Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7B8175ECC9411EFAA89C96F762E951A.roa
File: A7B8175ECC9411EFAA89C96F762E951A.roa (raw, json)
Hash identifier: 9piQD7j2dVkI3izmEs/oGeguo4ZHrH+kCpxknfYPQfA=
Subject key identifier: C5:7A:91:81:D7:85:EC:80:83:22:A3:BD:F9:5B:7B:EE:87:64:C5:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F92A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7B8175ECC9411EFAA89C96F762E951A.roa
Signing time: Tue 07 Jan 2025 01:13:51 +0000
ROA not before: Tue 07 Jan 2025 01:13:48 +0000
ROA not after: Mon 13 Dec 2027 01:13:48 +0000
asID: 17561
IP address blocks: 156.227.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63786 (0xf92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:13:48 2025 GMT
Not After : Dec 13 01:13:48 2027 GMT
Subject: CN=677c7fcf-69eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:85:b2:fb:b9:50:82:12:f9:ec:39:5a:6b:
23:72:58:b5:0e:dc:d9:55:d9:88:55:a3:c8:59:38:
85:26:f8:aa:34:bc:e4:1e:a2:59:5e:cd:1b:53:01:
6b:7a:4d:56:0e:e1:86:d2:8f:f5:36:a2:6d:b5:25:
3f:d1:80:57:1d:47:82:80:5f:18:52:fc:dd:90:4c:
5a:a1:2b:ab:ff:a9:6d:6b:6b:4a:5d:8d:3f:d2:9d:
b2:0b:0f:14:bc:ab:d7:24:ff:76:8e:70:50:fa:b8:
fd:2f:d1:48:13:f4:20:d8:3d:7e:12:8e:00:05:a1:
51:cf:aa:ea:9b:f0:bf:12:8a:ac:43:a3:bf:9f:b3:
c3:5b:63:90:b7:af:8e:02:18:cd:85:ed:47:12:12:
87:dd:bb:b3:64:3c:ce:4f:84:39:35:7e:1c:a3:70:
2c:39:54:a9:d0:69:cb:c8:1b:6a:0c:c1:3b:bd:59:
e5:72:1e:e1:7b:64:df:b8:9d:d8:d6:1c:50:08:38:
ee:d2:1d:11:13:fe:df:d3:3f:c4:4d:a5:ec:64:d9:
f4:44:ca:a3:3d:83:b3:3f:e1:c7:6b:ff:06:51:18:
36:3d:19:79:8b:c6:3f:a6:15:17:a3:69:91:24:d4:
32:ba:ae:32:34:14:f7:65:87:a0:d3:57:21:b9:9b:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7A:91:81:D7:85:EC:80:83:22:A3:BD:F9:5B:7B:EE:87:64:C5:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7B8175ECC9411EFAA89C96F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.74.0/24
Signature Algorithm: sha256WithRSAEncryption
07:22:f8:cf:b1:4b:57:2a:d8:fc:db:f4:69:53:13:63:1d:fe:
1f:d9:ad:d0:9b:50:cb:2b:29:04:cf:0e:a9:72:43:ea:5a:3c:
b0:b9:57:af:1e:a4:6f:0b:be:7d:27:f7:a8:4d:5e:8d:7d:e4:
6b:59:b7:3c:d0:3d:5a:bd:b9:d7:6e:e8:2f:f9:7a:1b:e1:2e:
89:81:4b:85:06:1f:9f:ad:29:4d:27:2c:a0:1d:6e:87:43:16:
32:ac:f9:0c:43:e0:91:c7:f8:b0:7e:04:52:cf:aa:75:d3:bf:
9f:30:42:f3:3b:1d:a4:de:e8:da:ce:48:3e:31:aa:3b:e7:dc:
9c:70:51:1a:e7:80:70:27:93:7b:a8:34:48:20:32:43:26:2b:
46:ca:1e:79:93:be:ac:cc:02:eb:5e:62:13:4f:91:f4:f4:6c:
67:60:9e:e0:f0:9a:50:27:69:7e:00:60:a5:e8:25:96:af:d5:
46:f4:c3:79:05:bb:c1:8c:ca:89:25:74:d2:13:a1:40:a5:66:
4a:36:ad:58:17:73:fc:64:bf:74:d6:83:af:3a:c3:35:29:a8:
5d:34:a9:98:ad:ec:a8:c1:c6:44:8b:bc:4d:38:cd:80:7c:27:
ca:2b:4b:58:fa:98:b7:5d:5c:ab:13:d9:86:b3:72:93:8f:0d:
02:14:31:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPkqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDExMzQ4WhcNMjcxMjEzMDExMzQ4WjAYMRYw
FAYDVQQDEw02NzdjN2ZjZi02OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ZCFsvu5UIIS+ew5Wmsjcli1DtzZVdmIVaPIWTiFJviqNLzkHqJZXs0b
UwFrek1WDuGG0o/1NqJttSU/0YBXHUeCgF8YUvzdkExaoSur/6lta2tKXY0/0p2y
Cw8UvKvXJP92jnBQ+rj9L9FIE/Qg2D1+Eo4ABaFRz6rqm/C/EoqsQ6O/n7PDW2OQ
t6+OAhjNhe1HEhKH3buzZDzOT4Q5NX4co3AsOVSp0GnLyBtqDME7vVnlch7he2Tf
uJ3Y1hxQCDju0h0RE/7f0z/ETaXsZNn0RMqjPYOzP+HHa/8GURg2PRl5i8Y/phUX
o2mRJNQyuq4yNBT3ZYeg01chuZtyKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMV6
kYHXheyAgyKjvflbe+6HZMUFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BN0I4MTc1RUNDOTQxMUVGQUE4OUM5NkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnONKMA0GCSqGSIb3DQEBCwUA
A4IBAQAHIvjPsUtXKtj82/RpUxNjHf4f2a3Qm1DLKykEzw6pckPqWjywuVevHqRv
C759J/eoTV6NfeRrWbc80D1avbnXbugv+Xob4S6JgUuFBh+frSlNJyygHW6HQxYy
rPkMQ+CRx/iwfgRSz6p107+fMELzOx2k3ujazkg+Mao759yccFEa54BwJ5N7qDRI
IDJDJitGyh55k76szALrXmITT5H09GxnYJ7g8JpQJ2l+AGCl6CWWr9VG9MN5BbvB
jMqJJXTSE6FApWZKNq1YF3P8ZL901oOvOsM1KahdNKmYreyowcZEi7xNOM2AfCfK
K0tY+pi3XVyrE9mGs3KTjw0CFDG3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:06 2025 by rpki-client