Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E7D93EC94411EFB85FA36C762E951A.roa
File: 92E7D93EC94411EFB85FA36C762E951A.roa (raw, json)
Hash identifier: Vk0PQtClPGn6cGqWAnnZw5J5L0xiLjZtk3UKMnT5Fqw=
Subject key identifier: F2:63:BB:A1:BE:C4:0B:B4:D1:C2:82:D6:94:BA:B1:FD:D3:1B:3F:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F350
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E7D93EC94411EFB85FA36C762E951A.roa
Signing time: Thu 02 Jan 2025 20:03:03 +0000
ROA not before: Thu 02 Jan 2025 20:02:59 +0000
ROA not after: Mon 13 Dec 2027 20:02:59 +0000
asID: 17561
IP address blocks: 156.225.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62288 (0xf350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:02:59 2025 GMT
Not After : Dec 13 20:02:59 2027 GMT
Subject: CN=6776f0f7-9e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:3f:b8:70:6c:1e:19:12:61:93:96:94:a0:
48:64:88:63:77:65:c9:99:c9:f2:4c:bf:80:47:30:
57:26:f4:e5:0c:0f:eb:48:03:26:2b:89:64:7d:ea:
3c:0f:e3:dd:7b:24:af:96:26:07:7b:1e:e0:f6:56:
0c:7d:df:5c:85:59:bc:62:ed:6f:81:5b:47:97:d3:
79:ea:18:f9:38:66:5b:3a:6d:ad:e8:ff:1c:68:a6:
1b:6f:92:50:eb:b5:05:2c:0e:e1:4f:43:12:33:d5:
20:22:6b:30:6b:89:ce:dc:fa:4c:e2:52:81:87:cc:
5e:bb:ab:41:10:dd:ef:a2:33:28:c7:14:d6:b8:a1:
2a:df:c7:57:36:cb:d8:0b:85:e4:81:42:fe:30:0b:
4a:7e:9e:5b:70:c3:05:0d:1b:f6:e7:3d:80:82:d5:
94:64:dd:14:c3:a9:14:0a:7a:55:d9:de:8c:ec:42:
2f:ff:8a:1c:1d:e7:5a:ca:6d:5b:23:01:05:53:a0:
a7:76:10:c1:9e:3c:f1:b0:f0:e4:e9:5f:0a:27:b0:
a3:07:9d:ba:d5:fd:b9:34:57:46:9f:81:74:ce:a3:
83:7d:9c:1f:af:43:31:ef:3c:ef:4f:46:63:bd:e9:
96:e5:ac:57:d6:74:e3:25:41:b7:b6:90:49:07:f9:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:63:BB:A1:BE:C4:0B:B4:D1:C2:82:D6:94:BA:B1:FD:D3:1B:3F:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E7D93EC94411EFB85FA36C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.35.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3f:b5:6a:5a:97:41:a7:66:ae:0b:e5:ef:63:49:62:d6:77:
f6:bc:5a:c1:be:44:94:0c:cc:e0:39:ea:73:56:6c:b0:4e:44:
7d:90:94:53:c5:25:9f:48:5f:eb:7f:c7:b6:cc:01:24:a4:ae:
8b:4d:23:e9:e3:9d:de:52:15:4f:2f:ad:9b:83:09:3e:2f:8f:
a8:55:26:7f:97:ea:04:3c:c1:b0:ad:a7:5d:27:dc:b6:81:e8:
e1:c2:03:af:a7:d0:84:b3:ca:b7:03:b7:e8:e0:9b:3c:4a:d8:
6d:f4:cd:6b:5b:30:98:2b:97:10:43:58:bb:f4:18:d4:bd:50:
50:99:46:c3:4e:fd:bf:bb:f1:64:ed:ad:ed:28:a2:f7:0d:46:
3f:15:b9:56:f6:8f:a5:25:d0:95:d5:d4:85:61:c4:24:41:0a:
4f:64:ce:1c:b0:c6:c9:43:b5:e8:41:97:52:79:8c:12:9b:1a:
27:a4:8d:77:39:c5:81:11:92:e4:e6:2a:74:af:8f:78:61:08:
ca:aa:15:df:10:6f:7c:2b:40:5d:63:20:24:f7:78:36:05:44:
4f:28:58:c4:77:e7:d3:dd:4b:fb:69:86:49:89:5f:d3:ab:12:
71:a9:80:18:77:6e:5a:3b:51:2f:be:50:66:47:a7:8e:00:e2:
ab:ed:e8:0e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPNQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjAwMjU5WhcNMjcxMjEzMjAwMjU5WjAYMRYw
FAYDVQQDEw02Nzc2ZjBmNy05ZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0qg/uHBsHhkSYZOWlKBIZIhjd2XJmcnyTL+ARzBXJvTlDA/rSAMmK4lk
feo8D+PdeySvliYHex7g9lYMfd9chVm8Yu1vgVtHl9N56hj5OGZbOm2t6P8caKYb
b5JQ67UFLA7hT0MSM9UgImswa4nO3PpM4lKBh8xeu6tBEN3vojMoxxTWuKEq38dX
NsvYC4XkgUL+MAtKfp5bcMMFDRv25z2AgtWUZN0Uw6kUCnpV2d6M7EIv/4ocHeda
ym1bIwEFU6CndhDBnjzxsPDk6V8KJ7CjB5261f25NFdGn4F0zqODfZwfr0Mx7zzv
T0ZjvemW5axX1nTjJUG3tpBJB/mWzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPJj
u6G+xAu00cKC1pS6sf3TGz8xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MkU3RDkzRUM5NDQxMUVGQjg1RkEzNkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEjMA0GCSqGSIb3DQEBCwUA
A4IBAQBWP7VqWpdBp2auC+XvY0li1nf2vFrBvkSUDMzgOepzVmywTkR9kJRTxSWf
SF/rf8e2zAEkpK6LTSPp453eUhVPL62bgwk+L4+oVSZ/l+oEPMGwraddJ9y2gejh
wgOvp9CEs8q3A7fo4Js8Stht9M1rWzCYK5cQQ1i79BjUvVBQmUbDTv2/u/Fk7a3t
KKL3DUY/FblW9o+lJdCV1dSFYcQkQQpPZM4csMbJQ7XoQZdSeYwSmxonpI13OcWB
EZLk5ip0r494YQjKqhXfEG98K0BdYyAk93g2BURPKFjEd+fT3Uv7aYZJiV/TqxJx
qYAYd25aO1EvvlBmR6eOAOKr7egO
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:01 2025 by rpki-client