Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E44AC54CD9A11EFB25E9E8C762E951A.roa
File: 8E44AC54CD9A11EFB25E9E8C762E951A.roa (raw, json)
Hash identifier: 1xMhabz0vDF/xK7J6xjJIvT0ctikFc19OgQfKtG8iow=
Subject key identifier: 5B:C1:86:F2:A7:98:41:B9:14:C1:1E:26:02:D8:E2:B9:6B:B4:88:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01007F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E44AC54CD9A11EFB25E9E8C762E951A.roa
Signing time: Wed 08 Jan 2025 08:28:37 +0000
ROA not before: Wed 08 Jan 2025 08:28:33 +0000
ROA not after: Tue 16 Dec 2025 08:28:33 +0000
asID: 984
IP address blocks: 156.249.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65663 (0x1007f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:28:33 2025 GMT
Not After : Dec 16 08:28:33 2025 GMT
Subject: CN=677e3735-b029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:92:7e:47:11:89:ec:43:94:9e:d0:b5:0a:
ab:97:51:dc:f7:a5:ba:2b:8a:47:f7:fc:4a:f9:ae:
da:f3:7d:e4:56:82:2d:61:3b:b3:fe:55:14:b6:d4:
ec:e6:7e:28:36:83:a1:f8:0e:46:10:2f:38:57:73:
bf:5e:6c:99:ab:e6:a1:6b:6f:6c:b7:9d:f3:c3:c4:
f7:43:d7:19:2b:f8:5d:50:5e:01:18:97:70:08:c0:
61:78:d0:d8:12:fe:da:a9:70:b5:cc:e8:38:02:97:
b6:d2:d5:2b:fd:a1:f4:1b:32:59:9e:6c:e6:e9:b0:
50:93:3e:15:aa:8e:03:ea:b5:fa:28:13:98:2d:0b:
de:31:8c:ea:5b:cb:d9:70:dc:30:60:4c:b4:0b:4f:
eb:5a:9a:e8:0e:5b:c1:69:7d:a8:c5:8c:a9:1f:06:
a0:b5:bf:bd:0f:2f:5d:6e:b8:9c:92:9d:8b:ef:12:
7b:b6:9a:80:b4:62:38:11:f8:99:b1:e5:f2:17:77:
ce:21:82:bb:f1:13:5b:94:0c:97:c4:19:19:11:8d:
53:9b:fb:40:23:85:2a:17:87:11:df:d5:9d:7a:c6:
8b:fd:6c:e1:85:0b:5c:a1:5b:78:a3:78:68:6f:6a:
50:bf:2b:32:38:e9:ad:97:20:ec:64:68:a6:4e:68:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:86:F2:A7:98:41:B9:14:C1:1E:26:02:D8:E2:B9:6B:B4:88:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E44AC54CD9A11EFB25E9E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.83.0/24
Signature Algorithm: sha256WithRSAEncryption
41:45:9c:cd:4d:d7:27:5a:80:2a:24:47:6e:7f:a3:5b:77:ca:
75:33:d2:24:f0:ea:ae:9a:08:93:a9:12:fc:46:6f:cd:ef:1e:
39:77:1f:fd:06:0d:24:97:c3:1b:92:d0:e7:12:5f:a7:99:5c:
62:69:f7:2d:7b:d1:aa:aa:53:79:73:5b:93:d8:ec:9e:f0:a5:
42:9f:ac:35:5b:2e:00:41:5c:74:98:22:2c:7c:ec:a7:7e:51:
da:30:79:38:65:0e:91:29:e3:fb:b0:26:33:96:2e:43:0a:e8:
74:9d:ed:e3:d5:84:b9:00:86:c6:df:2f:6e:27:cd:ef:92:96:
d4:a8:52:ac:f4:c1:d9:71:49:8f:41:7e:89:a1:79:f9:8f:f9:
5b:aa:f0:66:cf:e8:dd:1f:a0:8b:14:ba:e7:06:b1:40:67:62:
da:0b:93:29:f7:25:13:f0:73:b3:16:07:e4:51:f6:9d:3d:21:
f8:65:20:4a:4a:14:71:71:22:e3:4b:f5:61:61:9c:29:60:bd:
21:03:91:4e:1e:1c:92:88:34:66:4d:6a:a3:2e:a0:99:3c:3e:
88:9b:1a:22:ba:34:8b:6e:c9:29:1a:72:f9:5b:32:ef:19:18:
1c:20:a3:d0:45:50:67:b5:5f:5e:a9:ed:c9:93:d1:36:11:68:
4c:5d:93:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQB/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDgyODMzWhcNMjUxMjE2MDgyODMzWjAYMRYw
FAYDVQQDEw02NzdlMzczNS1iMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArvySfkcRiexDlJ7QtQqrl1Hc96W6K4pH9/xK+a7a833kVoItYTuz/lUU
ttTs5n4oNoOh+A5GEC84V3O/XmyZq+aha29st53zw8T3Q9cZK/hdUF4BGJdwCMBh
eNDYEv7aqXC1zOg4Ape20tUr/aH0GzJZnmzm6bBQkz4Vqo4D6rX6KBOYLQveMYzq
W8vZcNwwYEy0C0/rWproDlvBaX2oxYypHwagtb+9Dy9dbrickp2L7xJ7tpqAtGI4
EfiZseXyF3fOIYK78RNblAyXxBkZEY1Tm/tAI4UqF4cR39WdesaL/WzhhQtcoVt4
o3hob2pQvysyOOmtlyDsZGimTmjvpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFvB
hvKnmEG5FMEeJgLY4rlrtIirMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTQ0QUM1NENEOUExMUVGQjI1RTlFOEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlTMA0GCSqGSIb3DQEBCwUA
A4IBAQBBRZzNTdcnWoAqJEduf6Nbd8p1M9Ik8OqumgiTqRL8Rm/N7x45dx/9Bg0k
l8MbktDnEl+nmVxiafcte9GqqlN5c1uT2Oye8KVCn6w1Wy4AQVx0mCIsfOynflHa
MHk4ZQ6RKeP7sCYzli5DCuh0ne3j1YS5AIbG3y9uJ83vkpbUqFKs9MHZcUmPQX6J
oXn5j/lbqvBmz+jdH6CLFLrnBrFAZ2LaC5Mp9yUT8HOzFgfkUfadPSH4ZSBKShRx
cSLjS/VhYZwpYL0hA5FOHhySiDRmTWqjLqCZPD6ImxoiujSLbskpGnL5WzLvGRgc
IKPQRVBntV9eqe3Jk9E2EWhMXZPJ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:29 2025 by rpki-client