Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27AA9978C33511EF86B3676D762E951A.roa
File: 27AA9978C33511EF86B3676D762E951A.roa (raw, json)
Hash identifier: P3bAueui3Hi+0vxmOyFPfMGXRCdeZohVlvaV9gVIhCE=
Subject key identifier: BB:4B:4C:3B:33:9F:99:6F:F0:9D:45:C9:B4:06:D2:61:73:E1:71:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27AA9978C33511EF86B3676D762E951A.roa
Signing time: Thu 26 Dec 2024 02:57:34 +0000
ROA not before: Thu 26 Dec 2024 02:57:30 +0000
ROA not after: Fri 10 Dec 2027 02:57:30 +0000
asID: 17561
IP address blocks: 156.244.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60223 (0xeb3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:57:30 2024 GMT
Not After : Dec 10 02:57:30 2027 GMT
Subject: CN=676cc61e-e1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:66:f4:8d:68:23:04:32:c1:2b:0b:7d:04:
30:3d:f1:29:05:76:5e:75:be:43:c3:22:47:16:72:
49:c2:94:d2:fb:11:ea:77:22:fe:fe:d4:9b:cc:5b:
03:3f:90:fb:4b:a9:e7:78:94:9e:7e:17:dd:9d:6e:
ff:20:61:e2:07:e4:05:e6:b6:b4:83:f3:62:e7:28:
32:58:bc:6f:b1:af:1b:36:19:63:63:74:bd:de:d5:
0f:e7:f1:e1:4a:0d:5c:8e:7a:f6:3f:40:50:c0:24:
32:7a:e9:5b:dd:3d:3d:eb:35:2e:ae:40:3e:3d:dd:
76:b0:a2:ca:d9:0e:fa:1d:c0:62:2b:4e:63:34:7c:
80:f3:1a:81:a2:64:bc:ef:d5:5d:98:f5:93:e8:f8:
76:0e:b7:f0:70:ab:3a:59:46:50:fb:33:a2:68:88:
92:50:68:70:1c:f7:25:22:1e:d8:ab:09:6f:e7:9f:
7f:d0:ef:f1:da:58:99:3b:dc:9d:61:43:d1:00:fc:
bc:24:ce:68:76:58:a6:1b:4b:e8:e0:7c:f6:bb:bd:
4a:96:f0:76:8f:4f:3c:4b:dd:a5:a3:09:25:94:96:
0f:34:61:00:21:64:44:c8:24:7f:f1:c3:69:e2:a4:
b5:37:79:51:02:97:cf:60:4c:2f:4e:be:b5:3c:41:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:4C:3B:33:9F:99:6F:F0:9D:45:C9:B4:06:D2:61:73:E1:71:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27AA9978C33511EF86B3676D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.155.0/24
Signature Algorithm: sha256WithRSAEncryption
78:06:67:fc:53:b5:ea:8d:fd:4e:fd:4d:d4:a8:26:7f:68:81:
a4:74:2d:d8:e3:8f:ec:a9:d2:bc:0c:86:2a:e4:0f:b7:a5:b8:
1b:31:a3:ff:9c:3c:8e:85:fa:b5:b9:09:8d:dc:fc:61:d6:0d:
73:e7:14:d6:5c:30:47:8a:b9:4a:4e:54:a8:68:27:dc:d4:11:
9f:7a:e4:21:3f:2b:82:9e:cf:35:9a:08:10:c3:e3:c9:41:64:
ea:70:8a:0c:7c:c6:54:bf:b7:28:b6:05:39:f7:ff:1b:c0:0e:
d5:2c:5b:81:0f:f0:98:22:44:eb:10:91:8b:06:7e:51:88:ad:
ce:8a:99:c7:96:8a:a1:3b:7c:bd:9c:5e:c6:77:34:d1:63:ef:
cb:c8:e6:83:2b:6f:81:a8:16:65:82:cc:60:eb:7d:64:0f:f9:
de:a8:7e:3d:e6:44:24:6d:4c:92:5f:6b:a4:53:7d:33:ce:66:
f3:9a:a1:9d:40:05:62:fc:95:73:af:f2:2c:3a:91:5c:91:03:
e4:60:ed:b6:16:5a:55:2e:4a:e8:06:58:a2:17:21:f8:64:10:
b7:73:e6:fb:4c:cd:22:17:1c:ce:89:ca:de:61:c0:b2:12:21:
53:de:8b:5e:88:76:2d:61:66:86:fa:1e:8a:28:c3:1b:63:6e:
28:70:50:8f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOs/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDI1NzMwWhcNMjcxMjEwMDI1NzMwWjAYMRYw
FAYDVQQDEw02NzZjYzYxZS1lMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2cZm9I1oIwQywSsLfQQwPfEpBXZedb5DwyJHFnJJwpTS+xHqdyL+/tSb
zFsDP5D7S6nneJSefhfdnW7/IGHiB+QF5ra0g/Ni5ygyWLxvsa8bNhljY3S93tUP
5/HhSg1cjnr2P0BQwCQyeulb3T096zUurkA+Pd12sKLK2Q76HcBiK05jNHyA8xqB
omS879VdmPWT6Ph2DrfwcKs6WUZQ+zOiaIiSUGhwHPclIh7Yqwlv559/0O/x2liZ
O9ydYUPRAPy8JM5odlimG0vo4Hz2u71KlvB2j088S92lowkllJYPNGEAIWREyCR/
8cNp4qS1N3lRApfPYEwvTr61PEFHKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLtL
TDszn5lv8J1FybQG0mFz4XEzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yN0FBOTk3OEMzMzUxMUVGODZCMzY3NkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPSbMA0GCSqGSIb3DQEBCwUA
A4IBAQB4Bmf8U7Xqjf1O/U3UqCZ/aIGkdC3Y44/sqdK8DIYq5A+3pbgbMaP/nDyO
hfq1uQmN3Pxh1g1z5xTWXDBHirlKTlSoaCfc1BGfeuQhPyuCns81mggQw+PJQWTq
cIoMfMZUv7cotgU59/8bwA7VLFuBD/CYIkTrEJGLBn5RiK3OipnHloqhO3y9nF7G
dzTRY+/LyOaDK2+BqBZlgsxg631kD/neqH495kQkbUySX2ukU30zzmbzmqGdQAVi
/JVzr/IsOpFckQPkYO22FlpVLkroBliiFyH4ZBC3c+b7TM0iFxzOicreYcCyEiFT
3oteiHYtYWaG+h6KKMMbY24ocFCP
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:44 2025 by rpki-client