Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B4AF104C97411EFB5D2C3A1762E951A.roa
File: 8B4AF104C97411EFB5D2C3A1762E951A.roa (raw, json)
Hash identifier: VUlLYxYBzpHXBf4UzOQW43ZkGa8nDIYCi8wL+NGKoGQ=
Subject key identifier: 99:86:1D:D5:74:53:37:03:D9:EE:F4:FB:3E:99:75:21:76:36:95:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B4AF104C97411EFB5D2C3A1762E951A.roa
Signing time: Fri 03 Jan 2025 01:46:26 +0000
ROA not before: Fri 03 Jan 2025 01:46:22 +0000
ROA not after: Mon 13 Dec 2027 01:46:22 +0000
asID: 17561
IP address blocks: 156.227.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62679 (0xf4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:46:22 2025 GMT
Not After : Dec 13 01:46:22 2027 GMT
Subject: CN=67774172-78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:52:5a:83:40:15:43:6e:e3:6c:d1:b5:ce:
f7:43:9e:62:10:94:d5:65:f0:2f:06:e0:82:c0:20:
1d:2c:4f:74:64:66:97:94:1d:0c:0b:7f:5e:a9:00:
64:f2:aa:34:ef:34:36:bb:b8:32:cf:56:cd:3b:bc:
22:60:4b:6c:c0:5d:e9:53:04:25:21:b0:9f:41:04:
b3:90:56:5a:54:b7:2a:f0:53:db:14:52:71:13:90:
b7:1f:1d:a7:6e:7b:e9:46:eb:e8:b5:e8:2d:06:c3:
bb:98:13:ca:02:2d:08:54:1b:b8:b7:b7:f3:07:75:
3c:be:85:81:65:66:fe:5e:30:dc:6d:36:c8:72:f6:
2c:f3:77:58:53:95:ec:d5:9c:a9:78:a1:c8:96:99:
fd:96:7c:0d:d9:86:5d:e9:52:55:36:c3:68:e5:81:
12:b7:75:8f:df:31:38:78:57:90:57:a8:73:e3:2f:
3a:60:13:9b:d2:af:da:ba:c5:24:f1:eb:fe:f5:ad:
24:4e:e8:d2:8f:6f:1f:24:64:de:f4:a6:60:f4:68:
b8:41:1a:85:db:46:a3:62:3a:45:69:83:bb:c4:92:
70:e7:1e:d1:a8:ef:78:de:f3:6c:17:79:6c:ce:e6:
96:1a:fe:04:21:ae:30:7a:46:77:d5:3f:9c:ab:34:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:1D:D5:74:53:37:03:D9:EE:F4:FB:3E:99:75:21:76:36:95:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B4AF104C97411EFB5D2C3A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.93.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fc:36:82:79:12:61:77:b3:30:13:28:4b:b7:98:51:0f:fe:
af:01:78:94:14:11:10:19:39:b2:90:ac:6e:46:31:41:d1:7c:
09:38:b2:5b:1b:a4:c0:67:30:d6:d9:e6:16:61:d3:fa:26:31:
8a:c7:41:56:fc:fb:53:0d:5e:33:8a:51:a6:1c:59:83:92:ab:
a0:40:c7:91:d8:bb:62:e6:51:0a:4d:0d:c4:e0:cf:a4:58:f4:
8b:13:6f:fe:e4:16:f8:c4:14:4b:32:b7:30:da:66:38:dc:a4:
5d:db:6c:0d:ad:ec:b3:8a:ca:c0:46:9f:c1:a7:e4:f2:8f:d7:
63:ef:56:37:d7:4a:16:14:0b:c1:4a:10:de:62:65:27:c7:fe:
9f:ea:6e:3b:2e:06:09:e4:f7:77:f8:92:78:13:76:b3:92:25:
f3:2f:23:56:a8:ce:15:f7:30:e2:21:73:05:35:84:29:b6:f7:
34:2f:f0:bb:5d:d8:ec:40:3a:cc:ab:31:f7:1f:fe:c2:a3:fa:
af:34:60:9b:2e:34:03:37:03:f4:a2:26:a1:84:d6:8c:b8:63:
8a:3a:0b:f3:26:db:06:9d:26:15:e5:b1:f5:7c:51:61:5c:5d:
ee:31:09:05:1b:8c:9b:23:d1:d2:ed:89:7a:67:1d:d9:17:d2:
5e:10:6b:dc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPTXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDE0NjIyWhcNMjcxMjEzMDE0NjIyWjAYMRYw
FAYDVQQDEw02Nzc3NDE3Mi03OGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3xpSWoNAFUNu42zRtc73Q55iEJTVZfAvBuCCwCAdLE90ZGaXlB0MC39e
qQBk8qo07zQ2u7gyz1bNO7wiYEtswF3pUwQlIbCfQQSzkFZaVLcq8FPbFFJxE5C3
Hx2nbnvpRuvotegtBsO7mBPKAi0IVBu4t7fzB3U8voWBZWb+XjDcbTbIcvYs83dY
U5Xs1ZypeKHIlpn9lnwN2YZd6VJVNsNo5YESt3WP3zE4eFeQV6hz4y86YBOb0q/a
usUk8ev+9a0kTujSj28fJGTe9KZg9Gi4QRqF20ajYjpFaYO7xJJw5x7RqO943vNs
F3lszuaWGv4EIa4wekZ31T+cqzRt1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJmG
HdV0UzcD2e70+z6ZdSF2NpWrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QjRBRjEwNEM5NzQxMUVGQjVEMkMzQTE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnONdMA0GCSqGSIb3DQEBCwUA
A4IBAQBg/DaCeRJhd7MwEyhLt5hRD/6vAXiUFBEQGTmykKxuRjFB0XwJOLJbG6TA
ZzDW2eYWYdP6JjGKx0FW/PtTDV4zilGmHFmDkqugQMeR2Lti5lEKTQ3E4M+kWPSL
E2/+5Bb4xBRLMrcw2mY43KRd22wNreyzisrARp/Bp+Tyj9dj71Y310oWFAvBShDe
YmUnx/6f6m47LgYJ5Pd3+JJ4E3azkiXzLyNWqM4V9zDiIXMFNYQptvc0L/C7Xdjs
QDrMqzH3H/7Co/qvNGCbLjQDNwP0oiahhNaMuGOKOgvzJtsGnSYV5bH1fFFhXF3u
MQkFG4ybI9HS7Yl6Zx3ZF9JeEGvc
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client