Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E8CA26AD17C11EFBDEECDA9762E951A.roa
File: 5E8CA26AD17C11EFBDEECDA9762E951A.roa (raw, json)
Hash identifier: 4q9clP/Ru9Ow9azxFJ2HEvOJMJIFjrM8N8D+/HqrnjU=
Subject key identifier: 79:65:CB:C5:F2:4F:77:E1:96:36:C6:3D:B5:9C:19:6A:54:0B:A6:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01067A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E8CA26AD17C11EFBDEECDA9762E951A.roa
Signing time: Mon 13 Jan 2025 07:02:36 +0000
ROA not before: Mon 13 Jan 2025 07:02:33 +0000
ROA not after: Thu 20 Feb 2025 07:02:33 +0000
asID: 214834
IP address blocks: 156.253.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67194 (0x1067a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 07:02:33 2025 GMT
Not After : Feb 20 07:02:33 2025 GMT
Subject: CN=6784ba8c-da32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:17:30:13:8d:e1:7e:d8:5c:bc:4d:b2:d2:
b2:26:90:72:9e:2b:04:0c:0d:18:7f:c6:0a:c9:01:
09:90:15:3a:1a:d6:9b:30:54:72:c8:8e:df:69:15:
cb:69:cb:e6:67:f7:a3:90:f6:80:79:0b:df:c2:74:
30:15:dc:5a:2f:1d:d9:98:e0:06:62:ed:9d:7a:dd:
db:29:3c:73:47:2b:b6:60:e4:e7:a8:40:86:30:c9:
51:63:d4:ae:75:f9:28:a4:18:2e:f6:a1:c4:23:d3:
f6:aa:22:36:e0:57:72:8a:b6:2e:8c:df:b4:f7:1d:
f5:56:2d:fe:4e:65:26:fd:2f:5c:7a:1e:0f:a2:4e:
32:fa:4b:b8:76:86:ff:01:25:ba:db:82:b6:72:89:
fb:6b:8c:24:55:f6:0e:c5:93:1c:14:88:bc:2d:40:
17:3d:4d:b2:79:ac:af:f4:74:46:8a:70:ba:08:1f:
2f:a1:08:51:44:a2:a6:4e:78:26:d5:b8:ad:50:5f:
19:90:23:50:f1:59:aa:7a:91:e2:13:27:e4:9e:b1:
00:4c:80:45:8b:4f:53:ad:c4:31:bf:67:9c:80:02:
38:f4:62:ec:19:86:3e:7a:e2:3e:04:9e:dd:32:5b:
dd:9d:72:bb:fa:c4:db:9c:cb:10:a7:d9:2a:21:04:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:CB:C5:F2:4F:77:E1:96:36:C6:3D:B5:9C:19:6A:54:0B:A6:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E8CA26AD17C11EFBDEECDA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:c0:89:c7:e3:13:95:b5:d5:3a:ad:06:9d:af:ce:e0:03:6b:
8a:c1:8b:2a:22:b7:1c:16:fa:65:b4:87:ed:fa:74:70:da:b9:
f1:4e:33:0b:5a:1e:e3:6a:2f:23:95:7c:3c:f8:d6:fa:50:8d:
d1:92:87:90:b4:f6:76:f8:ea:65:55:62:2b:80:c3:b1:6c:f9:
98:77:8b:6f:90:86:56:26:25:45:5b:97:b8:f7:3c:5a:cd:df:
89:37:d0:25:b5:d6:92:2d:cb:e8:5e:d3:d1:2f:b1:46:26:73:
9c:57:db:29:30:c2:63:99:0d:60:91:42:03:1f:9f:b7:50:ba:
ab:d2:3a:b0:63:44:7c:05:2d:98:2d:07:e7:c5:e6:6b:08:c7:
93:eb:3e:7b:b7:08:d9:e8:e9:71:b6:e6:8e:1e:ba:98:33:c3:
00:60:c2:ec:dc:39:f7:53:f6:b0:3a:52:f7:a2:b2:88:38:f5:
cd:f1:84:b9:09:58:a5:9e:6a:07:ed:8c:9e:22:b6:25:98:88:
1f:49:bb:1d:b9:67:c4:e3:ea:5f:62:c1:8c:df:95:5c:7e:71:
a2:12:ed:cc:fb:5b:25:94:e8:e9:34:47:c8:da:81:83:82:ff:
5e:dc:0e:43:29:8e:61:1b:a9:3d:74:10:a8:73:1d:e9:e6:53:
07:9d:18:8f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQZ6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEzMDcwMjMzWhcNMjUwMjIwMDcwMjMzWjAYMRYw
FAYDVQQDEw02Nzg0YmE4Yy1kYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1RIXMBON4X7YXLxNstKyJpBynisEDA0Yf8YKyQEJkBU6GtabMFRyyI7f
aRXLacvmZ/ejkPaAeQvfwnQwFdxaLx3ZmOAGYu2det3bKTxzRyu2YOTnqECGMMlR
Y9SudfkopBgu9qHEI9P2qiI24FdyirYujN+09x31Vi3+TmUm/S9ceh4Pok4y+ku4
dob/ASW624K2con7a4wkVfYOxZMcFIi8LUAXPU2yeayv9HRGinC6CB8voQhRRKKm
Tngm1bitUF8ZkCNQ8VmqepHiEyfknrEATIBFi09TrcQxv2ecgAI49GLsGYY+euI+
BJ7dMlvdnXK7+sTbnMsQp9kqIQTXNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHll
y8XyT3fhljbGPbWcGWpUC6ZlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RThDQTI2QUQxN0MxMUVGQkRFRUNEQTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP3mMA0GCSqGSIb3DQEBCwUA
A4IBAQCgwInH4xOVtdU6rQadr87gA2uKwYsqIrccFvpltIft+nRw2rnxTjMLWh7j
ai8jlXw8+Nb6UI3RkoeQtPZ2+OplVWIrgMOxbPmYd4tvkIZWJiVFW5e49zxazd+J
N9AltdaSLcvoXtPRL7FGJnOcV9spMMJjmQ1gkUIDH5+3ULqr0jqwY0R8BS2YLQfn
xeZrCMeT6z57twjZ6OlxtuaOHrqYM8MAYMLs3Dn3U/awOlL3orKIOPXN8YS5CVil
nmoH7YyeIrYlmIgfSbsduWfE4+pfYsGM35VcfnGiEu3M+1sllOjpNEfI2oGDgv9e
3A5DKY5hG6k9dBCocx3p5lMHnRiP
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:25 2025 by rpki-client