Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8810BADCCD1611EFBA6136B6762E951A.roa
File: 8810BADCCD1611EFBA6136B6762E951A.roa (raw, json)
Hash identifier: R2YXSUN0aox2WKG6ppDXCOo7LqX0zsB+xGt+HtzyYGA=
Subject key identifier: 59:AE:90:4E:EB:D6:BF:BA:78:5F:45:AD:61:1C:C2:82:05:7A:02:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8810BADCCD1611EFBA6136B6762E951A.roa
Signing time: Tue 07 Jan 2025 16:43:33 +0000
ROA not before: Tue 07 Jan 2025 16:43:29 +0000
ROA not after: Mon 13 Dec 2027 16:43:29 +0000
asID: 17561
IP address blocks: 156.241.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64799 (0xfd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:43:29 2025 GMT
Not After : Dec 13 16:43:29 2027 GMT
Subject: CN=677d59b5-8707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:34:0b:5b:6a:ff:43:14:2d:56:b1:01:91:
08:fd:dc:5f:54:9f:04:88:93:17:a7:94:56:1c:24:
4e:27:c8:5f:8e:42:7d:66:24:6f:50:5a:eb:55:bb:
00:05:78:e7:36:43:58:0e:de:8e:00:43:ee:85:e5:
1c:eb:1f:9d:b8:50:ca:c9:ee:ed:ba:74:75:b8:51:
4a:7d:95:30:09:75:d4:88:f3:39:ad:90:45:9a:92:
f7:28:5b:3f:78:39:ca:5b:64:69:d8:63:72:5a:a6:
0d:3d:99:4a:a2:9a:34:92:96:19:36:de:86:e8:07:
59:49:df:7c:a5:f4:4b:c5:03:18:4b:5d:7e:6a:53:
a4:c0:01:2c:5b:65:7d:82:45:88:f6:d5:e9:c8:6e:
8a:74:bb:bd:97:ee:9a:81:3c:92:ea:ff:2b:34:0d:
4c:a9:d1:35:f5:3d:e7:45:69:87:43:76:98:f2:0a:
8d:c3:87:77:82:92:85:36:e1:ff:1b:f4:cb:23:9c:
71:cd:83:f3:87:20:bf:7f:3a:27:b2:3b:f3:b7:eb:
29:6f:83:0b:0a:25:a3:9e:f4:95:65:d2:cc:68:47:
e1:8d:ab:17:a9:3f:4f:5f:f3:43:de:c8:48:f8:01:
df:b9:76:eb:1f:03:f5:f3:2c:3a:e5:de:16:f7:50:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:90:4E:EB:D6:BF:BA:78:5F:45:AD:61:1C:C2:82:05:7A:02:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8810BADCCD1611EFBA6136B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:29:95:7e:d6:ec:8f:a1:a8:61:d8:27:ca:22:0b:75:31:
67:bb:ae:17:ae:91:30:3b:b3:21:90:dd:ed:26:d1:4d:3b:6d:
f5:a4:f3:5c:52:ab:7c:b8:45:9e:d7:17:e9:7a:68:eb:08:37:
61:73:b8:ac:3d:86:b4:b1:d7:51:82:e2:a9:d8:20:41:31:95:
fc:5e:04:48:28:ac:b3:a2:75:81:ff:12:b5:00:a9:c2:1e:24:
4b:d0:54:6f:aa:8b:17:cb:c1:b4:70:87:1e:0a:b3:08:87:14:
a6:f3:92:54:4e:a3:b3:fc:76:9f:b2:a4:80:35:76:a9:c3:ba:
a6:6b:bd:63:0a:c7:ff:ad:e1:13:9a:a8:2c:90:9e:18:94:54:
3c:8a:bc:15:a6:44:61:2d:eb:f8:c2:c6:f5:72:46:73:29:b8:
98:c6:dd:01:1b:07:40:49:9e:ed:fa:e8:40:f8:21:21:62:37:
d3:df:92:1f:e1:1a:33:7f:9b:bf:53:5c:27:87:51:1e:d5:c3:
1a:d4:cb:62:7b:7a:32:ed:8a:c0:ae:eb:78:27:46:20:31:b8:
7d:90:73:0f:70:ab:6a:a1:0b:38:83:57:83:ac:03:de:08:a3:
01:d3:09:3c:a0:93:0e:ad:09:d3:31:58:c5:94:6b:4b:42:ba:
f3:ee:8c:f2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP0fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTY0MzI5WhcNMjcxMjEzMTY0MzI5WjAYMRYw
FAYDVQQDEw02NzdkNTliNS04NzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0SM0C1tq/0MULVaxAZEI/dxfVJ8EiJMXp5RWHCROJ8hfjkJ9ZiRvUFrr
VbsABXjnNkNYDt6OAEPuheUc6x+duFDKye7tunR1uFFKfZUwCXXUiPM5rZBFmpL3
KFs/eDnKW2Rp2GNyWqYNPZlKopo0kpYZNt6G6AdZSd98pfRLxQMYS11+alOkwAEs
W2V9gkWI9tXpyG6KdLu9l+6agTyS6v8rNA1MqdE19T3nRWmHQ3aY8gqNw4d3gpKF
NuH/G/TLI5xxzYPzhyC/fzonsjvzt+spb4MLCiWjnvSVZdLMaEfhjasXqT9PX/ND
3shI+AHfuXbrHwP18yw65d4W91B66QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFmu
kE7r1r+6eF9FrWEcwoIFegLJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODEwQkFEQ0NEMTYxMUVGQkE2MTM2QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPETMA0GCSqGSIb3DQEBCwUA
A4IBAQBcKymVftbsj6GoYdgnyiILdTFnu64XrpEwO7MhkN3tJtFNO231pPNcUqt8
uEWe1xfpemjrCDdhc7isPYa0sddRguKp2CBBMZX8XgRIKKyzonWB/xK1AKnCHiRL
0FRvqosXy8G0cIceCrMIhxSm85JUTqOz/HafsqSANXapw7qma71jCsf/reETmqgs
kJ4YlFQ8irwVpkRhLev4wsb1ckZzKbiYxt0BGwdASZ7t+uhA+CEhYjfT35If4Roz
f5u/U1wnh1Ee1cMa1Mtie3oy7YrArut4J0YgMbh9kHMPcKtqoQs4g1eDrAPeCKMB
0wk8oJMOrQnTMVjFlGtLQrrz7ozy
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:55 2025 by rpki-client