Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE7684F2595B11EEACC185274AD9E6FC.roa
File: FE7684F2595B11EEACC185274AD9E6FC.roa (raw, json)
Hash identifier: 0zjLWWoRZQpAPv5OpZHReIjJF5zomvtEKjnMLX4Ob+M=
Subject key identifier: 47:40:04:04:69:E5:7E:69:26:EE:B8:62:49:E8:F4:C8:AA:B5:CC:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3B05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE7684F2595B11EEACC185274AD9E6FC.roa
Signing time: Fri 22 Sep 2023 15:23:34 +0000
ROA not before: Fri 22 Sep 2023 15:23:31 +0000
ROA not after: Thu 25 Jul 2024 15:23:31 +0000
asID: 140570
IP address blocks: 156.230.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15109 (0x3b05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 22 15:23:31 2023 GMT
Not After : Jul 25 15:23:31 2024 GMT
Subject: CN=650db176-3ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:bf:56:53:65:41:ec:28:91:28:30:c3:f8:
e5:b3:f9:78:61:ed:30:5e:3d:93:85:f7:1a:35:e2:
2b:c9:b1:07:89:b9:b9:21:01:58:c3:1e:da:8b:6d:
3b:a1:82:15:fe:26:96:39:60:c2:b5:1a:e0:6c:fc:
d0:08:96:39:52:54:d7:84:0d:c8:92:63:8d:c5:ae:
90:b8:d1:51:64:82:c5:ec:c1:bf:2a:cd:ae:69:58:
07:0b:4a:01:53:59:f4:97:e7:56:9b:30:af:3c:07:
0c:0a:54:33:12:2b:1a:e2:8e:62:4d:5d:ee:79:76:
f2:a6:ca:f4:57:d1:53:49:81:d8:86:2a:05:30:2e:
6f:a7:4a:6f:0b:04:dc:a4:cc:b9:c0:50:ef:e6:bc:
ba:bd:b0:88:27:8f:67:7d:94:ab:ee:62:77:1e:94:
4a:61:12:1f:cc:eb:1f:36:4a:36:94:40:76:9f:de:
23:cd:ce:cf:75:91:fe:e1:9a:72:76:63:f1:e8:f4:
0c:32:51:5f:dc:5c:9b:30:84:9f:2a:8b:14:75:ea:
70:cb:a7:e0:f8:29:b6:76:e2:89:52:bb:c9:48:32:
bf:eb:0f:b7:f0:40:cb:0e:6c:a7:b2:f2:6c:2e:72:
e1:94:4a:55:40:a7:a6:dd:05:63:f3:9d:01:56:b6:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:04:04:69:E5:7E:69:26:EE:B8:62:49:E8:F4:C8:AA:B5:CC:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE7684F2595B11EEACC185274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.7.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6e:21:0f:34:cd:1c:3c:c5:21:91:b6:b7:72:a5:d0:16:98:
aa:03:cd:3a:08:af:79:24:78:90:29:cc:31:64:0d:c4:53:6f:
2d:b9:3e:97:79:be:9e:03:93:a5:ff:7e:a2:d7:7d:e3:14:6c:
56:26:e2:2d:a9:da:8b:b3:b3:bb:e3:db:cd:b7:79:d9:9c:8e:
08:35:19:eb:c0:b6:69:56:dc:83:3c:d9:73:f2:4a:b2:d7:87:
24:fb:01:59:a1:7b:9e:4e:60:a6:75:9f:b6:cc:ab:cd:57:c3:
d1:f5:f7:18:ba:31:8d:c5:a7:f7:9b:1d:5a:02:e4:a0:6b:e7:
f8:ec:63:97:91:c4:c7:6a:a8:85:8a:15:27:ea:31:81:3b:45:
c5:44:05:5b:33:92:99:8a:ae:cc:a4:2f:87:26:69:b6:b7:98:
e4:cb:2f:0d:54:c5:6e:92:e0:b0:f5:6f:e2:98:84:0e:11:11:
ef:56:8e:3d:e9:ed:6e:29:96:b5:b3:66:3d:33:a9:7e:52:3b:
3b:e2:5d:e2:d6:d6:1d:ac:72:60:c3:fc:8e:80:9a:b3:91:ae:
f8:29:31:2a:f8:f9:28:74:1e:ca:f4:88:af:51:95:b1:4c:b9:
43:27:35:10:a5:15:bf:7f:12:e8:8a:40:13:29:a5:95:65:fc:
73:bf:13:7b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOwUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MjIxNTIzMzFaFw0yNDA3MjUxNTIzMzFaMBgxFjAU
BgNVBAMTDTY1MGRiMTc2LTNmZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Xb9WU2VB7CiRKDDD+OWz+Xhh7TBePZOF9xo14ivJsQeJubkhAVjDHtqL
bTuhghX+JpY5YMK1GuBs/NAIljlSVNeEDciSY43FrpC40VFkgsXswb8qza5pWAcL
SgFTWfSX51abMK88BwwKVDMSKxrijmJNXe55dvKmyvRX0VNJgdiGKgUwLm+nSm8L
BNykzLnAUO/mvLq9sIgnj2d9lKvuYncelEphEh/M6x82SjaUQHaf3iPNzs91kf7h
mnJ2Y/Ho9AwyUV/cXJswhJ8qixR16nDLp+D4KbZ24olSu8lIMr/rD7fwQMsObKey
8mwucuGUSlVAp6bdBWPznQFWttl7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUR0AE
BGnlfmkm7rhiSej0yKq1zBUwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZFNzY4NEYyNTk1QjExRUVBQ0MxODUyNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc5gcwDQYJKoZIhvcNAQELBQAD
ggEBADFuIQ80zRw8xSGRtrdypdAWmKoDzToIr3kkeJApzDFkDcRTby25Ppd5vp4D
k6X/fqLXfeMUbFYm4i2p2ouzs7vj2823edmcjgg1GevAtmlW3IM82XPySrLXhyT7
AVmhe55OYKZ1n7bMq81Xw9H19xi6MY3Fp/ebHVoC5KBr5/jsY5eRxMdqqIWKFSfq
MYE7RcVEBVszkpmKrsykL4cmaba3mOTLLw1UxW6S4LD1b+KYhA4REe9Wjj3p7W4p
lrWzZj0zqX5SOzviXeLW1h2scmDD/I6AmrORrvgpMSr4+Sh0Hsr0iK9RlbFMuUMn
NRClFb9/EuiKQBMppZVl/HO/E3s=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:20 2024 by rpki-client on console-fra.rpki-client.org