Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/3876EB0ED16811EE9C0E66A5775412E6.roa
File: 3876EB0ED16811EE9C0E66A5775412E6.roa (raw, json)
Hash identifier: +yOAS1cNO7QrZSN56ooSffQEaFtdkY96rU9n2WKG4AA=
Subject key identifier: E4:3A:F8:18:4C:1D:10:69:82:A7:FC:E6:03:5E:F1:BD:3B:C2:6C:FE
Certificate issuer: /CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Certificate serial: 0238
Authority key identifier: A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
Authority info access: rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/3876EB0ED16811EE9C0E66A5775412E6.roa
Signing time: Thu 22 Feb 2024 09:53:25 +0000
ROA not before: Thu 22 Feb 2024 09:53:22 +0000
ROA not after: Tue 28 Feb 2034 09:53:22 +0000
asID: 37638
IP address blocks: 169.255.64.0/24 maxlen: 24
169.255.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Validity
Not Before: Feb 22 09:53:22 2024 GMT
Not After : Feb 28 09:53:22 2034 GMT
Subject: CN=65d71995-faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:6a:41:7b:4c:18:ae:6b:20:4b:84:76:00:
2b:a4:a5:79:97:5c:e4:df:64:0d:5d:9e:cd:d3:c0:
96:13:9d:0c:61:66:68:94:be:6c:8b:00:5b:ea:83:
0e:7a:dc:c3:d9:cb:2b:d0:e6:da:fb:64:22:0a:0c:
2e:6d:43:5e:98:d6:d2:71:3a:b0:e1:7c:56:27:29:
79:32:0b:c4:6a:12:a3:d9:b0:07:b0:fb:19:9a:a4:
bf:5d:2a:1f:79:24:b2:74:8e:71:32:7f:27:89:b9:
e7:1a:d7:1e:30:43:19:16:62:03:2b:b5:09:43:40:
d6:4e:14:04:14:ef:dd:97:f1:5e:b5:10:1a:7f:b6:
c0:7b:d1:95:4a:3f:c7:06:42:1d:53:21:f5:af:43:
0b:48:d6:e5:06:1d:3b:1f:92:bc:62:ea:00:c6:49:
32:2c:5b:3a:ab:56:74:96:e3:37:2c:01:16:aa:db:
57:72:0e:c0:73:5e:8d:c3:4f:3f:94:cd:65:74:7f:
c7:92:ca:61:8e:d0:99:02:b4:c5:98:85:a3:47:88:
4d:04:02:db:59:b5:c9:77:1a:c6:dd:dd:75:b6:7e:
4a:3b:79:ca:b2:75:3f:80:81:2c:72:2a:bf:b2:bc:
9b:5e:d9:57:24:6b:2b:c0:4c:98:a8:0d:55:ee:d8:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3A:F8:18:4C:1D:10:69:82:A7:FC:E6:03:5E:F1:BD:3B:C2:6C:FE
X509v3 Authority Key Identifier:
keyid:A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/3876EB0ED16811EE9C0E66A5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.64.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:dd:77:e5:c3:26:b3:3c:2c:65:a2:0b:b8:f2:e6:d9:a6:7b:
fa:08:5a:53:38:e7:a4:58:1e:89:20:46:ef:52:75:dd:c5:97:
6e:b2:e9:44:97:ea:9e:51:c0:4d:dc:34:a6:26:4d:c9:73:d9:
6d:fb:64:87:20:44:ed:27:d6:42:d7:54:16:fc:96:0e:bb:a3:
87:4a:6f:2f:83:57:b4:ed:51:96:7b:3f:df:7f:22:42:74:96:
15:6e:60:3c:45:8a:50:95:72:8e:9e:87:c6:7f:7f:8f:90:1a:
12:17:7c:49:8f:8b:a3:be:af:ce:22:de:7b:11:b3:62:51:db:
23:31:ad:8d:42:1b:a8:80:b0:9c:eb:d4:f7:27:80:63:57:e1:
06:c6:c0:03:b4:f5:fa:25:82:99:2d:79:68:d3:ca:5c:e5:89:
71:19:56:5b:37:aa:11:1a:c1:e9:1d:53:b3:ac:62:63:c4:50:
86:22:9c:53:6e:1e:f6:60:4a:04:21:6f:b8:56:ed:72:8f:4c:
23:40:bb:d5:ae:57:81:5b:9b:9e:eb:d7:a8:2d:27:67:50:63:
c3:21:6a:1f:6a:37:5f:19:46:c5:a7:90:09:07:56:b3:4c:58:
97:9b:fd:0b:15:b6:3d:6e:c7:7c:c9:c0:d3:68:dc:9d:f9:ab:
eb:57:6f:32
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBUjExMC8GA1UEBRMoQTFFMDE2NDA2MzZDODNDMjJEMDcwOTkyNDJDQ0Y0
QzI2OTEwMkI1RTAeFw0yNDAyMjIwOTUzMjJaFw0zNDAyMjgwOTUzMjJaMBgxFjAU
BgNVBAMTDTY1ZDcxOTk1LWZhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKmmpBe0wYrmsgS4R2ACukpXmXXOTfZA1dns3TwJYTnQxhZmiUvmyLAFvq
gw563MPZyyvQ5tr7ZCIKDC5tQ16Y1tJxOrDhfFYnKXkyC8RqEqPZsAew+xmapL9d
Kh95JLJ0jnEyfyeJueca1x4wQxkWYgMrtQlDQNZOFAQU792X8V61EBp/tsB70ZVK
P8cGQh1TIfWvQwtI1uUGHTsfkrxi6gDGSTIsWzqrVnSW4zcsARaq21dyDsBzXo3D
Tz+UzWV0f8eSymGO0JkCtMWYhaNHiE0EAttZtcl3Gsbd3XW2fko7ecqydT+AgSxy
Kr+yvJte2VckayvATJioDVXu2J4bAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5Dr4
GEwdEGmCp/zmA17xvTvCbP4wHwYDVR0jBBgwFoAUoeAWQGNsg8ItBwmSQsz0wmkQ
K14wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0U5OUJDQkVBMkQxQjExRURBNTRGQzc4QkYxMjIyNDY4L29lQVdR
R05zZzhJdEJ3bVNRc3owd21rUUsxNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29lQVdRR05zZzhJdEJ3bVNRc3owd21rUUsxNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NDU5L0U5OUJDQkVBMkQxQjExRURBNTRGQzc4QkYxMjIy
NDY4LzM4NzZFQjBFRDE2ODExRUU5QzBFNjZBNTc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGp/0AwDQYJKoZIhvcNAQELBQAD
ggEBAI7dd+XDJrM8LGWiC7jy5tmme/oIWlM456RYHokgRu9Sdd3Fl26y6USX6p5R
wE3cNKYmTclz2W37ZIcgRO0n1kLXVBb8lg67o4dKby+DV7TtUZZ7P99/IkJ0lhVu
YDxFilCVco6eh8Z/f4+QGhIXfEmPi6O+r84i3nsRs2JR2yMxrY1CG6iAsJzr1Pcn
gGNX4QbGwAO09folgpkteWjTylzliXEZVls3qhEawekdU7OsYmPEUIYinFNuHvZg
SgQhb7hW7XKPTCNAu9WuV4Fbm57r16gtJ2dQY8Mhah9qN18ZRsWnkAkHVrNMWJeb
/QsVtj1ux3zJwNNo3J35q+tXbzI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:19 2024 by rpki-client on console-ams.rpki-client.org