Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C84294ECD3E11EF9BB4E2B0762E951A.roa
File: 5C84294ECD3E11EF9BB4E2B0762E951A.roa (raw, json)
Hash identifier: xG7mxN/4m3W+exQh9noYlxUFmJhHN4lrxW6D7KqoQnw=
Subject key identifier: 36:C9:D3:72:4D:2F:23:5C:05:ED:06:B2:A8:9C:AF:85:D1:65:A8:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C84294ECD3E11EF9BB4E2B0762E951A.roa
Signing time: Tue 07 Jan 2025 21:28:40 +0000
ROA not before: Tue 07 Jan 2025 21:28:36 +0000
ROA not after: Sat 13 Dec 2025 21:28:36 +0000
asID: 984
IP address blocks: 156.243.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65115 (0xfe5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:28:36 2025 GMT
Not After : Dec 13 21:28:36 2025 GMT
Subject: CN=677d9c87-9f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:6a:9c:4e:28:5b:f9:b5:98:09:e5:1d:1a:
ed:96:63:c2:b5:ec:d0:65:ca:73:83:95:07:2d:ee:
09:76:cf:ee:57:ee:6a:eb:42:58:48:3c:1e:ab:d1:
65:4c:3c:cc:d8:96:22:5b:45:2c:a9:c9:3e:58:a7:
25:43:92:c4:37:30:e2:25:52:49:8d:a0:dd:e8:7b:
55:a8:12:b9:32:37:bd:84:39:6e:f4:15:84:c8:57:
08:51:fb:c2:43:ed:08:1e:9d:7d:62:04:31:c2:31:
f8:8c:8b:b9:b5:1b:73:d3:f0:e7:35:ec:b6:16:68:
d0:41:b6:2b:72:16:e2:c5:3b:58:b2:20:d0:c9:d2:
a4:c4:ad:2e:23:b2:19:4a:6a:d1:6c:96:b2:69:e1:
c9:2c:d4:e1:85:77:da:53:92:9c:af:19:9e:ea:74:
4e:eb:be:e8:47:fe:b8:5c:ed:74:f6:1f:6f:c0:1a:
37:3c:c9:80:1f:00:ee:91:93:6e:88:58:12:95:97:
fb:6c:af:83:d5:89:fb:9e:ad:7f:32:86:ff:bd:67:
98:c3:68:51:bb:f2:ac:2a:8e:f2:11:8f:c7:d0:4c:
f5:54:0b:8a:b6:26:9f:a1:af:8d:25:c5:6e:45:45:
4a:b9:22:69:87:cb:08:5d:5a:14:20:32:98:68:c5:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:D3:72:4D:2F:23:5C:05:ED:06:B2:A8:9C:AF:85:D1:65:A8:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C84294ECD3E11EF9BB4E2B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6f:df:26:81:53:89:1e:36:2a:a2:ed:53:05:73:22:67:92:
36:0e:6d:ee:dc:4a:ed:23:ad:ab:a0:e0:a8:da:8b:2a:4c:1d:
01:5b:8d:b2:9f:83:25:5a:0d:0f:28:e6:26:13:a1:f3:17:39:
e6:84:4c:48:88:5a:b9:59:2d:93:43:a4:f8:b6:06:22:d7:1e:
85:cf:e0:33:03:82:45:db:41:3d:d2:b4:52:7f:1d:d5:b2:54:
ff:f7:81:18:42:ca:fb:10:7e:df:59:c1:3c:02:b6:ef:c1:6c:
18:75:a9:a3:4c:21:67:35:15:1c:8e:4c:95:5d:cc:32:9e:f3:
0a:be:6a:34:89:cd:c3:c1:e6:c6:59:21:34:dd:26:41:09:63:
72:6b:4a:5e:10:27:22:dc:81:02:3a:71:43:2b:7f:23:1e:4e:
ad:96:01:dc:10:29:23:7b:52:16:fc:e6:70:08:b2:22:60:a3:
ad:8d:2a:0c:9f:47:d4:1a:1d:fe:d8:cd:b6:23:bb:a0:34:af:
a3:30:9d:22:3f:13:af:08:b2:21:f3:2d:ce:39:b2:c5:15:ad:
5c:20:02:63:60:e0:a8:9b:c5:8e:af:12:d5:ae:e9:b5:d6:b2:
14:2c:ff:9d:5a:81:b7:e8:17:eb:32:0c:6a:c8:bf:18:9d:05:
4e:f5:c0:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP5bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjEyODM2WhcNMjUxMjEzMjEyODM2WjAYMRYw
FAYDVQQDEw02NzdkOWM4Ny05ZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5mlqnE4oW/m1mAnlHRrtlmPCtezQZcpzg5UHLe4Jds/uV+5q60JYSDwe
q9FlTDzM2JYiW0Usqck+WKclQ5LENzDiJVJJjaDd6HtVqBK5Mje9hDlu9BWEyFcI
UfvCQ+0IHp19YgQxwjH4jIu5tRtz0/DnNey2FmjQQbYrchbixTtYsiDQydKkxK0u
I7IZSmrRbJayaeHJLNThhXfaU5Kcrxme6nRO677oR/64XO109h9vwBo3PMmAHwDu
kZNuiFgSlZf7bK+D1Yn7nq1/Mob/vWeYw2hRu/KsKo7yEY/H0Ez1VAuKtiafoa+N
JcVuRUVKuSJph8sIXVoUIDKYaMVT3QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDbJ
03JNLyNcBe0Gsqicr4XRZaj9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Qzg0Mjk0RUNEM0UxMUVGOUJCNEUyQjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPNWMA0GCSqGSIb3DQEBCwUA
A4IBAQAOb98mgVOJHjYqou1TBXMiZ5I2Dm3u3ErtI62roOCo2osqTB0BW42yn4Ml
Wg0PKOYmE6HzFznmhExIiFq5WS2TQ6T4tgYi1x6Fz+AzA4JF20E90rRSfx3VslT/
94EYQsr7EH7fWcE8ArbvwWwYdamjTCFnNRUcjkyVXcwynvMKvmo0ic3DwebGWSE0
3SZBCWNya0peECci3IECOnFDK38jHk6tlgHcECkje1IW/OZwCLIiYKOtjSoMn0fU
Gh3+2M22I7ugNK+jMJ0iPxOvCLIh8y3OObLFFa1cIAJjYOCom8WOrxLVrum11rIU
LP+dWoG36BfrMgxqyL8YnQVO9cCH
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:02 2025 by rpki-client