Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE94669873DC11EEAA8FF7344AD9E6FC.roa
File: FE94669873DC11EEAA8FF7344AD9E6FC.roa (raw, json)
Hash identifier: Lf5BE/ZeFeEKN/QYD7IMK1+MuS7udKX+WTFZ5TVCNbc=
Subject key identifier: 95:9B:40:9D:DC:C2:24:10:32:1E:16:30:B6:DC:3D:35:C5:D9:63:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 422E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE94669873DC11EEAA8FF7344AD9E6FC.roa
Signing time: Thu 26 Oct 2023 08:52:30 +0000
ROA not before: Thu 26 Oct 2023 08:52:26 +0000
ROA not after: Thu 10 Oct 2024 08:52:26 +0000
asID: 131273
IP address blocks: 156.242.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16942 (0x422e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 26 08:52:26 2023 GMT
Not After : Oct 10 08:52:26 2024 GMT
Subject: CN=653a28cd-a72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:ad:5e:0c:54:90:cf:8a:d6:46:8d:45:7e:
9b:3f:96:ca:93:5d:c9:49:8c:00:0c:57:13:25:10:
86:bd:4b:24:56:42:74:76:4d:e6:d8:65:74:cb:72:
6c:fc:b3:42:bd:22:25:bc:8d:97:ea:4c:39:94:7c:
b9:69:35:58:f9:32:4a:63:c1:02:69:ce:1a:41:9e:
35:f0:4e:d7:86:b1:f1:a9:83:9f:6d:bb:83:2c:59:
de:14:73:9e:af:e4:a0:06:ec:a7:2a:f7:b1:9b:6d:
42:fa:e0:d9:b1:82:43:f8:6f:30:a2:73:2b:1d:c7:
db:cf:6a:f9:84:e1:94:02:a1:d0:da:6e:7a:b1:a3:
c4:f0:d1:09:89:55:d5:0d:d5:65:e5:71:06:70:a1:
6f:13:5a:09:e0:64:bf:41:05:27:f7:ed:7a:ca:77:
e9:e6:18:01:f2:d1:7a:c0:41:e4:a9:9c:6b:9d:26:
00:98:25:99:23:ca:87:cb:9a:5c:5c:3f:e9:3e:7a:
0e:f3:58:f2:78:bd:37:af:50:93:10:69:01:51:20:
b0:7d:05:b5:61:fb:95:3c:4e:41:fb:2d:cf:4e:c1:
70:2e:7e:3a:47:57:64:99:05:13:e2:08:d2:c5:01:
9b:91:29:c1:a2:a0:10:d7:40:6f:68:20:d1:33:c6:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:40:9D:DC:C2:24:10:32:1E:16:30:B6:DC:3D:35:C5:D9:63:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE94669873DC11EEAA8FF7344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1e:74:1c:08:29:91:e5:51:d8:75:f1:1f:a0:01:06:38:37:
a2:79:21:96:fa:93:cd:20:2f:76:ef:43:e7:4f:64:ca:a4:a0:
7a:48:9f:9d:8d:c3:92:61:be:09:b6:d6:c6:57:c7:ef:02:a5:
9f:11:8a:2f:48:45:81:19:43:8d:1f:53:a4:18:16:72:da:c0:
c6:85:26:51:f7:b8:36:68:59:e8:9a:be:67:2d:49:11:cc:9f:
7f:78:8e:e8:ee:2d:4e:c4:c1:08:50:a7:79:da:bb:be:4d:18:
b9:cc:0f:3c:3c:9c:94:e1:32:34:ab:3c:79:17:d7:32:4a:31:
17:89:b6:6c:db:82:e7:c2:01:b9:b5:49:05:95:94:d0:6c:75:
a5:77:7c:93:c8:c8:e0:f3:78:43:7a:dd:a8:ec:d8:c4:9b:a2:
d8:b0:f7:f2:46:f8:ee:88:f7:31:e3:dd:44:8e:8e:0b:75:c9:
c7:ca:ee:b6:dd:88:6b:f9:90:d5:0d:75:a8:35:11:c8:3c:9f:
54:9f:0c:05:69:54:c4:11:a5:26:db:68:e4:b0:14:ba:d7:f3:
7d:11:1c:3f:64:48:a4:4e:4c:9b:71:82:65:e6:25:82:2b:03:
6b:6d:71:28:9f:4a:fc:cd:27:20:2b:57:e3:c8:98:98:39:52:
fb:c7:ab:df
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICQi4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEwMjYwODUyMjZaFw0yNDEwMTAwODUyMjZaMBgxFjAU
BgNVBAMTDTY1M2EyOGNkLWE3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGmq1eDFSQz4rWRo1Ffps/lsqTXclJjAAMVxMlEIa9SyRWQnR2TebYZXTL
cmz8s0K9IiW8jZfqTDmUfLlpNVj5MkpjwQJpzhpBnjXwTteGsfGpg59tu4MsWd4U
c56v5KAG7Kcq97GbbUL64NmxgkP4bzCicysdx9vPavmE4ZQCodDabnqxo8Tw0QmJ
VdUN1WXlcQZwoW8TWgngZL9BBSf37XrKd+nmGAHy0XrAQeSpnGudJgCYJZkjyofL
mlxcP+k+eg7zWPJ4vTevUJMQaQFRILB9BbVh+5U8TkH7Lc9OwXAufjpHV2SZBRPi
CNLFAZuRKcGioBDXQG9oINEzxq6NAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUlZtA
ndzCJBAyHhYwttw9NcXZY00wHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZFOTQ2Njk4NzNEQzExRUVBQThGRjczNDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc8gkwDQYJKoZIhvcNAQELBQAD
ggEBAAYedBwIKZHlUdh18R+gAQY4N6J5IZb6k80gL3bvQ+dPZMqkoHpIn52Nw5Jh
vgm21sZXx+8CpZ8Rii9IRYEZQ40fU6QYFnLawMaFJlH3uDZoWeiavmctSRHMn394
jujuLU7EwQhQp3nau75NGLnMDzw8nJThMjSrPHkX1zJKMReJtmzbgufCAbm1SQWV
lNBsdaV3fJPIyODzeEN63ajs2MSbotiw9/JG+O6I9zHj3USOjgt1ycfK7rbdiGv5
kNUNdag1Ecg8n1SfDAVpVMQRpSbbaOSwFLrX830RHD9kSKROTJtxgmXmJYIrA2tt
cSifSvzNJyArV+PImJg5UvvHq98=
-----END CERTIFICATE-----
Generated at Mon May 6 08:05:01 2024 by rpki-client on console-ams.rpki-client.org