Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/498EDCB4C95411EFA9886650762E951A.roa
File: 498EDCB4C95411EFA9886650762E951A.roa (raw, json)
Hash identifier: Ds9LQcSCb+cyFFEc4JwAiRbhqSiTQ8wEEmO1Og8DaeU=
Subject key identifier: D5:E4:22:05:C7:1D:EA:A7:C6:10:92:68:26:37:FD:C5:A3:3C:B9:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/498EDCB4C95411EFA9886650762E951A.roa
Signing time: Thu 02 Jan 2025 21:55:32 +0000
ROA not before: Thu 02 Jan 2025 21:55:28 +0000
ROA not after: Mon 13 Dec 2027 21:55:28 +0000
asID: 17561
IP address blocks: 156.226.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62438 (0xf3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 21:55:28 2025 GMT
Not After : Dec 13 21:55:28 2027 GMT
Subject: CN=67770b54-cd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:29:5f:43:26:5b:30:89:a0:e9:b6:37:86:
42:c7:94:23:11:ff:fd:0b:ca:c5:31:e5:ba:a9:44:
a4:00:4d:9d:0a:2a:bc:0d:26:1c:e7:86:b9:fd:c6:
dd:74:01:2b:7d:f1:ae:9a:80:1c:0c:e5:d3:56:d1:
97:02:8c:99:2a:83:0e:de:7f:89:51:53:a2:42:ef:
8e:7f:f8:eb:3c:d0:fa:45:fb:9e:24:ea:40:c9:7c:
8a:68:0d:d3:bc:b0:77:02:0d:fa:66:a0:87:fc:a2:
32:f1:1c:45:4b:e9:2f:bc:76:0e:da:68:a7:87:4a:
54:6a:00:86:a2:f9:d5:b9:43:18:92:3a:1c:4d:d8:
b6:36:b7:36:b1:69:d8:3d:13:d1:d8:3f:00:7e:22:
e5:ec:23:a7:dc:0b:c5:73:59:c7:2f:45:7b:b5:2c:
ac:5a:aa:f1:6d:8f:49:f6:c2:47:f4:e4:86:ef:b0:
ff:ec:a6:4c:a2:1d:57:eb:ed:fe:d0:53:b8:5a:74:
1d:bd:27:22:cc:fa:d1:98:fe:6b:d6:1c:17:e8:38:
c7:5d:4f:b0:a9:d6:8a:37:8b:8d:97:6b:99:11:e6:
d6:7b:e5:47:79:ec:34:8c:db:7c:6e:a3:86:8f:6c:
54:14:58:8c:cc:d4:00:c2:89:79:bb:df:c6:b6:cf:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E4:22:05:C7:1D:EA:A7:C6:10:92:68:26:37:FD:C5:A3:3C:B9:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/498EDCB4C95411EFA9886650762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:35:b4:2e:cd:60:27:79:13:4a:6c:38:16:c0:b6:16:e5:3d:
61:2a:0c:8c:06:8d:23:85:53:73:8d:30:1c:2b:12:80:61:58:
a3:b1:1c:15:e7:82:95:28:81:af:15:c7:d6:f0:88:12:34:b9:
5c:9c:51:a9:b7:8a:8f:ab:b4:dd:a2:9f:f2:27:ac:80:13:07:
42:71:a3:13:d5:34:f0:b4:64:f4:0d:f3:21:81:f5:dc:f5:83:
d9:62:3e:e4:70:ff:4e:65:a7:25:17:5e:84:24:7e:65:2d:99:
40:2d:cb:90:7b:2f:83:fd:25:bd:97:86:b8:fe:72:63:ba:8a:
20:e4:0c:7c:aa:23:5f:3b:b6:ff:5d:de:6f:4a:90:06:82:f1:
98:01:13:ae:b8:d5:cd:48:50:ec:8b:fe:3a:d9:ba:34:30:b4:
e7:d0:bc:10:37:9d:f8:df:05:53:ac:3f:99:9d:33:b2:0f:10:
7c:bc:49:c9:f0:e6:f6:f5:c7:72:4a:07:86:54:ba:19:25:63:
c0:6c:00:11:71:91:7b:76:4c:71:71:72:95:23:d1:5d:29:f9:
da:32:f1:40:ad:2d:2e:a4:8a:02:dd:6f:60:e9:14:5b:78:bc:
69:09:9d:3c:17:cf:45:fe:08:3f:06:f2:a2:aa:cc:a8:aa:60:
c1:0b:9b:c8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPPmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjE1NTI4WhcNMjcxMjEzMjE1NTI4WjAYMRYw
FAYDVQQDEw02Nzc3MGI1NC1jZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmg0pX0MmWzCJoOm2N4ZCx5QjEf/9C8rFMeW6qUSkAE2dCiq8DSYc54a5
/cbddAErffGumoAcDOXTVtGXAoyZKoMO3n+JUVOiQu+Of/jrPND6RfueJOpAyXyK
aA3TvLB3Ag36ZqCH/KIy8RxFS+kvvHYO2minh0pUagCGovnVuUMYkjocTdi2Nrc2
sWnYPRPR2D8AfiLl7COn3AvFc1nHL0V7tSysWqrxbY9J9sJH9OSG77D/7KZMoh1X
6+3+0FO4WnQdvScizPrRmP5r1hwX6DjHXU+wqdaKN4uNl2uZEebWe+VHeew0jNt8
bqOGj2xUFFiMzNQAwol5u9/Gts+h8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNXk
IgXHHeqnxhCSaCY3/cWjPLlUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OThFRENCNEM5NTQxMUVGQTk4ODY2NTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOKLMA0GCSqGSIb3DQEBCwUA
A4IBAQCmNbQuzWAneRNKbDgWwLYW5T1hKgyMBo0jhVNzjTAcKxKAYVijsRwV54KV
KIGvFcfW8IgSNLlcnFGpt4qPq7Tdop/yJ6yAEwdCcaMT1TTwtGT0DfMhgfXc9YPZ
Yj7kcP9OZaclF16EJH5lLZlALcuQey+D/SW9l4a4/nJjuoog5Ax8qiNfO7b/Xd5v
SpAGgvGYAROuuNXNSFDsi/462bo0MLTn0LwQN5343wVTrD+ZnTOyDxB8vEnJ8Ob2
9cdySgeGVLoZJWPAbAARcZF7dkxxcXKVI9FdKfnaMvFArS0upIoC3W9g6RRbeLxp
CZ08F89F/gg/BvKiqsyoqmDBC5vI
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:13 2025 by rpki-client