Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA538728C35A11EF93DEFA5D762E951A.roa
File: CA538728C35A11EF93DEFA5D762E951A.roa (raw, json)
Hash identifier: b0qElmC48aYQvdXKnuEwZxWYZYPLDoA7fxLSSkTmAP8=
Subject key identifier: E4:E2:0E:DF:C3:2A:BC:26:F0:F7:C6:19:E5:02:45:7F:55:9A:17:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA538728C35A11EF93DEFA5D762E951A.roa
Signing time: Thu 26 Dec 2024 07:26:58 +0000
ROA not before: Thu 26 Dec 2024 07:26:54 +0000
ROA not after: Sun 23 Feb 2025 07:26:54 +0000
asID: 63139
IP address blocks: 156.227.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60511 (0xec5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 07:26:54 2024 GMT
Not After : Feb 23 07:26:54 2025 GMT
Subject: CN=676d0542-f180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:d4:1e:d2:04:54:25:39:bf:8f:2c:18:eb:
e4:8c:69:4a:8b:a4:5c:1e:f6:f5:1e:fe:4d:68:3b:
71:1e:4b:52:63:f1:4f:23:8c:94:ac:19:ff:82:da:
da:3f:93:3c:84:95:68:ef:54:d7:db:2c:1c:32:6d:
04:01:5f:92:76:56:06:e6:a8:3e:df:9d:6c:6c:e9:
e8:86:18:96:e8:b2:eb:b3:31:61:c2:90:86:44:de:
ab:01:55:79:2e:90:41:f4:c5:b0:fc:1c:6f:67:78:
bc:fe:03:73:c7:fc:ac:2a:c3:0b:40:8e:b4:83:1e:
f5:88:ff:b0:15:ac:5f:39:1b:19:10:c5:62:70:48:
04:79:99:e6:63:56:e2:4f:db:02:13:65:0d:b0:f3:
5c:69:71:a1:93:e3:da:05:03:1d:73:69:6a:17:ed:
26:cc:60:04:85:d1:bd:ff:fa:9c:ff:48:96:43:e6:
81:b4:45:60:3e:4a:da:97:39:d9:21:b4:b1:71:a4:
5e:b6:a1:83:0e:81:c8:d0:dd:b8:7a:d8:bc:33:74:
0a:ff:43:ab:1a:ac:c5:8f:e8:ae:6e:28:b8:23:bd:
f9:76:d0:71:29:cc:a9:d7:64:04:87:62:a2:9c:46:
b8:65:70:a7:ba:05:99:55:5b:01:b4:e2:c9:5c:a8:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:0E:DF:C3:2A:BC:26:F0:F7:C6:19:E5:02:45:7F:55:9A:17:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA538728C35A11EF93DEFA5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:34:c8:b3:15:72:18:85:1c:21:7b:fc:81:9a:01:cc:b7:a4:
88:12:09:fa:79:66:e5:14:ae:3c:c5:60:12:13:30:d9:01:b2:
81:67:4e:02:6e:55:26:36:b1:8d:20:da:3e:aa:11:59:29:13:
e4:f7:36:3f:87:62:4c:3a:48:db:81:09:cc:c1:4a:50:74:52:
7a:6a:e4:e4:3a:37:ec:d2:48:84:cd:ab:24:ba:9a:6c:f2:75:
29:bf:87:4a:72:04:d7:95:9d:f8:b1:72:7b:64:12:7d:f9:3e:
a3:e1:5d:ac:45:1b:1e:25:13:cd:8f:f8:43:10:2a:c2:c0:5b:
ac:ae:74:9f:59:17:97:ce:12:38:81:de:32:96:13:67:27:9b:
6d:4c:45:c1:5f:37:6f:25:aa:af:b6:19:a4:e3:8e:6e:6e:0e:
ea:86:f0:d8:03:27:b4:ce:81:e4:e2:56:49:b6:9f:37:f1:89:
d2:5b:e5:8b:48:f9:db:18:5b:87:66:6d:ac:a8:d7:52:61:56:
f1:02:c9:36:41:8f:1e:67:56:7c:bf:07:8a:72:46:3e:f4:d5:
61:1a:a5:9c:d5:ae:57:93:d8:42:30:da:e3:36:a9:ef:ec:ac:
74:d7:10:c8:0e:33:55:ef:b8:54:b2:d1:26:5f:d0:74:93:e6:
51:fd:87:bd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOxfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDcyNjU0WhcNMjUwMjIzMDcyNjU0WjAYMRYw
FAYDVQQDEw02NzZkMDU0Mi1mMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxgXUHtIEVCU5v48sGOvkjGlKi6RcHvb1Hv5NaDtxHktSY/FPI4yUrBn/
gtraP5M8hJVo71TX2ywcMm0EAV+SdlYG5qg+351sbOnohhiW6LLrszFhwpCGRN6r
AVV5LpBB9MWw/BxvZ3i8/gNzx/ysKsMLQI60gx71iP+wFaxfORsZEMVicEgEeZnm
Y1biT9sCE2UNsPNcaXGhk+PaBQMdc2lqF+0mzGAEhdG9//qc/0iWQ+aBtEVgPkra
lznZIbSxcaRetqGDDoHI0N24eti8M3QK/0OrGqzFj+iubii4I735dtBxKcyp12QE
h2KinEa4ZXCnugWZVVsBtOLJXKgS0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOTi
Dt/DKrwm8PfGGeUCRX9VmhcjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQTUzODcyOEMzNUExMUVGOTNERUZBNUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOPIMA0GCSqGSIb3DQEBCwUA
A4IBAQBrNMizFXIYhRwhe/yBmgHMt6SIEgn6eWblFK48xWASEzDZAbKBZ04CblUm
NrGNINo+qhFZKRPk9zY/h2JMOkjbgQnMwUpQdFJ6auTkOjfs0kiEzaskupps8nUp
v4dKcgTXlZ34sXJ7ZBJ9+T6j4V2sRRseJRPNj/hDECrCwFusrnSfWReXzhI4gd4y
lhNnJ5ttTEXBXzdvJaqvthmk445ubg7qhvDYAye0zoHk4lZJtp838YnSW+WLSPnb
GFuHZm2sqNdSYVbxAsk2QY8eZ1Z8vweKckY+9NVhGqWc1a5Xk9hCMNrjNqnv7Kx0
1xDIDjNV77hUstEmX9B0k+ZR/Ye9
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:45 2025 by rpki-client