Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/8B63089E8D4611EFB2C80677762E951A.roa
File: 8B63089E8D4611EFB2C80677762E951A.roa (raw, json)
Hash identifier: 7RlPZSOI9gXmBQ7Dll0fi05tXme13qPi3h8btnC/JTU=
Subject key identifier: 1F:F7:07:CB:65:D9:0A:80:7A:1C:F1:1C:31:7E:C6:89:B5:40:B8:34
Certificate issuer: /CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Certificate serial: 37
Authority key identifier: 1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Authority info access: rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/8B63089E8D4611EFB2C80677762E951A.roa
Signing time: Fri 18 Oct 2024 11:46:00 +0000
ROA not before: Fri 18 Oct 2024 11:45:56 +0000
ROA not after: Wed 18 Oct 2034 11:45:56 +0000
asID: 37680
IP address blocks: 155.93.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Validity
Not Before: Oct 18 11:45:56 2024 GMT
Not After : Oct 18 11:45:56 2034 GMT
Subject: CN=67124a78-93c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:76:a8:b6:8e:b7:5f:22:49:23:c7:61:92:
06:a3:e9:7b:f3:e6:05:95:f1:fd:b4:b9:3e:45:9d:
88:0a:8b:35:91:e5:c9:4a:02:68:df:e6:eb:f3:6a:
bf:5a:1f:a0:eb:8d:0d:ae:4f:3a:92:2f:75:44:4e:
b2:75:aa:18:29:b0:6d:b2:60:8b:f3:66:2d:ab:9c:
f5:b8:72:8f:1e:97:7a:ad:bf:9a:bc:20:61:85:e2:
fb:d8:fa:04:71:72:7d:7e:33:4f:7b:6a:3a:66:e2:
9f:a5:e9:57:a6:be:50:5a:c0:b4:0d:a8:b7:2b:30:
6d:53:66:df:62:e4:5f:31:0f:1b:13:90:97:64:26:
c6:1c:53:ad:68:c2:86:3d:45:7a:45:ac:76:57:bd:
2e:e8:8c:03:43:db:b1:94:d2:5f:08:39:59:39:c3:
3d:5e:dc:e9:67:04:d3:2e:68:4d:1c:ff:82:23:ce:
13:e9:71:93:57:03:04:e7:a2:73:1f:9c:0c:17:32:
c2:d2:19:c1:3c:1a:5d:06:37:95:af:76:fe:cb:bd:
49:b9:70:78:6a:f5:e9:4e:1b:0e:d3:3a:b4:fc:83:
ab:40:0c:d7:f3:7e:d2:f0:eb:df:f2:11:59:e7:98:
0d:de:8e:c9:6b:29:68:2b:bd:37:da:6c:78:9e:41:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:07:CB:65:D9:0A:80:7A:1C:F1:1C:31:7E:C6:89:B5:40:B8:34
X509v3 Authority Key Identifier:
keyid:1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/8B63089E8D4611EFB2C80677762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.93.208.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:ad:dc:49:fa:31:18:5a:e1:c3:4c:d2:1b:1b:2f:31:f5:cb:
12:78:84:b4:d1:52:9e:b2:69:fc:9c:ab:db:30:1a:49:d9:a8:
b8:06:de:a0:71:e9:ce:e0:14:e9:06:cb:7b:18:3c:5d:aa:71:
67:2d:f9:89:4d:cc:df:7e:8f:94:9a:b6:98:0f:cc:9d:d5:c6:
06:b8:fa:fd:21:60:4e:93:09:1b:05:e1:62:d6:ee:52:14:ce:
f7:9d:14:38:51:ff:d9:2e:69:f6:ea:f7:1d:29:a6:81:a5:65:
b2:d4:26:06:d3:cf:08:bc:f0:18:3a:aa:b6:9b:84:7c:15:16:
8f:2b:aa:f0:5a:3b:3d:04:09:51:81:75:c8:bc:21:c8:6f:1a:
0a:be:b7:5b:8c:ec:67:84:c8:38:d7:e3:38:11:88:a0:76:17:
fc:f3:3d:2a:36:d7:eb:15:77:a2:10:39:4a:d7:98:fd:ae:77:
3e:64:a0:01:12:f5:91:cd:c0:d0:58:88:a4:b2:06:fc:bc:5d:
cd:ec:bb:04:0c:bd:6c:e0:ee:84:3a:11:75:27:01:90:90:df:
ff:fc:a2:0d:cf:a3:29:48:90:11:60:6d:a4:8c:d1:34:60:a1:
bf:37:d7:85:02:76:77:b8:2e:31:59:68:ba:43:5e:0d:f9:03:
35:04:9e:3b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBNzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
QzZDOEFSMTEwLwYDVQQFEygxQTgxODVGQ0Y2M0QwNzlCMjA2QTM0QThCOTk0ODdB
NTlEODE4RTVEMB4XDTI0MTAxODExNDU1NloXDTM0MTAxODExNDU1NlowGDEWMBQG
A1UEAxMNNjcxMjRhNzgtOTNjODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANpPdqi2jrdfIkkjx2GSBqPpe/PmBZXx/bS5PkWdiAqLNZHlyUoCaN/m6/Nq
v1ofoOuNDa5POpIvdUROsnWqGCmwbbJgi/NmLauc9bhyjx6Xeq2/mrwgYYXi+9j6
BHFyfX4zT3tqOmbin6XpV6a+UFrAtA2otyswbVNm32LkXzEPGxOQl2QmxhxTrWjC
hj1FekWsdle9LuiMA0PbsZTSXwg5WTnDPV7c6WcE0y5oTRz/giPOE+lxk1cDBOei
cx+cDBcywtIZwTwaXQY3la92/su9SblweGr16U4bDtM6tPyDq0AM1/N+0vDr3/IR
WeeYDd6OyWspaCu9N9pseJ5BtTUCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBQf9wfL
ZdkKgHoc8RwxfsaJtUC4NDAfBgNVHSMEGDAWgBQagYX89j0HmyBqNKi5lIelnYGO
XTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkM2QzgvQkNBREJFOEM3MEUzMTFFRkI0QUIxNzQ1NzYyRTk1MUEvR29HRl9Q
WTlCNXNnYWpTb3VaU0hwWjJCamwwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
R29HRl9QWTlCNXNnYWpTb3VaU0hwWjJCamwwLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RkM2QzgvQkNBREJFOEM3MEUzMTFFRkI0QUIxNzQ1NzYyRTk1
MUEvOEI2MzA4OUU4RDQ2MTFFRkIyQzgwNjc3NzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJtd0DANBgkqhkiG9w0BAQsFAAOC
AQEAna3cSfoxGFrhw0zSGxsvMfXLEniEtNFSnrJp/Jyr2zAaSdmouAbeoHHpzuAU
6QbLexg8XapxZy35iU3M336PlJq2mA/MndXGBrj6/SFgTpMJGwXhYtbuUhTO950U
OFH/2S5p9ur3HSmmgaVlstQmBtPPCLzwGDqqtpuEfBUWjyuq8Fo7PQQJUYF1yLwh
yG8aCr63W4zsZ4TIONfjOBGIoHYX/PM9KjbX6xV3ohA5SteY/a53PmSgARL1kc3A
0FiIpLIG/Lxdzey7BAy9bODuhDoRdScBkJDf//yiDc+jKUiQEWBtpIzRNGChvzfX
hQJ2d7guMVloukNeDfkDNQSeOw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:49 2024 by rpki-client on console-ams.rpki-client.org