Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64121A5ECCC611EFBFDE4ABD762E951A.roa
File: 64121A5ECCC611EFBFDE4ABD762E951A.roa (raw, json)
Hash identifier: Fx/CbZf08xevex2ToCn9ib8W7elEz2RByFIT+1y893w=
Subject key identifier: C1:27:1B:8A:07:78:8B:28:19:58:D1:33:68:95:52:29:B5:E6:BE:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64121A5ECCC611EFBFDE4ABD762E951A.roa
Signing time: Tue 07 Jan 2025 07:09:53 +0000
ROA not before: Tue 07 Jan 2025 07:09:49 +0000
ROA not after: Wed 12 Feb 2025 07:09:49 +0000
asID: 64267
IP address blocks: 156.227.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64088 (0xfa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:09:49 2025 GMT
Not After : Feb 12 07:09:49 2025 GMT
Subject: CN=677cd341-0774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:2b:9b:6e:44:03:8f:82:7c:1b:b1:37:06:
0a:9a:80:44:81:9a:29:a9:8f:2b:40:ee:e5:a6:d7:
38:27:f2:ba:7c:dc:3c:9e:11:94:42:3f:3f:79:4f:
fc:36:66:01:25:2b:0b:44:d0:29:7d:b2:7a:a8:e2:
3f:93:7d:c0:56:af:7d:d6:a6:b0:33:d1:d2:c9:85:
c6:2e:6c:82:96:39:30:38:4d:e7:bd:b9:0b:e6:f8:
c1:b8:7d:e7:95:de:10:04:8a:c2:9e:bd:1e:57:a2:
d3:dc:56:59:95:4a:2f:b4:c1:62:b1:3b:55:5b:57:
21:22:7a:ee:4c:ed:30:ad:97:90:f5:64:c3:c3:c1:
2d:af:8d:b0:ef:2c:92:c8:9f:d8:2a:6b:3a:ab:eb:
77:b8:d6:0b:c7:85:64:f0:6d:77:a6:b9:b8:6b:af:
f7:15:ec:ee:ce:e9:56:19:6d:be:59:89:39:11:0d:
ab:da:7a:3c:3d:12:81:7c:14:2c:a1:b6:6a:7f:c7:
76:16:5a:7c:e9:ec:06:80:59:c8:f9:d0:00:76:ee:
cc:a7:31:1e:b5:9d:2c:4c:bb:92:3a:3b:e1:0c:51:
30:3e:38:92:47:a2:ee:a2:54:3a:dc:40:db:e3:0c:
33:94:4f:b2:cd:f9:bd:be:13:34:4e:90:fb:ed:b2:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:1B:8A:07:78:8B:28:19:58:D1:33:68:95:52:29:B5:E6:BE:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64121A5ECCC611EFBFDE4ABD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.12.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4f:22:1d:6d:d1:3a:e9:f2:03:f3:33:9b:5a:54:b3:d8:65:
37:9f:ca:a2:bb:0c:39:dd:be:10:f2:53:04:0a:9e:00:41:06:
7f:68:6f:13:37:d4:53:5a:84:60:e7:82:c6:cc:f6:83:f0:90:
6e:ea:fb:82:a6:d5:90:eb:24:4b:4a:dc:19:28:d8:15:e2:4b:
6a:7e:b3:0e:86:8c:f4:d1:49:45:40:f5:03:19:d2:15:11:13:
6f:95:e1:e6:d0:48:28:7e:52:90:73:b3:50:60:3c:39:b2:a8:
1e:3c:92:9e:d6:d6:ed:d4:bf:89:dc:2a:93:6f:c5:9f:29:c4:
31:58:a4:53:e2:2f:cd:c8:71:ce:0a:ac:d1:e1:05:f3:ae:05:
eb:4f:06:51:53:53:f0:75:cf:06:ef:66:47:46:21:99:09:ba:
d2:b3:57:49:9e:61:a8:43:5b:25:b7:df:c8:42:ad:97:1a:43:
5d:64:12:46:6b:7d:1c:e8:0d:4b:30:27:40:e9:b6:2a:44:c9:
b2:69:86:f8:16:96:be:d4:be:cc:52:e0:60:e4:6c:0c:23:93:
ce:2a:5d:02:4a:ed:31:15:e5:b8:0b:87:3e:3d:74:15:a8:02:
ac:cb:e3:7f:de:92:74:12:55:87:d4:9c:8f:de:4e:04:56:f6:
45:e6:4f:5e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPpYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDcwOTQ5WhcNMjUwMjEyMDcwOTQ5WjAYMRYw
FAYDVQQDEw02NzdjZDM0MS0wNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSUrm25EA4+CfBuxNwYKmoBEgZopqY8rQO7lptc4J/K6fNw8nhGUQj8/
eU/8NmYBJSsLRNApfbJ6qOI/k33AVq991qawM9HSyYXGLmyCljkwOE3nvbkL5vjB
uH3nld4QBIrCnr0eV6LT3FZZlUovtMFisTtVW1chInruTO0wrZeQ9WTDw8Etr42w
7yySyJ/YKms6q+t3uNYLx4Vk8G13prm4a6/3FezuzulWGW2+WYk5EQ2r2no8PRKB
fBQsobZqf8d2Flp86ewGgFnI+dAAdu7MpzEetZ0sTLuSOjvhDFEwPjiSR6LuolQ6
3EDb4wwzlE+yzfm9vhM0TpD77bK67wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMEn
G4oHeIsoGVjRM2iVUim15r63MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDEyMUE1RUNDQzYxMUVGQkZERTRBQkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOMMMA0GCSqGSIb3DQEBCwUA
A4IBAQBRTyIdbdE66fID8zObWlSz2GU3n8qiuww53b4Q8lMECp4AQQZ/aG8TN9RT
WoRg54LGzPaD8JBu6vuCptWQ6yRLStwZKNgV4ktqfrMOhoz00UlFQPUDGdIVERNv
leHm0EgoflKQc7NQYDw5sqgePJKe1tbt1L+J3CqTb8WfKcQxWKRT4i/NyHHOCqzR
4QXzrgXrTwZRU1Pwdc8G72ZHRiGZCbrSs1dJnmGoQ1slt9/IQq2XGkNdZBJGa30c
6A1LMCdA6bYqRMmyaYb4Fpa+1L7MUuBg5GwMI5POKl0CSu0xFeW4C4c+PXQVqAKs
y+N/3pJ0ElWH1JyP3k4EVvZF5k9e
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:09 2025 by rpki-client