Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BE679AB5F611EFA6D73F74762E951A.roa
File: 92BE679AB5F611EFA6D73F74762E951A.roa (raw, json)
Hash identifier: AZkT6CDCHJ70gkOu2pqAGBoNSxy+G+8TQu+oLWa/c0k=
Subject key identifier: 6C:03:3C:98:E7:B7:60:49:59:60:59:74:65:05:84:EA:81:D7:34:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E12A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BE679AB5F611EFA6D73F74762E951A.roa
Signing time: Mon 09 Dec 2024 06:26:50 +0000
ROA not before: Mon 09 Dec 2024 06:26:46 +0000
ROA not after: Tue 03 Nov 2026 06:26:46 +0000
asID: 149014
IP address blocks: 156.254.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57642 (0xe12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 06:26:46 2024 GMT
Not After : Nov 3 06:26:46 2026 GMT
Subject: CN=67568daa-add8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:e1:47:3a:d7:37:e3:d8:5c:45:f2:b0:b0:
61:4c:d6:2f:b9:9a:e0:8d:7d:15:53:49:cd:b8:4e:
5b:ab:e5:03:2b:94:57:82:62:5e:c5:02:1d:fc:73:
66:52:bf:f7:90:36:23:26:6a:a3:f4:d5:af:9c:18:
b1:5c:77:56:49:d9:ec:fd:46:e7:ca:6b:c2:db:a7:
21:06:e9:83:af:c3:96:f3:ac:81:dc:7b:ac:55:64:
42:a8:06:e3:62:65:31:d7:9b:40:17:08:a7:87:b6:
e4:29:c3:31:53:ff:a9:77:38:fd:7e:fd:2c:b6:d5:
2e:9d:b9:0c:cc:28:a1:ea:4b:9f:91:c2:02:32:97:
08:64:2b:1d:0a:4b:02:0b:20:b4:83:08:4f:d5:ea:
b5:3b:20:81:db:88:88:d2:17:1a:59:2c:ba:ab:9f:
92:32:02:c2:9f:52:67:54:c5:98:09:b9:58:42:b0:
4b:a5:23:c3:2a:6c:b3:25:e9:47:5e:b7:86:31:ba:
a1:63:3c:dc:ef:2c:9e:69:90:8f:c4:c3:df:ce:20:
5d:e7:0e:09:a7:82:d1:34:bf:45:6c:f5:11:68:6b:
c6:16:e6:1b:22:14:a7:2d:99:13:c4:43:df:62:86:
11:d2:66:66:75:0c:52:f1:1a:7b:03:8a:fe:a9:99:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:3C:98:E7:B7:60:49:59:60:59:74:65:05:84:EA:81:D7:34:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92BE679AB5F611EFA6D73F74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.126.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:97:80:f7:b8:74:32:e4:0b:d7:23:97:d3:5a:0e:13:5a:dc:
25:47:0b:05:9d:11:5b:ce:42:60:6a:82:8c:de:69:88:5c:6d:
aa:31:dc:fc:26:e6:d7:38:ff:8b:b4:83:f6:cc:c5:b2:a5:92:
3f:7c:33:be:83:fe:5f:fe:62:c3:b8:03:ee:4d:4b:fe:06:67:
65:20:69:6c:29:99:ae:28:17:25:21:43:f4:53:b8:fd:91:61:
6c:2f:bf:fe:cf:7a:c3:a9:b9:b3:d0:4f:7a:79:80:b8:70:5b:
55:82:54:d4:86:60:26:ed:1f:23:9e:74:ec:71:e4:b6:b5:a8:
87:dc:0d:d9:bc:cd:0a:4c:af:cc:43:05:11:c0:fb:4e:f2:ba:
97:bd:7e:fc:65:60:1b:4b:74:75:98:37:86:2f:6e:3e:69:76:
fe:62:ef:72:c8:28:b6:c1:60:80:15:a4:79:c5:1d:7f:c0:3e:
04:7d:20:4d:5b:d5:cc:60:40:39:46:83:b4:e4:8b:10:c8:83:
62:c8:8b:15:45:58:f8:9b:25:9e:da:52:c8:a8:2f:9a:01:22:
4d:21:aa:44:a3:e7:7b:c8:ea:57:c2:24:99:e8:2b:71:ae:a6:
1e:08:4f:0f:99:3b:ae:c2:90:a7:bd:26:35:e3:d8:1f:39:c7:
67:0e:1c:7a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOEqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA5MDYyNjQ2WhcNMjYxMTAzMDYyNjQ2WjAYMRYw
FAYDVQQDEw02NzU2OGRhYS1hZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxlvhRzrXN+PYXEXysLBhTNYvuZrgjX0VU0nNuE5bq+UDK5RXgmJexQId
/HNmUr/3kDYjJmqj9NWvnBixXHdWSdns/UbnymvC26chBumDr8OW86yB3HusVWRC
qAbjYmUx15tAFwinh7bkKcMxU/+pdzj9fv0sttUunbkMzCih6kufkcICMpcIZCsd
CksCCyC0gwhP1eq1OyCB24iI0hcaWSy6q5+SMgLCn1JnVMWYCblYQrBLpSPDKmyz
JelHXreGMbqhYzzc7yyeaZCPxMPfziBd5w4Jp4LRNL9FbPURaGvGFuYbIhSnLZkT
xEPfYoYR0mZmdQxS8Rp7A4r+qZn3uwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGwD
PJjnt2BJWWBZdGUFhOqB1zT1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MkJFNjc5QUI1RjYxMUVGQTZENzNGNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP5+MA0GCSqGSIb3DQEBCwUA
A4IBAQCOl4D3uHQy5AvXI5fTWg4TWtwlRwsFnRFbzkJgaoKM3mmIXG2qMdz8JubX
OP+LtIP2zMWypZI/fDO+g/5f/mLDuAPuTUv+BmdlIGlsKZmuKBclIUP0U7j9kWFs
L7/+z3rDqbmz0E96eYC4cFtVglTUhmAm7R8jnnTsceS2taiH3A3ZvM0KTK/MQwUR
wPtO8rqXvX78ZWAbS3R1mDeGL24+aXb+Yu9yyCi2wWCAFaR5xR1/wD4EfSBNW9XM
YEA5RoO05IsQyINiyIsVRVj4myWe2lLIqC+aASJNIapEo+d7yOpXwiSZ6CtxrqYe
CE8PmTuuwpCnvSY149gfOcdnDhx6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:09 2025 by rpki-client