Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/2BBC033C71AE11EEA2D2E5354AD9E6FC.roa
File: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (raw, json)
Hash identifier: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=
Subject key identifier: AC:1F:E1:CB:35:07:5A:33:65:92:5C:AF:50:2A:42:95:8E:8A:35:37
Certificate issuer: /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial: 02
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Authority info access: rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/2BBC033C71AE11EEA2D2E5354AD9E6FC.roa
Signing time: Mon 23 Oct 2023 14:12:17 +0000
ROA not before: Mon 23 Oct 2023 14:12:13 +0000
ROA not after: Sun 23 Oct 2033 14:12:13 +0000
asID: 329296
IP address blocks: 164.88.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Validity
Not Before: Oct 23 14:12:13 2023 GMT
Not After : Oct 23 14:12:13 2033 GMT
Subject: CN=65367f41-aa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:0e:cf:08:e9:62:8d:80:88:38:ba:f3:bd:
3a:da:da:3e:81:cd:00:4a:73:29:0a:42:24:6b:44:
fd:1e:a1:b3:3f:41:98:f2:55:40:97:44:ee:7f:a0:
da:77:b7:fe:ba:d3:4b:a6:34:58:5a:a2:4f:b8:17:
f0:d2:c9:af:c8:2b:55:08:9c:08:53:d2:b6:0e:3b:
ed:6f:0f:f6:1a:ee:c1:a7:89:84:4c:1c:cd:c3:02:
3c:8f:cd:3e:da:1e:6b:d1:c0:63:d6:dd:b9:d4:aa:
c2:1f:4d:22:ab:75:fc:b2:bd:a7:65:00:53:94:0d:
be:46:ed:3f:1e:65:38:96:1b:ae:35:cd:e3:c5:24:
d5:db:30:42:a8:5c:39:4b:1e:12:a2:2d:27:3b:9e:
26:27:37:a8:e2:6e:55:7a:9e:1c:80:9e:30:fe:aa:
01:56:2e:06:f0:2d:07:15:60:30:2a:cb:f7:73:63:
4a:25:78:cf:ee:ca:f8:23:4b:cc:9d:0a:9c:ec:48:
23:7d:1b:d6:0c:c9:88:82:c3:f4:b4:10:0f:0e:83:
40:1f:26:be:05:a0:48:fe:50:26:5c:1d:0d:9c:bb:
42:60:ef:c1:6d:09:a0:9c:5f:1b:1b:fe:90:d5:b3:
eb:5e:29:93:c4:84:34:f9:a2:27:93:02:9e:94:3f:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:E1:CB:35:07:5A:33:65:92:5C:AF:50:2A:42:95:8E:8A:35:37
X509v3 Authority Key Identifier:
keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/2BBC033C71AE11EEA2D2E5354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.88.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:eb:46:e7:3e:c7:93:28:b8:06:5d:2b:ba:85:99:68:23:40:
4d:b9:2e:76:75:3d:dd:37:52:f4:81:06:aa:17:bd:8d:39:4b:
c5:35:9b:9d:4a:d7:fe:19:15:4f:bc:e0:8e:9f:ac:d9:d1:9b:
9b:7d:37:74:53:58:39:b2:95:3e:42:e6:0e:6b:d8:cd:0c:dd:
21:bb:5a:5c:1d:7f:d0:3b:cb:d9:18:68:a5:4a:e7:1d:38:67:
aa:ea:3a:fd:fd:0b:21:14:fa:c2:16:95:d2:2b:a1:97:91:bf:
18:c6:e6:18:4b:4a:74:aa:2e:9e:b3:85:ec:3c:3b:b9:39:fd:
e9:9c:04:04:c0:dc:68:f5:1b:b2:49:6c:78:6d:fb:3a:ec:c3:
bb:0a:58:0f:4a:40:3b:ee:50:be:2a:28:c6:d3:fa:a6:aa:75:
f8:61:b5:06:c1:01:9a:bf:2d:5c:0d:8f:32:d9:24:5f:5e:fb:
20:9f:e8:18:16:08:5e:5c:3b:b0:74:47:b0:cc:7f:ce:fe:22:
00:1e:1d:8d:e5:80:83:bf:11:8b:2b:1f:62:b8:a5:b8:b9:94:
d0:e2:86:8e:7a:ab:fa:6c:9a:c5:3c:13:96:32:82:17:1a:01:
42:be:f1:65:ad:2c:e8:3f:3a:9b:f8:ce:2d:18:49:3c:24:23:
5a:65:dc:a7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
MTg1NEFSMTEwLwYDVQQFEygzMzA4NEZBRjkzM0M3MjREMzJFNkRGQTc5RjE1Q0Qx
NkYzRDgyRTc0MB4XDTIzMTAyMzE0MTIxM1oXDTMzMTAyMzE0MTIxM1owGDEWMBQG
A1UEAxMNNjUzNjdmNDEtYWE4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK6kDs8I6WKNgIg4uvO9OtraPoHNAEpzKQpCJGtE/R6hsz9BmPJVQJdE7n+g
2ne3/rrTS6Y0WFqiT7gX8NLJr8grVQicCFPStg477W8P9hruwaeJhEwczcMCPI/N
Ptoea9HAY9bdudSqwh9NIqt1/LK9p2UAU5QNvkbtPx5lOJYbrjXN48Uk1dswQqhc
OUseEqItJzueJic3qOJuVXqeHICeMP6qAVYuBvAtBxVgMCrL93NjSiV4z+7K+CNL
zJ0KnOxII30b1gzJiILD9LQQDw6DQB8mvgWgSP5QJlwdDZy7QmDvwW0JoJxfGxv+
kNWz614pk8SENPmiJ5MCnpQ/vz0CAwEAAaOCAqEwggKdMB0GA1UdDgQWBBSsH+HL
NQdaM2WSXK9QKkKVjoo1NzAfBgNVHSMEGDAWgBQzCE+vkzxyTTLm36efFc0W89gu
dDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTE4NTQvNzBDN0UwRkE3MUFEMTFFRThDNzE5RTMzNEFEOUU2RkMvTXdoUHI1
TThjazB5NXQtbm54WE5GdlBZTG5RLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
TXdoUHI1TThjazB5NXQtbm54WE5GdlBZTG5RLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTE4NTQvNzBDN0UwRkE3MUFEMTFFRThDNzE5RTMzNEFEOUU2
RkMvMkJCQzAzM0M3MUFFMTFFRUEyRDJFNTM1NEFEOUU2RkMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKRYMA0GCSqGSIb3DQEBCwUAA4IB
AQA260bnPseTKLgGXSu6hZloI0BNuS52dT3dN1L0gQaqF72NOUvFNZudStf+GRVP
vOCOn6zZ0ZubfTd0U1g5spU+QuYOa9jNDN0hu1pcHX/QO8vZGGilSucdOGeq6jr9
/QshFPrCFpXSK6GXkb8YxuYYS0p0qi6es4XsPDu5Of3pnAQEwNxo9RuySWx4bfs6
7MO7ClgPSkA77lC+KijG0/qmqnX4YbUGwQGavy1cDY8y2SRfXvsgn+gYFgheXDuw
dEewzH/O/iIAHh2N5YCDvxGLKx9iuKW4uZTQ4oaOeqv6bJrFPBOWMoIXGgFCvvFl
rSzoPzqb+M4tGEk8JCNaZdyn
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org