Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/170698EEC98C11EF86D4A148762E951A.roa
File: 170698EEC98C11EF86D4A148762E951A.roa (raw, json)
Hash identifier: 12p6XVLI3aqRaaECAzap6fiYxMHwOWvHQdGL8YQu48E=
Subject key identifier: C5:EC:06:B1:47:5F:8B:D5:E5:02:C9:DC:AA:CE:C6:C8:D0:A1:42:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/170698EEC98C11EF86D4A148762E951A.roa
Signing time: Fri 03 Jan 2025 04:34:59 +0000
ROA not before: Fri 03 Jan 2025 04:34:55 +0000
ROA not after: Mon 13 Dec 2027 04:34:55 +0000
asID: 17561
IP address blocks: 156.233.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62903 (0xf5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:34:55 2025 GMT
Not After : Dec 13 04:34:55 2027 GMT
Subject: CN=677768f3-dbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:e0:68:7e:1a:db:f8:48:ba:8c:d9:0e:b9:
94:52:ca:b1:d1:a2:95:a9:2d:3a:7b:04:9d:c3:37:
54:99:ac:0e:d9:8d:2c:4c:8b:3d:f8:48:28:e6:97:
e4:ef:03:30:b0:54:a8:54:56:1a:11:ff:dc:c2:ee:
95:46:cd:49:11:6f:3f:12:86:bb:82:df:91:86:1b:
c8:96:36:6c:0d:cb:fb:0b:dc:38:49:97:73:00:be:
dc:35:11:31:df:c8:ff:7a:74:5e:1f:0d:6d:1f:8a:
d7:e8:f7:0c:a0:ed:fa:aa:52:60:74:81:b6:be:42:
90:de:f1:44:45:cb:5e:f4:66:10:6a:54:23:a8:62:
8d:c7:21:aa:88:42:fe:60:60:c5:fb:70:e0:c6:21:
61:e8:d5:b8:b8:44:07:d4:60:70:da:b7:87:ac:89:
4e:be:65:cb:0a:9a:d0:16:4c:36:e3:75:bd:ac:e6:
fa:c6:a2:dd:5f:57:67:af:20:2e:63:77:d1:d8:b1:
d7:55:55:b1:cb:2c:a6:14:4f:44:1c:e7:f5:a1:9b:
0f:e6:1b:c3:24:de:70:e7:a4:ba:94:a1:07:c0:4c:
d6:87:46:41:60:0f:ab:31:38:3f:78:6f:39:29:de:
7d:16:2e:02:65:ab:3c:73:d4:94:d0:3d:50:31:14:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:06:B1:47:5F:8B:D5:E5:02:C9:DC:AA:CE:C6:C8:D0:A1:42:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/170698EEC98C11EF86D4A148762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.46.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b0:fe:a8:b6:ec:00:79:32:8a:f6:ff:3c:ae:bc:b7:81:27:
1e:0b:a8:c3:7a:d2:60:7c:46:50:86:68:63:8c:6b:e2:7c:bb:
66:08:5f:43:2d:b3:6a:0c:84:b5:fd:e8:4e:d4:b1:e6:8b:9d:
77:36:c0:7f:66:63:22:b1:9b:2b:1d:d1:a6:5c:7a:79:88:51:
14:43:c8:f3:94:6b:8d:f5:81:47:72:1f:a8:33:12:95:b0:9d:
82:da:4f:c0:c0:10:bf:35:8c:e3:b4:9e:14:ca:0c:17:e2:6d:
45:57:87:00:38:58:ca:6f:9b:6a:6c:42:65:6b:68:88:ac:76:
fa:d3:c4:2f:2d:ab:7b:36:c3:b5:69:49:2b:03:3a:e1:c8:67:
1e:7e:19:98:0d:a0:3d:b6:dd:6f:90:b9:8a:18:0c:4c:a2:14:
27:7c:fc:d5:37:57:80:95:e1:77:f1:3c:f1:ea:f1:c2:ed:4b:
6c:79:03:21:7f:bd:e8:ca:f7:91:e9:12:b7:b6:35:55:92:fc:
86:ff:f5:45:33:66:d9:77:f8:59:a1:26:5f:5b:bd:65:36:69:
8d:3a:43:29:eb:37:d8:15:c4:9d:15:03:98:1d:3d:43:f2:d4:
f0:5e:b6:e4:63:ee:6a:ab:e1:1b:3b:31:be:12:c1:e3:8e:d5:
9f:88:b1:02
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPW3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDQzNDU1WhcNMjcxMjEzMDQzNDU1WjAYMRYw
FAYDVQQDEw02Nzc3NjhmMy1kYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8LgaH4a2/hIuozZDrmUUsqx0aKVqS06ewSdwzdUmawO2Y0sTIs9+Ego
5pfk7wMwsFSoVFYaEf/cwu6VRs1JEW8/Eoa7gt+RhhvIljZsDcv7C9w4SZdzAL7c
NREx38j/enReHw1tH4rX6PcMoO36qlJgdIG2vkKQ3vFERcte9GYQalQjqGKNxyGq
iEL+YGDF+3DgxiFh6NW4uEQH1GBw2reHrIlOvmXLCprQFkw243W9rOb6xqLdX1dn
ryAuY3fR2LHXVVWxyyymFE9EHOf1oZsP5hvDJN5w56S6lKEHwEzWh0ZBYA+rMTg/
eG85Kd59Fi4CZas8c9SU0D1QMRTX8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMXs
BrFHX4vV5QLJ3KrOxsjQoUKyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzA2OThFRUM5OEMxMUVGODZENEExNDg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkuMA0GCSqGSIb3DQEBCwUA
A4IBAQBosP6otuwAeTKK9v88rry3gSceC6jDetJgfEZQhmhjjGvifLtmCF9DLbNq
DIS1/ehO1LHmi513NsB/ZmMisZsrHdGmXHp5iFEUQ8jzlGuN9YFHch+oMxKVsJ2C
2k/AwBC/NYzjtJ4UygwX4m1FV4cAOFjKb5tqbEJla2iIrHb608QvLat7NsO1aUkr
AzrhyGcefhmYDaA9tt1vkLmKGAxMohQnfPzVN1eAleF38Tzx6vHC7UtseQMhf73o
yveR6RK3tjVVkvyG//VFM2bZd/hZoSZfW71lNmmNOkMp6zfYFcSdFQOYHT1D8tTw
XrbkY+5qq+EbOzG+EsHjjtWfiLEC
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:23 2025 by rpki-client