Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2B0CA0CD7711EF9FD3F4AE762E951A.roa
File: 5B2B0CA0CD7711EF9FD3F4AE762E951A.roa (raw, json)
Hash identifier: uZwSYMKk60T+kGPgJhtEqQV8hYvffKpj4KuwD5VMHCA=
Subject key identifier: 01:4A:5B:44:05:E9:E9:27:70:C7:64:37:AF:CE:98:A6:02:F4:8E:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2B0CA0CD7711EF9FD3F4AE762E951A.roa
Signing time: Wed 08 Jan 2025 04:16:39 +0000
ROA not before: Wed 08 Jan 2025 04:16:35 +0000
ROA not after: Mon 13 Dec 2027 04:16:35 +0000
asID: 17561
IP address blocks: 156.250.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65467 (0xffbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:16:35 2025 GMT
Not After : Dec 13 04:16:35 2027 GMT
Subject: CN=677dfc26-444d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:d1:20:9d:af:66:7b:81:9b:5d:6e:11:29:
e7:36:dc:bb:ae:24:7a:ca:cf:5e:22:0e:79:5b:4c:
28:7e:78:6b:66:d1:6c:c5:d4:64:db:db:ec:57:b1:
6f:ba:25:2e:52:97:61:67:b9:87:50:2d:57:9b:fd:
34:9e:4e:b2:1c:e0:61:10:13:43:2b:4f:ea:e5:27:
91:fe:7d:cb:38:71:96:7e:68:6c:98:04:97:11:90:
c9:3d:5d:63:c8:a3:55:96:f6:9a:14:01:3d:5b:e2:
5f:00:a2:f3:03:5c:97:45:e4:32:b3:aa:38:64:64:
c7:bf:ae:1b:3e:61:bc:e2:1f:9d:3f:7d:9d:9d:74:
03:8f:7b:e9:71:91:84:66:40:5f:18:3d:fe:bf:68:
84:5f:7f:9c:62:0e:4f:7f:ce:73:a8:39:8a:cb:c5:
0b:68:1f:3a:79:fb:37:93:05:58:50:6e:6c:5d:a9:
79:b1:78:65:f2:51:19:ac:3a:07:e1:9f:09:87:f9:
88:e1:0e:e0:55:a0:b7:ee:1e:60:ea:10:80:6d:60:
bb:5c:0b:bf:81:3e:8d:b0:13:e0:f3:75:38:63:71:
56:a6:3d:eb:0f:28:95:15:3d:e0:ea:28:0b:e9:f0:
76:67:d0:af:a7:9d:5f:96:02:64:f3:b0:2e:6f:c7:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4A:5B:44:05:E9:E9:27:70:C7:64:37:AF:CE:98:A6:02:F4:8E:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2B0CA0CD7711EF9FD3F4AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:f8:8f:29:7a:91:1d:4b:30:bf:91:35:34:78:86:40:5f:
43:3e:62:53:d2:8f:25:e3:8a:c0:77:a8:d3:9a:6d:80:a1:36:
7f:aa:12:68:d2:e0:64:8e:8b:bf:b5:d2:e7:3e:4a:94:23:93:
66:f9:7a:3b:f8:35:37:3b:d4:5d:67:27:88:07:0a:ee:ec:22:
01:ee:a8:8c:a6:37:14:c6:97:05:db:2c:7d:5c:da:8b:e3:33:
94:cb:29:46:29:5f:b8:3f:05:e3:8c:20:69:14:fd:a3:3d:c8:
96:6e:67:5b:c6:d8:df:2a:34:e8:65:ba:41:ab:49:2c:56:d6:
d1:64:0c:4c:57:69:e5:d2:1e:2c:2b:15:28:63:82:4e:db:7f:
1f:75:52:36:fd:fd:84:ed:b4:50:f5:79:f2:cc:bb:e4:b5:97:
ce:0f:7f:0a:2c:c6:27:13:41:fe:72:1d:1f:69:78:c1:3a:82:
c1:2c:55:a3:14:b3:87:af:47:9c:89:b3:a4:a0:93:95:22:eb:
b7:6e:0b:ef:6b:fe:d4:41:3b:01:d1:c8:58:9f:4b:a1:09:38:
27:a9:c6:a9:c3:77:15:b0:f4:9c:87:2f:b5:f4:73:30:46:c4:
64:e9:61:d0:74:03:ad:74:be:da:38:3f:80:65:e2:50:97:1f:
8d:2a:90:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP+7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDQxNjM1WhcNMjcxMjEzMDQxNjM1WjAYMRYw
FAYDVQQDEw02NzdkZmMyNi00NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyQ7RIJ2vZnuBm11uESnnNty7riR6ys9eIg55W0wofnhrZtFsxdRk29vs
V7FvuiUuUpdhZ7mHUC1Xm/00nk6yHOBhEBNDK0/q5SeR/n3LOHGWfmhsmASXEZDJ
PV1jyKNVlvaaFAE9W+JfAKLzA1yXReQys6o4ZGTHv64bPmG84h+dP32dnXQDj3vp
cZGEZkBfGD3+v2iEX3+cYg5Pf85zqDmKy8ULaB86efs3kwVYUG5sXal5sXhl8lEZ
rDoH4Z8Jh/mI4Q7gVaC37h5g6hCAbWC7XAu/gT6NsBPg83U4Y3FWpj3rDyiVFT3g
6igL6fB2Z9Cvp51flgJk87Aub8fJYQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAFK
W0QF6ekncMdkN6/OmKYC9I5TMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QjJCMENBMENENzcxMUVGOUZEM0Y0QUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPoiMA0GCSqGSIb3DQEBCwUA
A4IBAQBLCfiPKXqRHUswv5E1NHiGQF9DPmJT0o8l44rAd6jTmm2AoTZ/qhJo0uBk
jou/tdLnPkqUI5Nm+Xo7+DU3O9RdZyeIBwru7CIB7qiMpjcUxpcF2yx9XNqL4zOU
yylGKV+4PwXjjCBpFP2jPciWbmdbxtjfKjToZbpBq0ksVtbRZAxMV2nl0h4sKxUo
Y4JO238fdVI2/f2E7bRQ9XnyzLvktZfOD38KLMYnE0H+ch0faXjBOoLBLFWjFLOH
r0ecibOkoJOVIuu3bgvva/7UQTsB0chYn0uhCTgnqcapw3cVsPSchy+19HMwRsRk
6WHQdAOtdL7aOD+AZeJQlx+NKpDO
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:18 2025 by rpki-client