Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/095467CECD7611EFB1697CA6762E951A.roa
File: 095467CECD7611EFB1697CA6762E951A.roa (raw, json)
Hash identifier: E1j9xGY6/zO9Z4igRQxSbAIAlRAuvHwM0leR0Dk0q4E=
Subject key identifier: 9D:1A:C4:9E:46:94:17:30:35:F5:FC:3A:4C:9C:41:35:76:03:2D:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/095467CECD7611EFB1697CA6762E951A.roa
Signing time: Wed 08 Jan 2025 04:07:12 +0000
ROA not before: Wed 08 Jan 2025 04:07:08 +0000
ROA not after: Mon 13 Dec 2027 04:07:08 +0000
asID: 17561
IP address blocks: 156.248.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65457 (0xffb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:07:08 2025 GMT
Not After : Dec 13 04:07:08 2027 GMT
Subject: CN=677df9f0-5b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:59:a8:4e:63:e6:eb:53:be:01:2e:b1:b3:
9d:a6:e4:5f:19:c4:58:99:d7:7d:14:83:79:40:16:
4b:47:31:7e:69:96:ef:54:72:81:7f:26:63:95:dc:
74:c5:11:38:55:2f:5e:29:67:ee:43:39:1d:2d:93:
0c:d1:83:be:7a:25:29:d2:b4:f3:b9:63:e0:af:50:
88:44:28:c1:df:cd:55:ad:26:5e:f0:8f:44:e6:c6:
b9:c7:d0:6f:cf:aa:df:e9:0d:c7:a6:5b:ba:06:19:
3e:15:66:43:e4:4c:89:c2:14:bb:cc:8a:56:17:04:
4e:28:2a:57:42:9c:94:95:49:84:5c:93:9d:05:08:
26:ef:14:67:95:d1:0b:d2:03:bc:06:95:89:b1:04:
a8:14:fe:c6:10:b4:f5:f1:cd:8c:b2:e4:64:61:62:
04:28:9b:79:c3:36:bd:16:ef:7c:23:38:ac:89:72:
b5:0a:b1:38:15:3b:ca:09:5e:5c:2f:74:e9:3e:48:
7f:b2:d5:7d:d2:e0:10:60:42:5e:00:25:21:6b:e2:
8f:5c:e5:cb:b1:b7:8c:b3:08:fd:a4:e1:3b:46:54:
fb:47:ab:04:fb:ff:50:7e:fa:ea:a9:0a:a9:82:16:
4e:cf:ff:34:59:0d:4c:d4:55:0f:2f:ec:3e:1e:54:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:C4:9E:46:94:17:30:35:F5:FC:3A:4C:9C:41:35:76:03:2D:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/095467CECD7611EFB1697CA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.98.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b1:ad:7e:97:ad:07:60:15:7b:f0:ed:63:05:71:57:f7:9d:
e2:91:e7:2d:0d:3a:8c:f8:cd:89:0a:a6:0b:16:ba:7a:51:a3:
8a:52:ad:6c:1b:d1:32:fc:33:e0:be:e3:01:ca:36:ba:57:be:
b0:aa:22:3e:f4:0f:37:d3:f5:3c:92:bb:96:b5:0a:8f:58:e5:
4b:14:e2:9f:69:d4:41:72:49:1b:25:e8:a4:90:35:b0:c7:dd:
1d:2b:cc:12:43:25:18:87:7c:22:92:c6:b8:85:cd:d2:f7:4e:
6a:6f:e1:11:4b:03:6d:85:ba:4a:2e:b9:43:f9:bf:28:77:ea:
85:b8:4d:da:df:79:b2:51:78:60:d6:0c:5e:22:38:23:38:aa:
43:46:00:86:16:25:44:92:13:00:e2:6f:f4:9e:b3:25:9e:9f:
bf:9a:a4:4d:e3:fc:56:29:69:2b:96:6d:c5:47:6d:99:92:d7:
fd:5c:49:af:8f:eb:e6:23:7e:8a:50:2c:b4:36:d3:97:92:db:
5c:e8:f7:a2:e6:58:59:c5:bf:62:0c:ef:c9:01:96:a4:f4:d0:
68:5e:a4:9c:c6:a1:37:4c:d7:e7:34:fc:36:c3:02:41:e2:04:
72:b7:af:c8:20:01:30:61:c0:33:07:db:d9:49:8b:2c:5d:ce:
e5:68:53:d1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP+xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDQwNzA4WhcNMjcxMjEzMDQwNzA4WjAYMRYw
FAYDVQQDEw02NzdkZjlmMC01YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtShZqE5j5utTvgEusbOdpuRfGcRYmdd9FIN5QBZLRzF+aZbvVHKBfyZj
ldx0xRE4VS9eKWfuQzkdLZMM0YO+eiUp0rTzuWPgr1CIRCjB381VrSZe8I9E5sa5
x9Bvz6rf6Q3Hplu6Bhk+FWZD5EyJwhS7zIpWFwROKCpXQpyUlUmEXJOdBQgm7xRn
ldEL0gO8BpWJsQSoFP7GELT18c2MsuRkYWIEKJt5wza9Fu98IzisiXK1CrE4FTvK
CV5cL3TpPkh/stV90uAQYEJeACUha+KPXOXLsbeMswj9pOE7RlT7R6sE+/9Qfvrq
qQqpghZOz/80WQ1M1FUPL+w+HlS6VQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ0a
xJ5GlBcwNfX8OkycQTV2Ay3tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOTU0NjdDRUNENzYxMUVGQjE2OTdDQTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhiMA0GCSqGSIb3DQEBCwUA
A4IBAQAmsa1+l60HYBV78O1jBXFX953ikectDTqM+M2JCqYLFrp6UaOKUq1sG9Ey
/DPgvuMByja6V76wqiI+9A830/U8kruWtQqPWOVLFOKfadRBckkbJeikkDWwx90d
K8wSQyUYh3wiksa4hc3S905qb+ERSwNthbpKLrlD+b8od+qFuE3a33myUXhg1gxe
IjgjOKpDRgCGFiVEkhMA4m/0nrMlnp+/mqRN4/xWKWkrlm3FR22Zktf9XEmvj+vm
I36KUCy0NtOXkttc6Pei5lhZxb9iDO/JAZak9NBoXqScxqE3TNfnNPw2wwJB4gRy
t6/IIAEwYcAzB9vZSYssXc7laFPR
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:41 2025 by rpki-client