Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93BE9B28C33A11EFA7797390762E951A.roa
File: 93BE9B28C33A11EFA7797390762E951A.roa (raw, json)
Hash identifier: 7DygNNItsWN3Ta00C9nFnPgurxY3fS664uSeBulQlyg=
Subject key identifier: 26:AF:D3:CA:53:06:DA:57:28:87:51:74:29:5E:75:03:66:64:01:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93BE9B28C33A11EFA7797390762E951A.roa
Signing time: Thu 26 Dec 2024 03:36:23 +0000
ROA not before: Thu 26 Dec 2024 03:36:19 +0000
ROA not after: Fri 10 Dec 2027 03:36:19 +0000
asID: 17561
IP address blocks: 156.244.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60287 (0xeb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:36:19 2024 GMT
Not After : Dec 10 03:36:19 2027 GMT
Subject: CN=676ccf36-38e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:03:ca:e7:d7:a7:14:92:bd:2b:bd:ee:69:
9c:25:eb:fb:b9:bf:a0:78:a7:b8:56:50:34:ce:f9:
67:37:32:c6:07:2e:50:18:be:aa:ba:5d:be:88:36:
6b:fb:c0:ed:25:a6:3b:e2:ea:86:8e:63:74:3a:c8:
77:51:fd:c2:d7:a3:2c:09:9e:1e:35:12:0b:43:6f:
99:18:ca:e3:f8:c3:4a:b9:18:6b:e1:1d:93:cf:f6:
6d:17:06:32:cc:dd:2a:6e:05:33:02:7e:03:a0:64:
eb:26:50:64:58:6a:12:45:6b:bf:f5:1c:8b:58:ae:
65:68:f1:dd:d4:3e:16:be:a9:85:ed:dc:36:5a:2b:
9d:34:be:3f:b4:11:9e:b9:26:ef:75:bb:65:10:54:
c2:26:09:df:30:0f:7d:7b:3b:50:e0:d5:fc:c6:dc:
16:e5:86:7f:8d:1f:a4:4d:e1:ca:14:c2:ff:0b:37:
5e:fb:24:cb:f2:45:65:95:75:7c:82:ab:a6:ce:e5:
ad:b8:58:30:3b:8e:ad:98:b2:3e:7f:39:56:b4:c6:
bc:62:35:91:52:e1:3f:37:69:f4:8f:c8:d9:43:da:
80:ae:67:78:b8:01:c2:e2:ae:53:84:25:55:84:a1:
a0:4b:30:b4:6c:74:96:49:1e:5d:5f:0b:e1:84:18:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:D3:CA:53:06:DA:57:28:87:51:74:29:5E:75:03:66:64:01:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93BE9B28C33A11EFA7797390762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3c:9b:e9:7b:e7:a7:56:1a:72:c7:16:62:62:3e:3b:28:9f:
0e:62:e1:94:39:0f:08:b9:9d:a8:91:6d:8a:46:e8:88:3c:8d:
ee:75:6f:38:25:1e:7d:db:10:a2:96:62:84:40:9d:55:29:48:
0a:02:b6:f8:4d:66:17:82:7a:76:8d:51:ae:c9:36:89:74:0f:
05:a0:5f:94:da:82:a2:88:17:cf:a9:48:fa:1d:26:e8:92:3b:
d6:f6:34:c8:80:3e:c1:c7:63:f9:b2:7c:15:3a:12:14:46:30:
55:95:eb:c9:8a:8b:28:a0:a2:34:14:77:8b:6b:54:4f:80:68:
94:36:21:ec:e8:b5:8d:eb:cf:89:9b:60:16:f1:35:eb:16:17:
11:3f:9e:2f:ea:fc:04:88:54:99:e1:eb:95:b4:95:23:07:34:
54:9e:d0:a3:cb:46:7f:ff:32:57:bd:a2:d6:0e:76:c9:9b:4f:
c2:87:ad:55:05:b1:6f:60:2f:3e:e5:80:1c:67:7e:d4:45:95:
c9:6a:6f:ba:c6:d1:98:e9:0c:4a:37:4a:61:6c:22:e0:a9:33:
b3:f1:74:e0:d2:c9:ce:e6:73:e0:67:af:a4:17:59:49:e4:c0:
04:73:f2:98:f9:c2:cc:13:b0:63:9a:ee:f2:cd:8a:c2:bf:11:
59:53:44:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOt/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDMzNjE5WhcNMjcxMjEwMDMzNjE5WjAYMRYw
FAYDVQQDEw02NzZjY2YzNi0zOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8HcDyufXpxSSvSu97mmcJev7ub+geKe4VlA0zvlnNzLGBy5QGL6qul2+
iDZr+8DtJaY74uqGjmN0Osh3Uf3C16MsCZ4eNRILQ2+ZGMrj+MNKuRhr4R2Tz/Zt
FwYyzN0qbgUzAn4DoGTrJlBkWGoSRWu/9RyLWK5laPHd1D4WvqmF7dw2WiudNL4/
tBGeuSbvdbtlEFTCJgnfMA99eztQ4NX8xtwW5YZ/jR+kTeHKFML/Czde+yTL8kVl
lXV8gqumzuWtuFgwO46tmLI+fzlWtMa8YjWRUuE/N2n0j8jZQ9qArmd4uAHC4q5T
hCVVhKGgSzC0bHSWSR5dXwvhhBhxiQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCav
08pTBtpXKIdRdCledQNmZAFmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85M0JFOUIyOEMzM0ExMUVGQTc3OTczOTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPS7MA0GCSqGSIb3DQEBCwUA
A4IBAQCiPJvpe+enVhpyxxZiYj47KJ8OYuGUOQ8IuZ2okW2KRuiIPI3udW84JR59
2xCilmKEQJ1VKUgKArb4TWYXgnp2jVGuyTaJdA8FoF+U2oKiiBfPqUj6HSbokjvW
9jTIgD7Bx2P5snwVOhIURjBVlevJiosooKI0FHeLa1RPgGiUNiHs6LWN68+Jm2AW
8TXrFhcRP54v6vwEiFSZ4euVtJUjBzRUntCjy0Z//zJXvaLWDnbJm0/Ch61VBbFv
YC8+5YAcZ37URZXJam+6xtGY6QxKN0phbCLgqTOz8XTg0snO5nPgZ6+kF1lJ5MAE
c/KY+cLME7Bjmu7yzYrCvxFZU0Tp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:40 2025 by rpki-client