Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B0E2CF8C28B11EFA15E6FBA762E951A.roa
File: 5B0E2CF8C28B11EFA15E6FBA762E951A.roa (raw, json)
Hash identifier: t95X/HxHjuKt5RjusDW9/xSd5/+tqnTSUr3QWVEmZU0=
Subject key identifier: BB:47:23:DF:88:31:BF:4A:50:A5:AE:68:61:EF:0C:78:F0:BB:E9:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E967
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B0E2CF8C28B11EFA15E6FBA762E951A.roa
Signing time: Wed 25 Dec 2024 06:42:06 +0000
ROA not before: Wed 25 Dec 2024 06:42:02 +0000
ROA not after: Wed 10 Dec 2025 06:42:02 +0000
asID: 984
IP address blocks: 156.228.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59751 (0xe967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:42:02 2024 GMT
Not After : Dec 10 06:42:02 2025 GMT
Subject: CN=676ba93d-ec18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:ac:96:2c:51:8c:ac:cb:98:07:d1:df:5c:
a5:3c:ed:d8:d7:66:f8:cf:4b:33:35:cd:f5:3b:6f:
2f:55:ae:f0:61:cb:4f:05:6a:6f:a5:69:33:52:c3:
da:89:a4:af:99:5d:2d:37:af:05:1b:47:6c:5b:13:
0c:d2:c3:fe:f9:f6:5d:52:2c:13:f2:33:21:bc:60:
aa:b0:47:f5:f2:0b:7e:65:32:eb:e5:39:36:37:6d:
5f:fe:dd:e2:48:36:88:db:1b:1b:66:6d:03:84:e5:
71:c8:b3:51:ec:f8:0f:13:88:d7:5f:b5:a4:b3:67:
0f:51:98:7c:6d:d1:12:dc:09:15:6a:e2:46:13:e4:
46:2f:4f:3a:5b:63:7a:20:ef:c0:f1:de:3c:90:6d:
f0:a9:dc:19:47:76:9f:d6:b2:a6:a8:d4:6e:e5:3f:
89:8e:22:1b:1b:60:75:05:7a:b0:56:8d:c5:4f:bc:
b3:15:55:7d:4d:5e:87:6a:65:af:9b:6b:ab:0c:28:
8a:4a:af:20:d7:4d:2f:fa:75:bc:3f:d9:ac:0e:3e:
fe:d8:f2:7a:f1:f2:bf:97:38:a8:16:ca:a4:d3:95:
aa:ab:36:64:54:f9:23:d8:af:13:25:39:94:6a:05:
c6:99:f9:a3:a5:1e:48:1d:01:15:12:cb:57:58:57:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:23:DF:88:31:BF:4A:50:A5:AE:68:61:EF:0C:78:F0:BB:E9:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B0E2CF8C28B11EFA15E6FBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:62:b3:ad:69:dc:9a:df:f3:06:ad:a7:fc:6d:ca:be:b8:bf:
9c:19:bf:95:ac:4f:0b:d5:17:92:cd:0d:ca:97:bb:ee:1b:0e:
53:29:af:53:37:18:d7:63:bc:ad:40:19:0d:86:72:a8:04:7a:
aa:62:ff:e7:f4:6b:ed:e0:35:7a:a9:84:b8:30:b9:d3:96:0d:
80:fe:b1:3b:18:22:19:f4:0b:ac:c8:6e:5d:ae:52:02:90:dd:
5d:7e:00:a1:b9:56:9f:5f:13:ad:16:39:85:d5:5e:1b:40:be:
ea:89:f4:71:35:c0:57:84:82:ac:e4:a2:55:f4:c1:9f:f7:53:
87:3b:f6:24:fe:68:e9:7d:66:61:45:49:b4:ca:32:81:8f:d6:
a9:87:72:ce:ac:84:1c:12:01:c4:bf:d8:1d:1f:71:73:07:b8:
cb:b5:6c:84:88:5d:8e:7a:4e:dd:d5:cc:ba:2f:b3:60:b6:bf:
1a:a1:e2:93:e8:a5:c0:1e:8e:3a:22:a2:f3:14:d4:67:db:fc:
41:6c:91:92:04:aa:fb:4d:c0:40:17:a5:81:83:3b:10:fc:21:
50:5a:37:1d:0a:3a:46:c0:86:3a:23:09:04:bd:01:37:1c:48:
0f:1f:e2:f0:d1:c9:c4:89:25:fe:ed:af:69:de:c4:75:4e:7e:
5d:a6:ec:06
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOlnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDY0MjAyWhcNMjUxMjEwMDY0MjAyWjAYMRYw
FAYDVQQDEw02NzZiYTkzZC1lYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqUGslixRjKzLmAfR31ylPO3Y12b4z0szNc31O28vVa7wYctPBWpvpWkz
UsPaiaSvmV0tN68FG0dsWxMM0sP++fZdUiwT8jMhvGCqsEf18gt+ZTLr5Tk2N21f
/t3iSDaI2xsbZm0DhOVxyLNR7PgPE4jXX7Wks2cPUZh8bdES3AkVauJGE+RGL086
W2N6IO/A8d48kG3wqdwZR3af1rKmqNRu5T+JjiIbG2B1BXqwVo3FT7yzFVV9TV6H
amWvm2urDCiKSq8g100v+nW8P9msDj7+2PJ68fK/lzioFsqk05WqqzZkVPkj2K8T
JTmUagXGmfmjpR5IHQEVEstXWFeH7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLtH
I9+IMb9KUKWuaGHvDHjwu+m4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QjBFMkNGOEMyOEIxMUVGQTE1RTZGQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOTKMA0GCSqGSIb3DQEBCwUA
A4IBAQCMYrOtadya3/MGraf8bcq+uL+cGb+VrE8L1ReSzQ3Kl7vuGw5TKa9TNxjX
Y7ytQBkNhnKoBHqqYv/n9Gvt4DV6qYS4MLnTlg2A/rE7GCIZ9AusyG5drlICkN1d
fgChuVafXxOtFjmF1V4bQL7qifRxNcBXhIKs5KJV9MGf91OHO/Yk/mjpfWZhRUm0
yjKBj9aph3LOrIQcEgHEv9gdH3FzB7jLtWyEiF2Oek7d1cy6L7Ngtr8aoeKT6KXA
Ho46IqLzFNRn2/xBbJGSBKr7TcBAF6WBgzsQ/CFQWjcdCjpGwIY6IwkEvQE3HEgP
H+Lw0cnEiSX+7a9p3sR1Tn5dpuwG
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:31 2025 by rpki-client