA0GCSqGSIb3DQEBCwUA
A4IBAQCsg5AV1FWd8qyvctWuQKWT1NhzgQ0NOfygNuDnAchdspRX6PyNNWidsIvo
hgboToSUaXJA+CzIqq7wFQooVtyjSe2LUpHVjhcKOlDJpj2PdB2N75odYXXBo4UY
akgHGniaus7w2bxUty50xDKdmsFV0uBm3kaSaDF7c/ZLiliNQRD65N0yxDZGh+U1
YIybWdSQfRK5OaLPl+WVLuZjw/uwpKwenx8e5ECFcgVhgJOpH4UQiiiQIRIHCX7U
mm5m2iia7HtXizK0+QSr17ykBM0Vep5Ma8BDaYhf+lXKoPKYFusxL3WTyigrBENS
2VRC2l9YduAj0hFQ0/x9FOAllsXY
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org