Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89EE0884CD5F11EFA71B1186762E951A.roa
File: 89EE0884CD5F11EFA71B1186762E951A.roa (raw, json)
Hash identifier: OOT2+e9bgVHpndsPvDtSLbm0/rTnE+ty48TamBwrPho=
Subject key identifier: B1:19:03:6A:22:1A:05:81:70:00:3C:81:4F:6E:D9:91:60:23:1D:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89EE0884CD5F11EFA71B1186762E951A.roa
Signing time: Wed 08 Jan 2025 01:26:09 +0000
ROA not before: Wed 08 Jan 2025 01:26:05 +0000
ROA not after: Mon 13 Dec 2027 01:26:05 +0000
asID: 17561
IP address blocks: 156.247.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65319 (0xff27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:26:05 2025 GMT
Not After : Dec 13 01:26:05 2027 GMT
Subject: CN=677dd431-1a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:dc:67:ee:9a:ce:0a:ad:2a:9c:51:ed:b7:
6a:c2:e5:da:54:ab:d4:87:ca:13:7c:56:a4:d2:f4:
9a:33:90:a9:2a:05:e4:a8:c8:c9:81:3d:97:f1:46:
61:61:ef:a0:3e:c7:67:27:fd:6c:00:45:23:9b:4d:
5d:4e:64:92:5c:5b:36:10:2a:72:cc:9a:e9:ed:05:
29:78:6f:66:c3:26:a5:9f:68:65:06:87:1c:21:58:
55:6e:9f:44:c9:e0:0e:4b:90:82:3f:12:94:40:73:
10:a2:9b:86:86:d7:dd:ce:4e:04:30:b3:ff:e2:92:
18:fd:7b:46:ff:b5:68:5b:0e:6b:79:ac:33:84:c9:
ae:18:5d:43:2c:15:6f:7d:02:c3:68:ac:35:96:7b:
54:80:6d:45:ec:c3:c1:90:84:33:24:32:55:ce:f8:
14:d8:70:55:e1:60:08:dc:59:58:f2:86:90:e9:e4:
20:ac:da:cd:5f:f2:2e:a0:42:07:8c:8d:ea:05:aa:
8b:b4:7c:e6:f6:ac:06:38:99:63:67:be:ac:cf:11:
b1:97:ec:e4:af:5b:a9:06:e2:d5:87:5f:e3:af:56:
46:b9:f7:70:77:38:8b:e0:cc:6c:01:3a:a0:d7:a2:
fc:c4:3f:e2:6b:ad:24:25:c5:5a:70:37:fe:89:20:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:03:6A:22:1A:05:81:70:00:3C:81:4F:6E:D9:91:60:23:1D:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89EE0884CD5F11EFA71B1186762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.92.0/24
Signature Algorithm: sha256WithRSAEncryption
66:65:31:29:63:ff:91:73:6e:89:cc:ca:11:57:ec:76:e9:87:
21:49:5d:44:7b:52:dd:0c:76:f4:48:34:94:43:d7:a3:df:97:
bb:8d:95:61:b1:a6:28:74:e4:7a:80:66:62:6f:85:b1:f6:e7:
a6:e0:4d:bb:4e:01:ad:75:12:05:c5:28:b4:1c:ce:db:32:c5:
01:ac:e6:17:6a:ae:ee:0f:fd:7e:29:34:03:00:ea:25:8b:45:
86:16:4a:5f:22:66:35:ad:b7:0c:dd:b1:e7:64:39:c6:47:83:
0c:bb:49:45:d7:8b:c0:6d:f7:78:ff:58:46:96:35:d1:2c:76:
6a:f2:a3:ee:ab:5d:94:20:ba:8f:d5:c6:55:10:53:91:14:26:
7f:64:43:5d:c1:61:60:c6:23:85:97:93:fe:ec:6f:a3:81:95:
14:48:e3:8e:17:66:f3:d9:e8:5b:19:17:28:0d:2e:4d:5e:3b:
45:e4:9b:59:6e:39:4f:cd:3f:0c:fc:ce:63:88:19:8c:4e:e8:
81:e6:6d:a1:8b:70:88:d7:4c:41:22:e3:ba:0d:b6:aa:7a:c3:
c2:c2:70:17:ea:6b:7d:8b:41:ef:e0:40:8c:f3:25:a2:c2:a5:
b0:c8:a2:6d:c4:0a:ec:80:91:83:41:e8:89:d3:60:e5:2a:4d:
e1:3e:da:8c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP8nMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDEyNjA1WhcNMjcxMjEzMDEyNjA1WjAYMRYw
FAYDVQQDEw02NzdkZDQzMS0xYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1+fcZ+6azgqtKpxR7bdqwuXaVKvUh8oTfFak0vSaM5CpKgXkqMjJgT2X
8UZhYe+gPsdnJ/1sAEUjm01dTmSSXFs2ECpyzJrp7QUpeG9mwyaln2hlBoccIVhV
bp9EyeAOS5CCPxKUQHMQopuGhtfdzk4EMLP/4pIY/XtG/7VoWw5reawzhMmuGF1D
LBVvfQLDaKw1lntUgG1F7MPBkIQzJDJVzvgU2HBV4WAI3FlY8oaQ6eQgrNrNX/Iu
oEIHjI3qBaqLtHzm9qwGOJljZ76szxGxl+zkr1upBuLVh1/jr1ZGufdwdziL4Mxs
ATqg16L8xD/ia60kJcVacDf+iSCxoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLEZ
A2oiGgWBcAA8gU9u2ZFgIx2aMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OUVFMDg4NENENUYxMUVGQTcxQjExODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPdcMA0GCSqGSIb3DQEBCwUA
A4IBAQBmZTEpY/+Rc26JzMoRV+x26YchSV1Ee1LdDHb0SDSUQ9ej35e7jZVhsaYo
dOR6gGZib4Wx9uem4E27TgGtdRIFxSi0HM7bMsUBrOYXaq7uD/1+KTQDAOoli0WG
FkpfImY1rbcM3bHnZDnGR4MMu0lF14vAbfd4/1hGljXRLHZq8qPuq12UILqP1cZV
EFORFCZ/ZENdwWFgxiOFl5P+7G+jgZUUSOOOF2bz2ehbGRcoDS5NXjtF5JtZbjlP
zT8M/M5jiBmMTuiB5m2hi3CI10xBIuO6DbaqesPCwnAX6mt9i0Hv4ECM8yWiwqWw
yKJtxArsgJGDQeiJ02DlKk3hPtqM
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:24 2025 by rpki-client