Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE9B406ED13B11EEAA8B085F775412E6.roa
File: FE9B406ED13B11EEAA8B085F775412E6.roa (raw, json)
Hash identifier: 3WD7BNq6JRokxu1Wi+dtDT+9Z2nR3bOWaXkj4iB7UwA=
Subject key identifier: CE:9C:2A:72:45:F6:05:F1:B3:EE:97:58:05:E2:3C:EB:8A:17:64:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 72C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE9B406ED13B11EEAA8B085F775412E6.roa
Signing time: Thu 22 Feb 2024 04:36:50 +0000
ROA not before: Thu 22 Feb 2024 04:36:47 +0000
ROA not after: Mon 24 Feb 2025 04:36:47 +0000
asID: 55355
IP address blocks: 156.224.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29377 (0x72c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 22 04:36:47 2024 GMT
Not After : Feb 24 04:36:47 2025 GMT
Subject: CN=65d6cf62-032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:d2:fe:4b:2b:3a:a0:75:b3:20:dd:3a:a9:
bb:ce:06:c6:3f:f1:ca:53:3d:4b:0b:5e:d6:c8:16:
43:76:4e:91:91:4f:03:c3:2b:ca:ab:e3:51:c3:67:
48:8f:21:4b:33:1d:6f:19:90:89:4b:63:8d:9f:5c:
b1:8c:44:1a:8b:91:e4:51:b5:c5:86:de:79:de:86:
ce:a0:c6:ed:ac:33:bf:7c:28:22:17:ee:12:5f:06:
26:df:44:55:94:34:f7:5c:a5:d0:e6:26:22:fb:06:
15:ab:b7:8d:14:cb:b5:43:f8:bd:1f:52:87:d4:b5:
5c:90:f2:ee:44:48:4e:5a:21:5a:24:e7:44:b2:7a:
da:c6:0e:4a:ce:ce:f8:91:b7:66:66:74:e4:cc:88:
95:fa:a0:b1:30:e9:c2:ca:24:5b:df:86:4d:90:95:
69:8a:b1:41:e6:4a:7c:02:68:25:90:b3:32:f7:05:
ae:05:fe:04:06:87:3f:1d:47:14:56:77:8b:48:80:
8d:79:22:9a:e8:df:fd:80:48:bc:d6:75:22:2a:23:
0a:5b:5b:ce:e1:da:0b:21:e1:68:93:47:83:a4:3c:
bd:49:95:36:a6:6f:9b:75:81:1c:a8:98:05:bb:f9:
a7:12:b7:bc:5c:cf:f7:a0:0e:1f:74:e6:23:5b:10:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:2A:72:45:F6:05:F1:B3:EE:97:58:05:E2:3C:EB:8A:17:64:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE9B406ED13B11EEAA8B085F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.4.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c1:10:3e:ba:1f:0d:42:36:f3:e9:e2:55:db:8b:67:7b:14:
80:76:c8:58:43:b6:09:0b:2b:7e:2e:7d:0d:bf:94:26:99:7f:
5b:d5:73:67:ad:f1:46:02:6d:94:18:39:3a:d6:89:87:8f:02:
02:12:52:6b:3d:94:00:7c:88:ec:79:f3:f2:e0:97:28:73:f5:
84:d1:60:6c:a3:90:f6:db:1a:6e:8f:61:5a:0e:a3:14:ac:a9:
35:df:48:d7:ea:ed:a9:e7:bf:27:e7:41:cb:9d:e0:2f:65:52:
44:b7:2c:78:7b:d8:46:db:f7:0d:7d:54:a6:5d:35:54:14:e4:
14:72:db:97:66:8d:cc:5f:90:3c:16:c2:57:5b:8c:88:25:e2:
4c:0f:3a:7f:6d:39:d0:75:6f:61:6e:a1:bf:98:a1:cd:ef:a3:
8a:5b:c9:83:c1:40:ae:8c:e4:ef:ef:80:0a:ac:d3:fd:52:ab:
0a:29:71:ca:a3:31:3a:72:5b:35:11:a9:a7:c1:01:4b:3d:71:
6d:1f:01:ea:29:08:ad:64:b0:60:9a:ad:48:6e:28:84:4c:6f:
b0:5e:99:a3:7f:5c:b5:41:cf:14:be:9d:a6:85:59:95:bb:4c:
5f:b0:ec:1d:6a:be:45:b4:dc:d3:95:15:2c:da:50:d8:e5:71:
5c:67:ab:47
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICcsEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yNDAyMjIwNDM2NDdaFw0yNTAyMjQwNDM2NDdaMBgxFjAU
BgNVBAMTDTY1ZDZjZjYyLTAzMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDjdL+Sys6oHWzIN06qbvOBsY/8cpTPUsLXtbIFkN2TpGRTwPDK8qr41HD
Z0iPIUszHW8ZkIlLY42fXLGMRBqLkeRRtcWG3nnehs6gxu2sM798KCIX7hJfBibf
RFWUNPdcpdDmJiL7BhWrt40Uy7VD+L0fUofUtVyQ8u5ESE5aIVok50SyetrGDkrO
zviRt2ZmdOTMiJX6oLEw6cLKJFvfhk2QlWmKsUHmSnwCaCWQszL3Ba4F/gQGhz8d
RxRWd4tIgI15Ipro3/2ASLzWdSIqIwpbW87h2gsh4WiTR4OkPL1JlTamb5t1gRyo
mAW7+acSt7xcz/egDh905iNbEL9DAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzpwq
ckX2BfGz7pdYBeI864oXZFAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0ZFOUI0MDZFRDEzQjExRUVBQThCMDg1Rjc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4AQwDQYJKoZIhvcNAQELBQAD
ggEBAHLBED66Hw1CNvPp4lXbi2d7FIB2yFhDtgkLK34ufQ2/lCaZf1vVc2et8UYC
bZQYOTrWiYePAgISUms9lAB8iOx58/Lglyhz9YTRYGyjkPbbGm6PYVoOoxSsqTXf
SNfq7annvyfnQcud4C9lUkS3LHh72Ebb9w19VKZdNVQU5BRy25dmjcxfkDwWwldb
jIgl4kwPOn9tOdB1b2Fuob+Yoc3vo4pbyYPBQK6M5O/vgAqs0/1SqwopccqjMTpy
WzURqafBAUs9cW0fAeopCK1ksGCarUhuKIRMb7BemaN/XLVBzxS+naaFWZW7TF+w
7B1qvkW03NOVFSzaUNjlcVxnq0c=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:20 2024 by rpki-client on console-fra.rpki-client.org