Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E858E38CE3B11EF925C0592762E951A.roa
File: 0E858E38CE3B11EF925C0592762E951A.roa (raw, json)
Hash identifier: Q507SrbiLWJUQ5Nzq7D5UMP3x8ux38WzM1WP2gXHdfo=
Subject key identifier: 3D:99:7F:DC:B4:E2:98:C9:BC:C3:3B:41:30:7E:5B:3A:6B:F5:38:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010245
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E858E38CE3B11EF925C0592762E951A.roa
Signing time: Thu 09 Jan 2025 03:37:32 +0000
ROA not before: Thu 09 Jan 2025 03:37:25 +0000
ROA not after: Fri 09 Jan 2026 03:37:25 +0000
asID: 17561
IP address blocks: 156.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66117 (0x10245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 03:37:25 2025 GMT
Not After : Jan 9 03:37:25 2026 GMT
Subject: CN=677f447c-a6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:a0:28:43:e2:56:2a:9e:eb:ef:e1:3c:5d:
b3:00:ae:23:4f:60:39:f6:e0:2c:2a:12:6b:4d:47:
96:f5:b9:40:35:e4:67:aa:ad:2b:4f:e9:a4:06:68:
8c:8a:95:75:4c:5b:45:29:5d:46:f2:e9:78:d4:49:
9f:cd:2d:4e:5f:2c:ae:99:28:d8:88:4b:62:3e:55:
12:26:90:7a:a8:34:b3:ce:80:bf:10:94:48:0c:cd:
a2:70:b4:45:33:82:48:ab:6c:42:6f:02:da:9d:65:
59:5e:bf:dc:55:1f:20:75:28:a8:90:fd:d9:4d:00:
66:85:1b:3e:14:2b:5b:b3:96:aa:15:50:9c:8b:86:
42:1c:a1:34:19:56:d0:ad:27:ff:05:e0:d1:e6:bd:
42:82:aa:8b:cd:11:c1:59:97:9c:9b:50:07:5f:e2:
a6:9e:17:d7:72:52:eb:a4:c7:2f:49:91:97:50:2d:
47:df:9c:fe:3c:6c:56:02:59:e9:0f:db:38:e1:5c:
49:c9:68:22:d6:33:06:67:4c:c3:c4:33:07:ff:67:
e3:9d:06:6c:5d:b0:2c:cb:fc:b9:a0:9b:52:e1:be:
2b:8f:ce:9c:10:b3:50:7a:1f:f1:9a:b9:7b:d8:cb:
47:f0:af:c5:80:a3:9b:ed:e9:00:ae:e9:60:a4:d5:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:7F:DC:B4:E2:98:C9:BC:C3:3B:41:30:7E:5B:3A:6B:F5:38:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E858E38CE3B11EF925C0592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
55:94:fd:49:4d:43:d8:37:24:8e:7b:a4:95:b8:e2:73:47:76:
4c:a5:51:f5:3d:1c:53:35:73:9f:b7:4f:1e:c6:fe:85:51:b6:
be:56:35:e5:44:b1:97:d6:c0:b5:92:d2:e0:ac:72:a0:38:0f:
57:00:82:00:b7:96:69:1a:22:16:0e:39:36:23:fa:be:34:dd:
8c:39:5f:0b:8d:04:c8:54:4b:16:4c:a3:31:78:02:82:a9:8b:
4a:d4:9f:ad:fb:04:86:8b:db:ad:98:b4:ec:5b:ca:60:36:8e:
c0:80:9b:72:31:72:7e:d5:1f:87:25:fc:7c:d4:1f:ab:25:8a:
43:6b:2f:02:e2:45:73:8b:4b:a9:68:9e:11:5b:34:64:d4:a8:
02:da:e6:3c:29:5b:36:bb:6c:a9:8e:3e:e7:5b:f8:74:d6:8b:
7a:dd:18:e3:c5:cf:1a:a7:85:d9:ec:65:24:71:83:0e:dc:0f:
dd:77:76:ff:fe:df:0c:09:a5:63:cc:de:18:86:a9:78:31:a1:
9e:43:30:2b:90:4d:57:cc:bb:3e:8b:6f:6e:e4:18:9e:fe:cb:
79:bb:39:45:72:c1:c0:a4:37:53:ab:da:a2:e3:a4:31:39:d4:
87:75:42:ba:6c:8c:fe:89:6d:69:e4:80:f1:6f:3e:e1:4c:f1:
4d:60:1c:dd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQJFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MDMzNzI1WhcNMjYwMTA5MDMzNzI1WjAYMRYw
FAYDVQQDEw02NzdmNDQ3Yy1hNmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0AmgKEPiViqe6+/hPF2zAK4jT2A59uAsKhJrTUeW9blANeRnqq0rT+mk
BmiMipV1TFtFKV1G8ul41EmfzS1OXyyumSjYiEtiPlUSJpB6qDSzzoC/EJRIDM2i
cLRFM4JIq2xCbwLanWVZXr/cVR8gdSiokP3ZTQBmhRs+FCtbs5aqFVCci4ZCHKE0
GVbQrSf/BeDR5r1CgqqLzRHBWZecm1AHX+KmnhfXclLrpMcvSZGXUC1H35z+PGxW
AlnpD9s44VxJyWgi1jMGZ0zDxDMH/2fjnQZsXbAsy/y5oJtS4b4rj86cELNQeh/x
mrl72MtH8K/FgKOb7ekArulgpNXHswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD2Z
f9y04pjJvMM7QTB+Wzpr9TiNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRTg1OEUzOENFM0IxMUVGOTI1QzA1OTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPc2MA0GCSqGSIb3DQEBCwUA
A4IBAQBVlP1JTUPYNySOe6SVuOJzR3ZMpVH1PRxTNXOft08exv6FUba+VjXlRLGX
1sC1ktLgrHKgOA9XAIIAt5ZpGiIWDjk2I/q+NN2MOV8LjQTIVEsWTKMxeAKCqYtK
1J+t+wSGi9utmLTsW8pgNo7AgJtyMXJ+1R+HJfx81B+rJYpDay8C4kVzi0upaJ4R
WzRk1KgC2uY8KVs2u2ypjj7nW/h01ot63Rjjxc8ap4XZ7GUkcYMO3A/dd3b//t8M
CaVjzN4Yhql4MaGeQzArkE1XzLs+i29u5Bie/st5uzlFcsHApDdTq9qi46QxOdSH
dUK6bIz+iW1p5IDxbz7hTPFNYBzd
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:21 2025 by rpki-client