Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C5FFBECD0511EF9EC9B34B762E951A.roa
File: 44C5FFBECD0511EF9EC9B34B762E951A.roa (raw, json)
Hash identifier: /5w2NbxVRkcGIg6HkRc/zCYvWKkhbq54J2MGf+sdEKo=
Subject key identifier: FE:31:1B:56:41:4B:7D:C2:61:0A:C5:76:EF:0B:D7:C6:0E:52:02:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C5FFBECD0511EF9EC9B34B762E951A.roa
Signing time: Tue 07 Jan 2025 14:39:58 +0000
ROA not before: Tue 07 Jan 2025 14:39:55 +0000
ROA not after: Mon 13 Dec 2027 14:39:55 +0000
asID: 17561
IP address blocks: 156.239.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64659 (0xfc93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:39:55 2025 GMT
Not After : Dec 13 14:39:55 2027 GMT
Subject: CN=677d3cbe-bf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:c9:1f:43:4c:e0:a2:99:17:88:fd:af:b5:
f1:19:a9:1c:46:d1:d3:be:1f:fc:0e:1e:de:1a:05:
7e:f0:0c:37:97:e4:ad:59:3e:30:13:f3:a3:9d:43:
9e:4c:f4:a7:f0:3c:cb:3a:93:47:a8:ef:dc:10:9b:
b3:39:d2:a5:98:7f:f4:30:ed:d5:70:5b:79:c4:1b:
03:61:a4:06:4e:a4:bd:db:55:ae:b0:c5:07:3e:87:
d9:1c:82:b0:0b:53:18:28:3d:55:59:47:02:d0:4a:
c5:ff:21:bb:8a:ef:54:a5:5a:2f:22:2d:fb:a4:f1:
df:48:e0:43:80:ae:5d:a7:79:f7:2f:28:38:88:fc:
00:3a:11:10:6e:b6:aa:4c:85:aa:86:21:dc:57:06:
32:16:5d:fb:89:c5:f5:3a:3d:1b:ff:bc:11:4d:64:
61:be:39:8e:78:40:09:ec:1a:e9:ed:da:0b:20:80:
26:e5:1e:65:a4:84:4a:3e:1a:5b:8a:c3:eb:04:d7:
12:e7:85:cf:4c:4b:f5:c8:18:57:32:17:8b:26:4f:
e7:93:a3:09:be:1b:54:af:26:e8:e2:4f:a6:1f:72:
03:fc:be:49:c8:28:3b:23:9d:1d:d5:df:75:03:78:
c7:5d:1d:97:c4:47:24:85:72:c8:77:d1:c2:64:3e:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:1B:56:41:4B:7D:C2:61:0A:C5:76:EF:0B:D7:C6:0E:52:02:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44C5FFBECD0511EF9EC9B34B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:73:a9:ce:65:1d:df:86:ac:5b:ff:b0:b7:38:81:aa:0e:68:
6f:bb:c9:bf:29:f6:19:b3:03:a2:e4:7e:fd:43:f9:ba:77:7b:
a1:90:04:83:35:f7:3d:ee:1d:13:cd:e5:b8:ae:22:b2:b9:1e:
93:56:50:b3:03:6e:9a:33:68:df:d9:ec:53:ff:2a:77:12:ce:
ff:8f:59:63:99:c1:a3:00:13:31:af:3a:6f:36:a4:6f:c4:14:
e6:b2:6c:75:67:b1:1a:5a:4b:bd:1f:29:9d:3a:69:df:7e:bf:
30:27:b0:24:0f:ea:51:18:f9:4e:c4:6e:c7:31:6c:43:3b:68:
4c:7a:fa:50:04:e2:01:7f:07:f4:ba:15:63:7a:5b:51:5f:97:
c3:c5:78:23:85:13:f5:5a:e7:95:7a:c8:65:79:f6:1b:ef:2f:
6e:8e:e0:12:e2:65:b6:fe:25:b7:af:c4:a6:90:3c:a8:04:03:
8a:71:65:71:d4:84:e8:b0:10:22:8a:04:79:1f:ea:b4:bb:c6:
60:78:0c:83:00:45:1d:8e:7f:0e:8a:49:bf:87:82:a0:c9:cb:
d5:fa:1b:78:39:4e:cf:60:ab:9c:04:98:90:5e:5f:e9:0d:9a:
b7:f3:77:db:59:74:07:bd:cf:ca:55:84:25:a4:7c:af:e5:6f:
fe:e6:25:01
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPyTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTQzOTU1WhcNMjcxMjEzMTQzOTU1WjAYMRYw
FAYDVQQDEw02NzdkM2NiZS1iZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxVPJH0NM4KKZF4j9r7XxGakcRtHTvh/8Dh7eGgV+8Aw3l+StWT4wE/Oj
nUOeTPSn8DzLOpNHqO/cEJuzOdKlmH/0MO3VcFt5xBsDYaQGTqS921WusMUHPofZ
HIKwC1MYKD1VWUcC0ErF/yG7iu9UpVovIi37pPHfSOBDgK5dp3n3Lyg4iPwAOhEQ
braqTIWqhiHcVwYyFl37icX1Oj0b/7wRTWRhvjmOeEAJ7Brp7doLIIAm5R5lpIRK
PhpbisPrBNcS54XPTEv1yBhXMheLJk/nk6MJvhtUrybo4k+mH3ID/L5JyCg7I50d
1d91A3jHXR2XxEckhXLId9HCZD5FDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP4x
G1ZBS33CYQrFdu8L18YOUgLBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NEM1RkZCRUNEMDUxMUVGOUVDOUIzNEI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO8bMA0GCSqGSIb3DQEBCwUA
A4IBAQCzc6nOZR3fhqxb/7C3OIGqDmhvu8m/KfYZswOi5H79Q/m6d3uhkASDNfc9
7h0TzeW4riKyuR6TVlCzA26aM2jf2exT/yp3Es7/j1ljmcGjABMxrzpvNqRvxBTm
smx1Z7EaWku9HymdOmnffr8wJ7AkD+pRGPlOxG7HMWxDO2hMevpQBOIBfwf0uhVj
eltRX5fDxXgjhRP1WueVeshlefYb7y9ujuAS4mW2/iW3r8SmkDyoBAOKcWVx1ITo
sBAiigR5H+q0u8ZgeAyDAEUdjn8Oikm/h4KgycvV+ht4OU7PYKucBJiQXl/pDZq3
83fbWXQHvc/KVYQlpHyv5W/+5iUB
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:59 2025 by rpki-client