Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4EADCC4CD4C11EFB148C88A762E951A.roa
File: A4EADCC4CD4C11EFB148C88A762E951A.roa (raw, json)
Hash identifier: +d2/BxI4BtWwIM87ilZgEchR/VMP00RyOSoWpDgH5uk=
Subject key identifier: 86:CF:C4:95:6E:D1:97:11:CA:7C:91:4D:9F:5B:B3:F1:CA:BA:92:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FECB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4EADCC4CD4C11EFB148C88A762E951A.roa
Signing time: Tue 07 Jan 2025 23:10:54 +0000
ROA not before: Tue 07 Jan 2025 23:10:50 +0000
ROA not after: Mon 13 Dec 2027 23:10:50 +0000
asID: 17561
IP address blocks: 156.247.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65227 (0xfecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:10:50 2025 GMT
Not After : Dec 13 23:10:50 2027 GMT
Subject: CN=677db47e-5a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:4d:1d:d3:66:0b:6b:86:49:a3:04:02:df:
ce:37:2b:00:56:0a:38:b9:fc:a3:94:63:30:5d:ad:
0b:33:41:e7:7f:73:18:3f:80:f2:e7:8c:47:84:62:
f8:c9:29:a4:31:58:15:f5:61:39:90:ab:80:bc:9c:
cc:8e:1c:97:54:a9:d3:94:f1:2d:1d:8b:3c:b9:76:
a6:78:11:6a:b1:e4:61:73:23:91:06:fb:3b:dc:1a:
ef:34:ac:be:d6:ab:29:e8:72:8b:c2:10:0b:98:6b:
98:3a:34:b2:25:4d:7d:de:c8:42:44:b8:53:32:c7:
5e:51:21:b2:47:e4:59:40:63:da:56:b5:fb:fa:f8:
07:f0:87:7f:23:86:62:38:1c:ab:5e:41:a3:c2:29:
eb:1c:e1:6f:c3:fb:cd:df:51:1d:f2:30:06:ca:47:
36:5c:6d:23:05:9f:b3:ed:2c:84:38:4c:71:31:d3:
22:e5:c7:15:ab:83:a0:a5:f7:ae:27:3e:9d:3b:7c:
60:1e:c2:76:8a:a3:36:89:2c:5b:3f:07:dd:51:4e:
1a:91:13:a7:18:e4:9f:c1:8b:b3:5c:62:e0:19:8d:
62:b3:8c:dc:a7:e1:dd:e5:74:23:87:62:47:80:1b:
ca:19:1d:59:ae:c3:24:95:63:55:44:18:82:5b:7c:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CF:C4:95:6E:D1:97:11:CA:7C:91:4D:9F:5B:B3:F1:CA:BA:92:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4EADCC4CD4C11EFB148C88A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.3.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:db:86:ed:c3:67:96:63:0a:2c:62:7e:97:87:d5:b1:fd:cb:
d6:d8:9d:b1:af:09:7b:05:a7:12:16:31:d9:f0:1d:d5:38:03:
b1:38:df:63:03:33:1c:5f:4f:4f:aa:f7:51:4c:30:82:0b:46:
ef:99:e2:b5:02:5d:d3:51:4c:5d:42:b5:99:78:45:c1:ce:83:
25:ff:e1:51:a9:7b:91:0a:9a:26:fb:2e:f3:ff:3c:bc:2d:05:
55:e1:69:fb:4d:59:5a:ec:8a:f2:53:ba:c4:6c:47:ff:38:0e:
8d:a4:d4:0c:c6:99:13:a9:40:53:b0:3c:5c:4d:f7:a9:1b:f7:
8d:6e:19:80:7a:02:db:1e:17:c6:41:a0:07:8f:57:a4:61:e8:
a0:52:32:f8:fa:66:f4:b7:01:25:ff:38:0d:e5:5f:8b:94:f5:
c7:54:c3:99:8d:35:42:2d:e3:4e:df:52:4d:48:0a:63:d7:25:
f4:4e:ec:9d:c1:14:92:42:3f:84:63:6a:df:2a:23:6c:91:95:
95:3b:2e:3f:a4:88:c4:85:1e:59:3a:7b:1b:09:47:89:a0:a2:
d3:f1:df:c6:3a:62:67:38:bb:dc:00:6f:c8:a1:51:cf:f5:b8:
85:c6:c1:29:12:ff:56:6a:1c:63:f7:c0:da:ca:bc:31:ae:d0:
48:e5:db:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP7LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjMxMDUwWhcNMjcxMjEzMjMxMDUwWjAYMRYw
FAYDVQQDEw02NzdkYjQ3ZS01YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAun9NHdNmC2uGSaMEAt/ONysAVgo4ufyjlGMwXa0LM0Hnf3MYP4Dy54xH
hGL4ySmkMVgV9WE5kKuAvJzMjhyXVKnTlPEtHYs8uXameBFqseRhcyORBvs73Brv
NKy+1qsp6HKLwhALmGuYOjSyJU193shCRLhTMsdeUSGyR+RZQGPaVrX7+vgH8Id/
I4ZiOByrXkGjwinrHOFvw/vN31Ed8jAGykc2XG0jBZ+z7SyEOExxMdMi5ccVq4Og
pfeuJz6dO3xgHsJ2iqM2iSxbPwfdUU4akROnGOSfwYuzXGLgGY1is4zcp+Hd5XQj
h2JHgBvKGR1ZrsMklWNVRBiCW3y0dQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIbP
xJVu0ZcRynyRTZ9bs/HKupItMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNEVBRENDNENENEMxMUVGQjE0OEM4OEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcDMA0GCSqGSIb3DQEBCwUA
A4IBAQC724btw2eWYwosYn6Xh9Wx/cvW2J2xrwl7BacSFjHZ8B3VOAOxON9jAzMc
X09PqvdRTDCCC0bvmeK1Al3TUUxdQrWZeEXBzoMl/+FRqXuRCpom+y7z/zy8LQVV
4Wn7TVla7IryU7rEbEf/OA6NpNQMxpkTqUBTsDxcTfepG/eNbhmAegLbHhfGQaAH
j1ekYeigUjL4+mb0twEl/zgN5V+LlPXHVMOZjTVCLeNO31JNSApj1yX0TuydwRSS
Qj+EY2rfKiNskZWVOy4/pIjEhR5ZOnsbCUeJoKLT8d/GOmJnOLvcAG/IoVHP9biF
xsEpEv9Wahxj98DayrwxrtBI5dvA
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:13 2025 by rpki-client