Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5F8E988CD8011EFBA5A916A762E951A.roa
File: A5F8E988CD8011EFBA5A916A762E951A.roa (raw, json)
Hash identifier: mGbAThs34zEBtvkjhbGanODA4czRBhNW2RwXZcE7yuI=
Subject key identifier: 93:BB:8A:02:F3:E0:C7:9C:1A:3B:1F:88:D0:15:96:84:01:A2:D2:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010001
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5F8E988CD8011EFBA5A916A762E951A.roa
Signing time: Wed 08 Jan 2025 05:23:10 +0000
ROA not before: Wed 08 Jan 2025 05:23:06 +0000
ROA not after: Mon 13 Dec 2027 05:23:06 +0000
asID: 17561
IP address blocks: 156.251.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65537 (0x10001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 05:23:06 2025 GMT
Not After : Dec 13 05:23:06 2027 GMT
Subject: CN=677e0bbd-71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:75:77:15:ab:a8:fb:77:1a:42:27:eb:77:bc:
d1:38:ae:f1:ea:59:78:33:56:09:e1:01:14:3a:98:
28:e9:c9:3d:b1:8e:59:68:26:12:3a:9f:f7:f4:53:
da:e1:cf:31:84:68:c6:1c:3b:20:d9:b9:90:f8:71:
00:38:44:62:d2:cc:d8:0e:70:6c:60:b6:eb:95:7e:
65:21:5b:7b:40:0d:a6:a5:c9:70:b1:d1:37:ca:07:
4b:4b:a2:f6:8f:5d:03:3a:98:a6:cc:20:76:e5:52:
8f:54:a1:f6:df:36:5c:ca:7b:c5:e7:20:9b:42:3e:
30:8f:80:63:87:7b:b1:41:e1:7e:2f:54:d9:e0:d1:
67:0c:42:4d:3e:20:26:f8:82:95:ff:d8:a4:44:f5:
fe:53:97:72:c1:59:80:21:09:4d:00:91:11:6b:1d:
99:12:ff:6d:5b:ba:bb:d0:59:60:84:5d:18:6d:75:
fb:3d:33:f4:91:21:bf:94:d9:08:79:45:f2:c8:9f:
49:38:59:cc:57:3c:79:f4:2a:de:08:cf:4d:09:af:
4a:e3:c4:20:2e:1a:bd:eb:19:1f:63:57:b6:dd:67:
f7:03:92:db:ee:b1:4f:20:b8:b5:e1:6a:5f:68:6e:
5f:8d:32:a8:f7:73:c5:66:43:bc:cb:57:0b:e1:5e:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:8A:02:F3:E0:C7:9C:1A:3B:1F:88:D0:15:96:84:01:A2:D2:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5F8E988CD8011EFBA5A916A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ea:54:0f:28:e1:d5:37:dd:18:d1:f1:10:10:67:d6:b9:38:
95:e7:f0:29:35:f3:ca:a3:01:13:c8:49:13:1a:23:ef:8b:66:
f3:99:a3:08:4d:a1:23:c3:8c:9d:d0:4e:b7:cd:1a:54:f7:b2:
98:7b:6e:91:b7:de:db:3b:f7:5e:ae:de:f2:ac:d8:6c:3e:6e:
e0:c4:b5:8e:4d:fd:0e:50:dd:27:ed:7c:b5:dd:b6:fe:0e:05:
5c:1e:0d:f7:51:c3:a7:14:38:d9:70:73:78:70:8a:f5:00:18:
93:f3:ba:68:88:ae:98:7f:da:61:17:64:4e:70:10:38:b5:4a:
ec:72:5c:bc:00:8b:a9:03:06:00:bd:94:bc:89:d5:ea:0c:57:
1d:8c:5b:cb:96:64:ff:bd:91:af:e5:72:0f:d9:0c:7f:f4:b0:
a3:80:65:0e:13:30:e4:88:df:75:f7:c5:da:46:be:e8:c0:0a:
62:eb:19:c0:64:98:1d:f6:50:34:54:7a:24:99:35:4a:e3:7e:
b3:96:f4:f2:90:16:82:fe:00:72:3d:72:c7:31:59:0b:41:b9:
c8:00:8b:0a:c3:84:c8:8a:b6:3d:79:8a:18:74:87:21:da:d5:
99:e3:0a:b0:87:3f:62:df:43:af:88:90:a5:85:bb:3c:92:45:
ad:46:4b:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQABMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDUyMzA2WhcNMjcxMjEzMDUyMzA2WjAYMRYw
FAYDVQQDEw02NzdlMGJiZC03MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7HV3Fauo+3caQifrd7zROK7x6ll4M1YJ4QEUOpgo6ck9sY5ZaCYSOp/3
9FPa4c8xhGjGHDsg2bmQ+HEAOERi0szYDnBsYLbrlX5lIVt7QA2mpclwsdE3ygdL
S6L2j10DOpimzCB25VKPVKH23zZcynvF5yCbQj4wj4Bjh3uxQeF+L1TZ4NFnDEJN
PiAm+IKV/9ikRPX+U5dywVmAIQlNAJERax2ZEv9tW7q70FlghF0YbXX7PTP0kSG/
lNkIeUXyyJ9JOFnMVzx59CreCM9NCa9K48QgLhq96xkfY1e23Wf3A5Lb7rFPILi1
4WpfaG5fjTKo93PFZkO8y1cL4V5HWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJO7
igLz4MecGjsfiNAVloQBotLMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNUY4RTk4OENEODAxMUVGQkE1QTkxNkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPt+MA0GCSqGSIb3DQEBCwUA
A4IBAQA86lQPKOHVN90Y0fEQEGfWuTiV5/ApNfPKowETyEkTGiPvi2bzmaMITaEj
w4yd0E63zRpU97KYe26Rt97bO/dert7yrNhsPm7gxLWOTf0OUN0n7Xy13bb+DgVc
Hg33UcOnFDjZcHN4cIr1ABiT87poiK6Yf9phF2ROcBA4tUrscly8AIupAwYAvZS8
idXqDFcdjFvLlmT/vZGv5XIP2Qx/9LCjgGUOEzDkiN9198XaRr7owApi6xnAZJgd
9lA0VHokmTVK436zlvTykBaC/gByPXLHMVkLQbnIAIsKw4TIirY9eYoYdIch2tWZ
4wqwhz9i30OviJClhbs8kkWtRku4
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:13 2025 by rpki-client