Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06816DAECD9D11EF9EE5B69B762E951A.roa
File: 06816DAECD9D11EF9EE5B69B762E951A.roa (raw, json)
Hash identifier: bJjaQc8QJcooM4Tgg7n4AYU1wGfYwSrSHs74LPX8/HY=
Subject key identifier: E0:10:F3:7D:16:5E:21:EB:AB:51:99:D8:11:D8:C1:0B:7E:4E:3A:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010097
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06816DAECD9D11EF9EE5B69B762E951A.roa
Signing time: Wed 08 Jan 2025 08:46:17 +0000
ROA not before: Wed 08 Jan 2025 08:46:14 +0000
ROA not after: Mon 13 Dec 2027 08:46:14 +0000
asID: 17561
IP address blocks: 156.252.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65687 (0x10097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:46:14 2025 GMT
Not After : Dec 13 08:46:14 2027 GMT
Subject: CN=677e3b59-a41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:e3:d2:53:93:5e:a2:f6:94:93:c1:65:08:
5c:4a:ee:64:89:5b:b1:3b:cd:57:d6:61:f0:f7:a6:
94:73:bb:ae:1d:42:73:b8:78:e4:10:40:86:30:b2:
e1:d6:5c:3a:de:6d:a1:ef:f9:68:62:f5:9f:e2:b5:
bd:64:ed:57:3c:7c:69:88:99:88:28:eb:6c:38:ad:
24:db:af:9f:ed:5c:85:a5:20:6c:1c:f3:18:e8:b4:
4e:a4:17:3e:bb:de:1f:ff:44:47:27:0f:f5:11:01:
e0:05:98:31:a9:d3:43:36:1e:c9:bf:c5:5d:24:de:
70:d5:60:e0:c5:f7:4b:57:7c:02:59:a7:a6:5f:ff:
63:3c:95:d1:90:fc:0d:2d:43:34:a6:3e:fe:81:c2:
a1:b7:0b:57:ed:f6:d0:3e:cd:14:84:17:42:63:b6:
08:74:3f:ec:65:f3:09:23:84:ed:a3:f2:bf:c6:13:
bd:44:cc:1e:ee:8f:60:c5:4e:4d:ac:5e:1d:49:20:
f5:b0:d3:f6:c4:b0:ed:d8:a4:78:9c:ef:c4:8f:f8:
d3:72:f5:97:6e:4b:ce:f8:e0:78:35:f4:f9:b7:74:
0a:24:54:22:f0:9a:52:77:c0:de:3a:00:35:45:15:
3f:f6:9d:7a:6d:ee:c5:ee:9b:46:26:44:5f:4b:8d:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:F3:7D:16:5E:21:EB:AB:51:99:D8:11:D8:C1:0B:7E:4E:3A:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06816DAECD9D11EF9EE5B69B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.53.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8e:73:c2:28:6d:c4:91:67:82:f7:fe:03:97:05:ac:ec:56:
48:58:63:cb:34:c2:a9:43:ba:2f:b8:f9:2b:27:f8:7d:4e:db:
4e:2f:2e:66:4d:b7:d3:db:00:65:de:f1:e9:96:43:e7:5b:69:
81:21:56:ab:67:70:0b:c4:bd:1b:fe:23:4d:80:0d:d7:82:60:
be:d1:51:8c:67:e7:e6:43:ed:f5:36:8f:00:f4:37:14:c6:ed:
a7:4f:c2:88:2b:eb:22:c6:b3:45:2a:0a:b3:e7:e4:ba:c3:8e:
81:a5:09:1b:5a:64:f1:1f:fb:60:80:64:d7:b1:e4:9e:4d:80:
2e:62:78:f0:55:7a:9e:af:d7:3e:25:63:af:5c:46:e7:4a:57:
49:bf:ad:3f:c4:ff:fb:20:2d:ae:78:f3:b9:6f:0f:92:0e:b4:
40:23:e8:de:c6:8f:e3:15:13:e9:c3:09:50:44:41:46:c9:a2:
f6:25:44:9e:06:1d:9d:d2:d2:6e:3e:ec:6c:a7:4a:79:c2:25:
47:f7:b8:53:c5:e1:34:c9:5b:0a:70:d8:76:01:d1:e0:bb:64:
d4:0c:0f:3c:33:e8:37:0c:84:97:c5:5d:8e:7f:b8:32:0f:50:
47:f9:9d:04:ad:77:41:1d:e4:9b:e3:d3:6b:7a:24:c1:24:27:
73:79:c9:09
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQCXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDg0NjE0WhcNMjcxMjEzMDg0NjE0WjAYMRYw
FAYDVQQDEw02NzdlM2I1OS1hNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx1vj0lOTXqL2lJPBZQhcSu5kiVuxO81X1mHw96aUc7uuHUJzuHjkEECG
MLLh1lw63m2h7/loYvWf4rW9ZO1XPHxpiJmIKOtsOK0k26+f7VyFpSBsHPMY6LRO
pBc+u94f/0RHJw/1EQHgBZgxqdNDNh7Jv8VdJN5w1WDgxfdLV3wCWaemX/9jPJXR
kPwNLUM0pj7+gcKhtwtX7fbQPs0UhBdCY7YIdD/sZfMJI4Tto/K/xhO9RMwe7o9g
xU5NrF4dSSD1sNP2xLDt2KR4nO/Ej/jTcvWXbkvO+OB4NfT5t3QKJFQi8JpSd8De
OgA1RRU/9p16be7F7ptGJkRfS41SDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOAQ
830WXiHrq1GZ2BHYwQt+TjpEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjgxNkRBRUNEOUQxMUVGOUVFNUI2OUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPw1MA0GCSqGSIb3DQEBCwUA
A4IBAQAAjnPCKG3EkWeC9/4DlwWs7FZIWGPLNMKpQ7ovuPkrJ/h9TttOLy5mTbfT
2wBl3vHplkPnW2mBIVarZ3ALxL0b/iNNgA3XgmC+0VGMZ+fmQ+31No8A9DcUxu2n
T8KIK+sixrNFKgqz5+S6w46BpQkbWmTxH/tggGTXseSeTYAuYnjwVXqer9c+JWOv
XEbnSldJv60/xP/7IC2uePO5bw+SDrRAI+jexo/jFRPpwwlQREFGyaL2JUSeBh2d
0tJuPuxsp0p5wiVH97hTxeE0yVsKcNh2AdHgu2TUDA88M+g3DISXxV2Of7gyD1BH
+Z0ErXdBHeSb49NreiTBJCdzeckJ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:51 2025 by rpki-client