Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1234B06AD31111EF8406D9B5762E951A.roa
File: 1234B06AD31111EF8406D9B5762E951A.roa (raw, json)
Hash identifier: 8z8PnShUZlSFKy8OXQA7XLB4zrKnxiLfZ1Tm23qw3b8=
Subject key identifier: 96:C5:5E:13:EE:2D:78:6C:7A:3C:5E:EE:BE:1C:E8:F6:1C:91:22:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01084B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1234B06AD31111EF8406D9B5762E951A.roa
Signing time: Wed 15 Jan 2025 07:19:35 +0000
ROA not before: Wed 15 Jan 2025 07:19:31 +0000
ROA not after: Mon 03 Jan 2028 07:19:31 +0000
asID: 17561
IP address blocks: 156.254.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67659 (0x1084b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 07:19:31 2025 GMT
Not After : Jan 3 07:19:31 2028 GMT
Subject: CN=67876186-255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:0a:ea:43:98:fe:dd:cc:35:4f:a7:15:1e:
99:a2:db:e3:af:fc:13:7f:2c:5d:f2:b5:c4:4b:2c:
9d:1a:a5:60:82:61:fc:00:03:0c:48:28:f2:73:b4:
b3:8c:a9:91:29:bb:d4:a3:f5:cb:6c:e3:0f:d8:dc:
80:ac:e4:3f:a8:50:ff:5f:cc:4d:7a:88:be:26:75:
6a:0e:de:83:ec:84:ba:e7:60:ee:90:35:5f:f9:b6:
6a:ed:a1:35:68:18:cd:79:90:fa:91:a7:09:ad:ae:
2b:f4:a3:a9:fd:c6:7e:d3:39:15:03:ef:46:e4:32:
b5:47:9a:90:90:e0:6c:5f:08:59:b4:8e:c8:46:4d:
dc:7e:87:ad:be:c3:26:60:c3:ee:8e:c7:6e:2a:32:
1c:6b:45:b9:b8:b5:38:7d:a8:8a:fd:74:14:3f:ca:
3d:36:a4:f0:39:20:68:72:c6:8e:e5:b4:4c:71:f8:
e0:d3:77:32:52:a1:a3:a1:9f:69:05:d4:df:fa:71:
49:7c:6b:5e:d8:dd:66:b8:63:bd:9c:a1:5a:7e:1e:
2f:f0:70:67:a0:e4:69:75:08:81:ba:e3:00:bc:49:
90:f6:48:f8:e5:0c:1a:43:25:0a:fc:52:e1:f7:7b:
7e:c0:28:ba:36:7a:26:75:92:b4:12:d3:bb:ec:17:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:5E:13:EE:2D:78:6C:7A:3C:5E:EE:BE:1C:E8:F6:1C:91:22:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1234B06AD31111EF8406D9B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a4:fb:0a:68:e6:4d:95:2d:6d:c2:76:f9:c7:f3:23:cb:1c:
10:10:cd:f4:2b:3a:f4:fb:e7:3d:c2:7d:9e:29:22:3a:16:b1:
f5:64:67:58:86:77:0a:4a:9c:e4:e0:5b:be:97:ba:68:98:c8:
8e:2a:bf:b0:2b:eb:01:9f:1b:12:f0:35:1f:c1:16:e5:95:95:
61:1e:08:39:08:99:f1:9d:d2:82:51:31:25:f7:af:9f:2f:e1:
48:df:19:ed:6f:a6:ec:87:8b:c2:de:27:c2:4f:de:2c:cb:e4:
da:94:d3:1d:b6:44:c4:46:26:80:dd:f5:9d:6b:6f:70:92:f4:
05:8b:5d:71:8d:46:76:c1:46:15:97:56:a0:c5:c7:4b:0d:90:
7a:09:52:16:43:90:d9:83:22:c3:60:5a:a7:6b:22:35:e3:12:
3f:b6:26:d3:26:10:61:0c:da:9f:5e:0d:48:af:c4:52:6f:43:
37:85:1e:a5:97:f7:8c:4c:9b:9c:1b:2e:45:66:95:26:57:24:
2e:df:48:5b:b7:da:7a:5a:75:6b:3d:b4:98:50:af:3f:e4:fe:
d1:20:77:79:61:ad:e4:25:da:a4:02:39:13:b2:eb:90:56:c5:
4f:9b:0c:4b:e2:5b:3c:90:1b:90:3f:fe:0a:06:09:ee:c7:a3:
7e:9a:cf:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQhLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDcxOTMxWhcNMjgwMTAzMDcxOTMxWjAYMRYw
FAYDVQQDEw02Nzg3NjE4Ni0yNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxJ8K6kOY/t3MNU+nFR6Zotvjr/wTfyxd8rXESyydGqVggmH8AAMMSCjy
c7SzjKmRKbvUo/XLbOMP2NyArOQ/qFD/X8xNeoi+JnVqDt6D7IS652DukDVf+bZq
7aE1aBjNeZD6kacJra4r9KOp/cZ+0zkVA+9G5DK1R5qQkOBsXwhZtI7IRk3cfoet
vsMmYMPujsduKjIca0W5uLU4faiK/XQUP8o9NqTwOSBocsaO5bRMcfjg03cyUqGj
oZ9pBdTf+nFJfGte2N1muGO9nKFafh4v8HBnoORpdQiBuuMAvEmQ9kj45QwaQyUK
/FLh93t+wCi6NnomdZK0EtO77Bcb/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJbF
XhPuLXhsejxe7r4c6PYckSLxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMjM0QjA2QUQzMTExMUVGODQwNkQ5QjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP47MA0GCSqGSIb3DQEBCwUA
A4IBAQCrpPsKaOZNlS1twnb5x/MjyxwQEM30Kzr0++c9wn2eKSI6FrH1ZGdYhncK
Spzk4Fu+l7pomMiOKr+wK+sBnxsS8DUfwRbllZVhHgg5CJnxndKCUTEl96+fL+FI
3xntb6bsh4vC3ifCT94sy+TalNMdtkTERiaA3fWda29wkvQFi11xjUZ2wUYVl1ag
xcdLDZB6CVIWQ5DZgyLDYFqnayI14xI/tibTJhBhDNqfXg1Ir8RSb0M3hR6ll/eM
TJucGy5FZpUmVyQu30hbt9p6WnVrPbSYUK8/5P7RIHd5Ya3kJdqkAjkTsuuQVsVP
mwxL4ls8kBuQP/4KBgnux6N+ms+m
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:17 2025 by rpki-client