Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CEA6D72CD9E11EFB9A81CA4762E951A.roa
File: 3CEA6D72CD9E11EFB9A81CA4762E951A.roa (raw, json)
Hash identifier: PXhynrf8IM4RLDgqTsMDwW5UYxG6Zms35xxjuY5C1s8=
Subject key identifier: 1C:63:D6:5F:C2:DE:31:A9:FF:25:46:34:2E:DF:CF:6E:83:C2:69:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CEA6D72CD9E11EFB9A81CA4762E951A.roa
Signing time: Wed 08 Jan 2025 08:54:58 +0000
ROA not before: Wed 08 Jan 2025 08:54:55 +0000
ROA not after: Mon 13 Dec 2027 08:54:55 +0000
asID: 17561
IP address blocks: 156.252.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65708 (0x100ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:54:55 2025 GMT
Not After : Dec 13 08:54:55 2027 GMT
Subject: CN=677e3d62-5bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:43:6f:45:c4:0d:10:3a:9f:1c:9f:04:73:
a1:08:e5:e9:50:9b:20:3e:8c:2b:ca:e2:df:16:d8:
3c:ec:a2:9d:a9:53:35:82:22:20:7e:db:4f:3a:2b:
5d:41:58:b6:29:cc:91:aa:d9:00:a8:f5:61:14:8e:
8c:79:2e:4b:8d:ed:61:f4:5f:ca:71:7e:40:26:94:
13:33:2c:e2:53:7d:ae:d2:c0:0a:54:63:78:22:32:
8b:7b:cc:58:d8:a5:27:e1:35:98:3d:04:34:fe:c1:
25:5f:2d:51:e4:99:fe:c7:9a:7a:fc:c3:4b:0a:6d:
2c:b0:b8:ea:46:c9:58:ed:74:cb:98:50:35:65:39:
49:e0:13:58:32:11:06:9c:6e:d9:13:04:c8:50:95:
0c:df:c6:aa:18:ed:54:0d:b7:5a:0f:40:e4:44:4b:
b9:58:4d:8e:29:a3:e8:3d:91:dd:08:77:66:11:fe:
b9:30:b6:5b:ca:86:58:c9:20:b0:6a:a1:82:49:16:
cf:23:bf:10:a1:07:a7:ee:08:9e:81:c5:a4:13:bc:
e9:12:cd:e1:ac:f2:9d:31:fb:97:59:25:4a:fc:60:
e7:84:83:1c:02:f5:5c:a6:69:59:64:1e:55:f6:7f:
62:9a:76:a7:02:fe:1b:b4:28:c8:14:70:b7:94:b0:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:D6:5F:C2:DE:31:A9:FF:25:46:34:2E:DF:CF:6E:83:C2:69:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CEA6D72CD9E11EFB9A81CA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:10:ec:32:20:5c:d8:e2:1a:fa:49:43:82:0b:82:ca:a2:ff:
02:be:a8:20:4d:68:46:a8:97:34:b4:c9:cc:7f:13:c0:cb:9a:
a3:ab:6b:7a:cc:0a:4a:85:cf:56:3a:38:c7:71:24:20:75:c2:
44:75:58:eb:e6:5a:8e:96:8b:89:77:6a:ac:b8:48:8b:bc:d3:
49:68:81:05:8e:b7:1a:39:a2:ba:16:9e:09:9d:cc:fc:9b:30:
a2:ce:0c:3a:77:07:77:38:d6:51:39:64:e5:2c:80:46:4b:29:
f1:d6:13:98:24:ba:4b:eb:9e:7d:ee:07:25:19:e5:e7:c0:76:
05:ee:81:3c:9d:dc:93:3b:01:31:5a:68:09:5a:dd:85:31:9a:
f9:ee:de:ee:c1:bb:51:97:5b:8f:d3:a0:11:fa:a7:4b:e4:b1:
cc:0a:c3:1d:91:08:8d:a4:09:07:08:27:77:e7:4e:34:6b:22:
c8:8f:51:2f:60:99:8a:62:6a:d1:c4:77:03:8d:01:e5:38:fa:
b3:2e:7e:cf:5d:4d:06:1b:a8:aa:06:36:28:e8:a4:08:2f:d8:
e2:4b:75:23:a5:c7:ca:23:bb:83:3f:c6:c5:d0:fb:f1:1b:f4:
85:77:55:6f:41:8b:11:bb:83:da:ee:be:dc:af:77:bc:11:ef:
0b:b5:af:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQCsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDg1NDU1WhcNMjcxMjEzMDg1NDU1WjAYMRYw
FAYDVQQDEw02NzdlM2Q2Mi01YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0I1Db0XEDRA6nxyfBHOhCOXpUJsgPowryuLfFtg87KKdqVM1giIgfttP
OitdQVi2KcyRqtkAqPVhFI6MeS5Lje1h9F/KcX5AJpQTMyziU32u0sAKVGN4IjKL
e8xY2KUn4TWYPQQ0/sElXy1R5Jn+x5p6/MNLCm0ssLjqRslY7XTLmFA1ZTlJ4BNY
MhEGnG7ZEwTIUJUM38aqGO1UDbdaD0DkREu5WE2OKaPoPZHdCHdmEf65MLZbyoZY
ySCwaqGCSRbPI78QoQen7giegcWkE7zpEs3hrPKdMfuXWSVK/GDnhIMcAvVcpmlZ
ZB5V9n9imnanAv4btCjIFHC3lLDBuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBxj
1l/C3jGp/yVGNC7fz26DwmlgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQ0VBNkQ3MkNEOUUxMUVGQjlBODFDQTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPw7MA0GCSqGSIb3DQEBCwUA
A4IBAQBLEOwyIFzY4hr6SUOCC4LKov8CvqggTWhGqJc0tMnMfxPAy5qjq2t6zApK
hc9WOjjHcSQgdcJEdVjr5lqOlouJd2qsuEiLvNNJaIEFjrcaOaK6Fp4Jncz8mzCi
zgw6dwd3ONZROWTlLIBGSynx1hOYJLpL65597gclGeXnwHYF7oE8ndyTOwExWmgJ
Wt2FMZr57t7uwbtRl1uP06AR+qdL5LHMCsMdkQiNpAkHCCd35040ayLIj1EvYJmK
YmrRxHcDjQHlOPqzLn7PXU0GG6iqBjYo6KQIL9jiS3UjpcfKI7uDP8bF0PvxG/SF
d1VvQYsRu4Pa7r7cr3e8Ee8Lta/s
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:54 2025 by rpki-client