Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AACECD4C95911EF94C4BA6E762E951A.roa
File: 5AACECD4C95911EF94C4BA6E762E951A.roa (raw, json)
Hash identifier: xC1oJUt/X1dZ3DyR6kjSxqNICQROiCAfi3vFLWtOhHw=
Subject key identifier: 8F:9F:2A:73:84:18:34:88:A9:A1:AA:99:59:F3:9A:A6:8C:CF:A7:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F416
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AACECD4C95911EF94C4BA6E762E951A.roa
Signing time: Thu 02 Jan 2025 22:31:48 +0000
ROA not before: Thu 02 Jan 2025 22:31:45 +0000
ROA not after: Mon 13 Dec 2027 22:31:45 +0000
asID: 17561
IP address blocks: 156.226.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62486 (0xf416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:31:45 2025 GMT
Not After : Dec 13 22:31:45 2027 GMT
Subject: CN=677713d4-ec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:88:6e:3d:63:3e:10:02:f6:3e:e5:09:d4:
d8:92:54:81:78:ad:94:be:6d:ea:2e:01:48:e0:2a:
55:60:83:34:8c:c3:07:cf:ce:b2:f3:87:57:96:73:
17:ba:67:a5:bb:5f:2e:04:03:21:20:b1:20:9c:87:
86:23:b9:66:ee:f1:b4:73:04:5f:a9:66:4f:cf:3c:
61:ab:5b:5d:99:0c:b7:ec:15:a5:28:88:0a:18:35:
98:3b:59:6c:48:8a:23:16:38:a4:f0:9d:a6:06:ad:
ff:d5:1f:59:67:30:56:21:d7:f1:b8:69:d3:c9:f9:
64:50:42:83:aa:63:16:1d:3a:06:2f:ae:42:55:d0:
5a:7c:37:66:b8:00:42:93:6b:a5:1c:46:93:a7:fb:
ad:8a:5e:ef:32:6a:ea:25:72:50:99:ea:c8:ba:e7:
8d:e6:d8:7b:e7:55:bf:e5:0e:af:05:73:a3:7f:17:
45:bf:2e:0f:04:93:01:37:8b:68:16:39:96:10:c7:
8b:6d:69:be:fe:99:21:51:4e:20:b4:7d:d7:6d:f6:
8d:1e:a4:c0:41:8b:80:2c:d9:53:d0:bd:78:e5:08:
1f:e6:7c:36:a4:23:f9:0d:86:4a:f2:f8:83:bf:38:
4c:c6:70:78:29:ed:d1:ba:a6:bc:e0:a7:c0:f8:d6:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:2A:73:84:18:34:88:A9:A1:AA:99:59:F3:9A:A6:8C:CF:A7:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5AACECD4C95911EF94C4BA6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:13:e2:ee:b8:f1:50:fa:39:62:f7:53:46:5a:c4:ce:26:ad:
6d:96:2d:21:bc:47:85:67:7e:ed:bf:86:dd:b7:34:a2:a5:bf:
78:83:cf:1a:8a:26:6b:48:a4:42:bb:41:be:c1:23:a7:b6:8b:
4a:bc:5c:e6:25:51:b5:18:a3:2d:e0:4d:53:3c:63:73:fa:b4:
17:e1:b0:38:7a:dc:c7:9d:f5:30:b6:65:98:89:15:b5:80:cf:
31:1a:c5:c3:5f:7a:fb:1b:3d:ba:3f:bf:52:69:f7:b2:de:06:
9c:b7:c8:98:f2:40:9c:0c:b6:4f:5b:06:46:d1:3f:68:fd:01:
64:df:44:f2:a7:7a:75:ec:6d:28:43:5a:e5:45:92:50:a8:a3:
d7:f0:df:93:73:71:b7:12:af:16:f3:52:ed:bf:91:93:11:c6:
5f:b1:11:09:a0:56:ef:47:57:ff:d7:a5:fe:3b:6f:d8:43:e4:
aa:af:5d:a2:bf:65:22:c5:fb:80:a4:c7:57:ce:2a:e7:19:6c:
f5:79:c1:76:10:1b:72:01:c1:21:75:7f:59:4d:80:91:5e:cc:
1d:c9:e9:52:e4:ac:74:3f:73:be:05:c8:07:f6:c4:a2:a2:5b:
a9:59:99:b8:7e:86:2b:93:de:93:91:1b:9c:f1:31:82:c3:a1:
6b:ed:fb:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPQWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjIzMTQ1WhcNMjcxMjEzMjIzMTQ1WjAYMRYw
FAYDVQQDEw02Nzc3MTNkNC1lYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxgGIbj1jPhAC9j7lCdTYklSBeK2Uvm3qLgFI4CpVYIM0jMMHz86y84dX
lnMXumelu18uBAMhILEgnIeGI7lm7vG0cwRfqWZPzzxhq1tdmQy37BWlKIgKGDWY
O1lsSIojFjik8J2mBq3/1R9ZZzBWIdfxuGnTyflkUEKDqmMWHToGL65CVdBafDdm
uABCk2ulHEaTp/util7vMmrqJXJQmerIuueN5th751W/5Q6vBXOjfxdFvy4PBJMB
N4toFjmWEMeLbWm+/pkhUU4gtH3XbfaNHqTAQYuALNlT0L145Qgf5nw2pCP5DYZK
8viDvzhMxnB4Ke3Ruqa84KfA+NZ8/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI+f
KnOEGDSIqaGqmVnzmqaMz6ckMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QUFDRUNENEM5NTkxMUVGOTRDNEJBNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOK5MA0GCSqGSIb3DQEBCwUA
A4IBAQCpE+LuuPFQ+jli91NGWsTOJq1tli0hvEeFZ37tv4bdtzSipb94g88aiiZr
SKRCu0G+wSOntotKvFzmJVG1GKMt4E1TPGNz+rQX4bA4etzHnfUwtmWYiRW1gM8x
GsXDX3r7Gz26P79Safey3gact8iY8kCcDLZPWwZG0T9o/QFk30Typ3p17G0oQ1rl
RZJQqKPX8N+Tc3G3Eq8W81Ltv5GTEcZfsREJoFbvR1f/16X+O2/YQ+Sqr12iv2Ui
xfuApMdXzirnGWz1ecF2EBtyAcEhdX9ZTYCRXswdyelS5Kx0P3O+BcgH9sSiolup
WZm4foYrk96TkRuc8TGCw6Fr7fvp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:20 2025 by rpki-client