Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85A4E1D6C34511EF9E9E4658762E951A.roa
File: 85A4E1D6C34511EF9E9E4658762E951A.roa (raw, json)
Hash identifier: /A0RSDNr0UwuNJrc1tjzeiFmPoz9VUzvxf+XckULb/M=
Subject key identifier: 5A:8C:EF:49:13:C8:24:0D:05:11:B0:BE:68:94:6F:8A:AD:A1:36:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85A4E1D6C34511EF9E9E4658762E951A.roa
Signing time: Thu 26 Dec 2024 04:54:43 +0000
ROA not before: Thu 26 Dec 2024 04:54:40 +0000
ROA not after: Fri 10 Dec 2027 04:54:40 +0000
asID: 17561
IP address blocks: 156.244.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60415 (0xebff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:54:40 2024 GMT
Not After : Dec 10 04:54:40 2027 GMT
Subject: CN=676ce193-c1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fb:8c:63:9b:e1:c0:b9:c3:cd:57:7f:bc:39:
24:7a:a4:5e:e1:2e:95:c8:82:b9:37:a2:3c:b6:2e:
c2:27:86:78:17:ab:65:76:d6:aa:ab:52:04:e0:10:
42:02:b1:1a:d4:8e:9f:ac:19:a0:e3:33:89:05:3a:
d7:fe:83:82:00:9d:c8:9c:b8:41:ee:65:c8:e4:77:
d7:d4:53:54:0e:ff:19:ab:85:b2:98:f4:1a:d1:1c:
9e:f0:28:8c:68:cd:de:da:1e:19:d1:7a:f8:d9:12:
fa:63:e1:2b:52:b3:75:55:23:a7:6e:dc:b6:f1:2d:
51:cc:d3:1d:2e:67:14:c9:27:c6:ce:69:d0:cc:ec:
c8:0c:3c:a9:94:50:9b:c6:6f:30:03:dc:07:8a:29:
80:80:54:86:6f:a3:6d:ba:1d:1b:60:4a:0c:a8:04:
54:84:1e:6b:e1:db:81:cc:2a:6f:2e:f9:ac:d2:3d:
87:2e:58:f6:66:7d:e1:93:bd:0b:9c:4a:a6:ba:6f:
18:52:80:9b:ae:f5:fc:59:32:1c:5b:38:79:b2:5b:
44:be:f8:24:d7:82:68:26:05:14:85:93:0e:6a:20:
64:b7:92:f8:e8:66:13:b3:a2:05:37:59:2a:78:f2:
d7:d0:ef:d7:42:f8:4f:9b:b8:cd:61:59:94:30:7a:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:EF:49:13:C8:24:0D:05:11:B0:BE:68:94:6F:8A:AD:A1:36:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85A4E1D6C34511EF9E9E4658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.251.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ff:4d:99:d8:ec:33:67:cf:76:d0:43:33:00:dd:ec:64:d8:
8f:c8:78:ac:d2:77:0e:3c:09:51:5c:d5:04:7d:d2:28:7d:1e:
63:41:f9:2f:de:9b:5b:0e:f1:7b:33:81:25:b0:1a:c0:15:b1:
0c:6f:8d:dd:8f:83:4e:2f:04:ba:60:87:6a:db:5d:dc:6a:51:
f7:84:f5:b6:cb:e6:da:bd:d7:29:15:a3:a3:04:c4:03:c0:ef:
c9:d2:2f:f1:31:d5:a9:9a:de:10:de:4f:89:3d:80:43:e1:5c:
15:09:21:d8:27:25:49:5c:8e:c7:5b:7b:a3:59:2d:4f:51:41:
d6:84:37:e9:de:ac:dd:23:7f:13:3d:14:9d:78:70:31:28:f3:
93:60:12:dc:05:c2:3e:30:4b:ed:cf:4c:2f:b5:6a:88:9d:b3:
13:cc:5e:13:1c:f6:64:07:6f:bc:59:23:4f:bb:c0:12:ca:b4:
92:06:73:3b:89:29:7a:48:91:0d:ad:2d:49:a5:a2:b4:fc:08:
d0:de:14:38:15:f9:87:ea:42:ed:a9:f0:91:bb:87:86:20:76:
37:40:fc:e0:f0:3f:2d:4c:cc:c6:b2:e4:4b:40:54:f0:21:a9:
ae:1f:c2:ab:49:92:77:6c:12:52:07:d9:85:07:a8:7a:80:51:
6c:5a:0e:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOv/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDQ1NDQwWhcNMjcxMjEwMDQ1NDQwWjAYMRYw
FAYDVQQDEw02NzZjZTE5My1jMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1vuMY5vhwLnDzVd/vDkkeqRe4S6VyIK5N6I8ti7CJ4Z4F6tldtaqq1IE
4BBCArEa1I6frBmg4zOJBTrX/oOCAJ3InLhB7mXI5HfX1FNUDv8Zq4WymPQa0Rye
8CiMaM3e2h4Z0Xr42RL6Y+ErUrN1VSOnbty28S1RzNMdLmcUySfGzmnQzOzIDDyp
lFCbxm8wA9wHiimAgFSGb6Ntuh0bYEoMqARUhB5r4duBzCpvLvms0j2HLlj2Zn3h
k70LnEqmum8YUoCbrvX8WTIcWzh5sltEvvgk14JoJgUUhZMOaiBkt5L46GYTs6IF
N1kqePLX0O/XQvhPm7jNYVmUMHrtiwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFqM
70kTyCQNBRGwvmiUb4qtoTa6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NUE0RTFENkMzNDUxMUVGOUU5RTQ2NTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPT7MA0GCSqGSIb3DQEBCwUA
A4IBAQBp/02Z2OwzZ8920EMzAN3sZNiPyHis0ncOPAlRXNUEfdIofR5jQfkv3ptb
DvF7M4ElsBrAFbEMb43dj4NOLwS6YIdq213calH3hPW2y+bavdcpFaOjBMQDwO/J
0i/xMdWpmt4Q3k+JPYBD4VwVCSHYJyVJXI7HW3ujWS1PUUHWhDfp3qzdI38TPRSd
eHAxKPOTYBLcBcI+MEvtz0wvtWqInbMTzF4THPZkB2+8WSNPu8ASyrSSBnM7iSl6
SJENrS1JpaK0/AjQ3hQ4FfmH6kLtqfCRu4eGIHY3QPzg8D8tTMzGsuRLQFTwIamu
H8KrSZJ3bBJSB9mFB6h6gFFsWg6Z
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:17 2025 by rpki-client