Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7791DCCDA211EFA339C6BE762E951A.roa
File: AE7791DCCDA211EFA339C6BE762E951A.roa (raw, json)
Hash identifier: iSczgmdydLJM/w3Uc/tCOJoFHerNYt+5DtH/lwINGn0=
Subject key identifier: 8E:1F:05:DA:8E:0B:20:D2:43:6A:E4:FD:BD:59:4A:72:56:11:49:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7791DCCDA211EFA339C6BE762E951A.roa
Signing time: Wed 08 Jan 2025 09:26:47 +0000
ROA not before: Wed 08 Jan 2025 09:26:43 +0000
ROA not after: Mon 13 Dec 2027 09:26:43 +0000
asID: 17561
IP address blocks: 156.253.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65781 (0x100f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:26:43 2025 GMT
Not After : Dec 13 09:26:43 2027 GMT
Subject: CN=677e44d7-913e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:d6:02:b1:19:64:5f:e6:ab:c3:17:5b:12:
ff:15:9f:ce:ad:aa:4f:a0:e6:26:7b:26:9a:ee:ad:
63:92:f3:97:a8:e4:77:0a:91:fb:fc:fc:c7:69:25:
8f:6f:a1:d9:70:c9:38:1e:df:cd:e5:fd:92:1f:7c:
cc:65:0d:86:c2:64:54:2f:03:ce:69:8d:af:61:66:
82:d7:e0:b5:19:cc:95:60:18:53:b1:e6:56:61:f0:
4f:9a:1e:fd:61:f9:4c:3f:4b:4a:91:b6:ea:51:da:
32:19:23:bb:f0:62:5f:fc:d6:19:45:63:35:04:ac:
af:71:12:7f:de:19:39:2e:d1:8a:a7:cd:4e:ad:f1:
79:94:f0:e0:96:13:59:e6:b3:3a:7f:77:eb:5e:4b:
e7:5c:2d:1a:bb:2b:0a:14:1f:27:a2:1f:14:f3:c7:
f6:be:64:04:4a:ed:7e:c2:7b:05:10:e4:f3:28:77:
b0:8d:82:20:c9:2e:c1:88:41:e9:b9:ab:f4:2f:12:
3e:de:b8:6b:38:22:d6:a1:c5:f2:cb:88:2a:93:e1:
7a:8d:e6:a4:43:46:56:c1:0d:74:58:73:78:98:cb:
a9:82:22:61:65:fc:a3:08:28:f1:25:43:16:29:63:
24:92:b1:76:1c:ee:ec:b8:13:9c:92:a0:bc:1c:4a:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:05:DA:8E:0B:20:D2:43:6A:E4:FD:BD:59:4A:72:56:11:49:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE7791DCCDA211EFA339C6BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:35:b5:f8:aa:32:68:71:b0:86:23:52:b9:42:3a:7e:8f:67:
91:5d:1c:db:7b:b0:0d:a5:f9:52:2b:46:86:99:5a:79:20:60:
16:9b:8c:c4:5c:2b:1d:bf:35:f0:79:af:b8:1b:e5:ed:44:1f:
58:4e:5d:d7:35:ae:2f:f5:eb:66:41:7b:a4:96:87:ae:e4:a9:
35:e2:a7:b5:3e:55:b3:36:ed:d1:a3:d7:13:2d:c8:61:76:90:
bb:2c:8f:86:5a:83:1a:94:8f:8c:26:0d:4a:99:1b:53:d7:4f:
0e:e4:9c:2d:95:b4:2a:63:ca:cc:ef:07:8e:d5:cc:cb:2d:88:
ff:a3:7d:35:a4:0e:27:dc:be:d4:44:23:1d:29:c2:34:5b:3a:
79:f5:67:fb:ce:7d:3a:b2:f0:31:21:da:1b:97:3e:67:be:38:
c0:60:30:67:6b:1b:a2:e3:ae:74:90:e1:44:53:3f:c0:36:7d:
aa:85:38:b3:19:66:c3:08:ca:36:8d:09:4e:19:b0:ee:05:6c:
d6:06:1e:7c:1e:b0:cd:23:81:82:95:dc:c6:9a:fd:0c:e8:73:
39:44:a1:32:de:ed:ae:94:7e:30:c2:d6:49:a5:bf:fa:25:b3:
83:43:a5:8a:71:94:2e:3b:bc:70:29:63:a3:d3:84:4c:76:74:
e0:7c:d1:ff
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQD1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDkyNjQzWhcNMjcxMjEzMDkyNjQzWjAYMRYw
FAYDVQQDEw02NzdlNDRkNy05MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAttbWArEZZF/mq8MXWxL/FZ/OrapPoOYmeyaa7q1jkvOXqOR3CpH7/PzH
aSWPb6HZcMk4Ht/N5f2SH3zMZQ2GwmRULwPOaY2vYWaC1+C1GcyVYBhTseZWYfBP
mh79YflMP0tKkbbqUdoyGSO78GJf/NYZRWM1BKyvcRJ/3hk5LtGKp81OrfF5lPDg
lhNZ5rM6f3frXkvnXC0auysKFB8noh8U88f2vmQESu1+wnsFEOTzKHewjYIgyS7B
iEHpuav0LxI+3rhrOCLWocXyy4gqk+F6jeakQ0ZWwQ10WHN4mMupgiJhZfyjCCjx
JUMWKWMkkrF2HO7suBOckqC8HEpJJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI4f
BdqOCyDSQ2rk/b1ZSnJWEUmnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRTc3OTFEQ0NEQTIxMUVGQTMzOUM2QkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP0vMA0GCSqGSIb3DQEBCwUA
A4IBAQBVNbX4qjJocbCGI1K5Qjp+j2eRXRzbe7ANpflSK0aGmVp5IGAWm4zEXCsd
vzXwea+4G+XtRB9YTl3XNa4v9etmQXukloeu5Kk14qe1PlWzNu3Ro9cTLchhdpC7
LI+GWoMalI+MJg1KmRtT108O5JwtlbQqY8rM7weO1czLLYj/o301pA4n3L7URCMd
KcI0Wzp59Wf7zn06svAxIdoblz5nvjjAYDBnaxui4650kOFEUz/ANn2qhTizGWbD
CMo2jQlOGbDuBWzWBh58HrDNI4GCldzGmv0M6HM5RKEy3u2ulH4wwtZJpb/6JbOD
Q6WKcZQuO7xwKWOj04RMdnTgfNH/
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:38:34 2025 by rpki-client