Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5827E5E2CF2E11EFB23CC29B762E951A.roa
File: 5827E5E2CF2E11EFB23CC29B762E951A.roa (raw, json)
Hash identifier: Zo81OCT0d15LZU5Vi8m3H5wwa4czDWwxshAibDuO5Ao=
Subject key identifier: 02:B8:02:49:84:9A:A2:B8:70:BB:7D:23:4F:A0:AE:27:4A:71:E9:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010523
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5827E5E2CF2E11EFB23CC29B762E951A.roa
Signing time: Fri 10 Jan 2025 08:39:03 +0000
ROA not before: Fri 10 Jan 2025 08:38:59 +0000
ROA not after: Sat 22 Mar 2025 08:38:59 +0000
asID: 142286
IP address blocks: 156.250.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66851 (0x10523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:38:59 2025 GMT
Not After : Mar 22 08:38:59 2025 GMT
Subject: CN=6780dca7-7cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:05:f9:99:cc:aa:7a:bc:fd:e5:10:ef:10:
dd:1a:c8:c3:15:3b:16:44:53:8b:9f:dc:8a:78:87:
3f:5a:e6:9a:10:b7:7a:b9:7b:0b:6c:4a:71:92:ca:
09:49:c3:26:62:e6:bc:8d:0e:31:f8:d6:2a:58:9e:
5f:3d:b1:77:cc:39:7b:fd:9a:4d:13:20:f6:0a:fd:
75:46:ce:e5:8d:06:43:c0:e4:9d:58:17:27:ba:6a:
85:eb:3e:f8:01:0b:d0:ad:0d:49:0d:f5:d2:d0:4b:
4c:14:ee:f9:e5:73:9a:61:46:77:f7:db:7b:5f:84:
a0:74:1d:bf:ca:72:5c:af:1e:ed:a1:1e:c6:8d:a2:
53:8c:8a:e3:d9:1a:b4:36:0d:17:ab:4f:9e:c1:75:
a1:da:d7:81:ad:0c:7f:b5:91:55:6a:c4:48:1c:e3:
e7:82:15:e6:1b:c8:c7:83:1f:33:b3:64:e7:7d:10:
d8:31:ee:86:5a:ac:99:20:cf:50:f7:e8:82:7d:ca:
96:dd:e8:30:57:ed:b6:1e:51:95:54:9a:f7:3d:33:
72:ec:91:61:45:58:cc:ef:21:15:5b:70:ad:19:c8:
10:95:b6:a5:a4:9a:10:bc:53:40:5f:25:48:be:b4:
3c:22:4d:27:f7:b6:e6:53:b3:8a:0b:78:9a:dd:ea:
b2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:02:49:84:9A:A2:B8:70:BB:7D:23:4F:A0:AE:27:4A:71:E9:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5827E5E2CF2E11EFB23CC29B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0/22
Signature Algorithm: sha256WithRSAEncryption
77:2a:b3:2b:09:34:8d:24:a2:03:2f:f0:08:37:ad:03:13:aa:
6b:51:03:bd:90:da:b3:7e:16:2a:88:58:07:c6:1d:21:6f:67:
10:68:f6:b6:01:b8:70:f4:8f:a6:d2:75:4c:d9:30:3b:ca:4c:
12:dc:31:19:5e:7a:67:14:34:51:fe:f7:54:dd:49:fb:4f:0c:
32:05:ad:e6:ef:5f:7b:63:1e:10:c1:3b:a9:9c:e0:1e:98:03:
16:35:ed:9d:fb:c8:22:ef:b3:e6:65:ca:f4:b9:55:ec:4c:3a:
ae:28:bd:ed:e8:3f:d0:e9:2f:b3:48:24:9f:b4:a3:74:16:ae:
68:a6:7b:d4:97:9c:49:e2:e6:66:0e:9a:f2:66:ce:31:0f:1e:
9e:a2:28:36:05:4c:1a:76:76:1b:d5:e3:0c:92:0b:ba:27:53:
ba:3a:b0:c2:78:03:18:3f:95:60:0c:53:7d:8a:bd:24:8f:5e:
8c:bb:ca:1a:d9:22:8c:46:db:d7:37:89:92:61:8c:3a:7c:77:
c1:b6:54:3d:f4:a4:6c:3e:6b:ab:e1:02:3c:4d:05:ef:c2:ec:
91:b4:ab:af:ee:c1:de:d9:08:b0:84:0a:71:4b:47:55:60:1c:
2b:6b:eb:06:67:13:15:2e:3f:fb:39:1a:76:d8:db:f6:50:38:
48:a5:5a:74
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQUjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDgzODU5WhcNMjUwMzIyMDgzODU5WjAYMRYw
FAYDVQQDEw02NzgwZGNhNy03Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3DwF+ZnMqnq8/eUQ7xDdGsjDFTsWRFOLn9yKeIc/WuaaELd6uXsLbEpx
ksoJScMmYua8jQ4x+NYqWJ5fPbF3zDl7/ZpNEyD2Cv11Rs7ljQZDwOSdWBcnumqF
6z74AQvQrQ1JDfXS0EtMFO755XOaYUZ399t7X4SgdB2/ynJcrx7toR7GjaJTjIrj
2Rq0Ng0Xq0+ewXWh2teBrQx/tZFVasRIHOPnghXmG8jHgx8zs2TnfRDYMe6GWqyZ
IM9Q9+iCfcqW3egwV+22HlGVVJr3PTNy7JFhRVjM7yEVW3CtGcgQlbalpJoQvFNA
XyVIvrQ8Ik0n97bmU7OKC3ia3eqyKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAK4
AkmEmqK4cLt9I0+gridKcelAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODI3RTVFMkNGMkUxMUVGQjIzQ0MyOUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPoEMA0GCSqGSIb3DQEBCwUA
A4IBAQB3KrMrCTSNJKIDL/AIN60DE6prUQO9kNqzfhYqiFgHxh0hb2cQaPa2Abhw
9I+m0nVM2TA7ykwS3DEZXnpnFDRR/vdU3Un7TwwyBa3m7197Yx4QwTupnOAemAMW
Ne2d+8gi77PmZcr0uVXsTDquKL3t6D/Q6S+zSCSftKN0Fq5opnvUl5xJ4uZmDpry
Zs4xDx6eoig2BUwadnYb1eMMkgu6J1O6OrDCeAMYP5VgDFN9ir0kj16Mu8oa2SKM
RtvXN4mSYYw6fHfBtlQ99KRsPmur4QI8TQXvwuyRtKuv7sHe2QiwhApxS0dVYBwr
a+sGZxMVLj/7ORp22Nv2UDhIpVp0
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:07 2025 by rpki-client