Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1FE5D24CDAC11EFAE690381762E951A.roa
File: E1FE5D24CDAC11EFAE690381762E951A.roa (raw, json)
Hash identifier: ii4uo8zQdD1PEusEAASsiPfAJKXv3gsC2ZC0Hsi4KJs=
Subject key identifier: FD:F5:ED:49:E3:B4:CA:BB:68:65:D5:49:31:F6:5C:BA:F7:B0:71:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01015F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1FE5D24CDAC11EFAE690381762E951A.roa
Signing time: Wed 08 Jan 2025 10:39:48 +0000
ROA not before: Wed 08 Jan 2025 10:39:44 +0000
ROA not after: Mon 13 Dec 2027 10:39:44 +0000
asID: 17561
IP address blocks: 156.255.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65887 (0x1015f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:39:44 2025 GMT
Not After : Dec 13 10:39:44 2027 GMT
Subject: CN=677e55f4-fcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:7f:02:9f:0b:79:b1:f0:6a:9c:51:e3:8c:
b9:9b:59:b0:55:02:de:66:3d:86:97:62:13:6c:7e:
b3:28:7a:db:2b:54:b1:07:89:3c:87:de:6b:24:ba:
37:e4:64:25:df:71:06:40:2a:14:f4:33:ac:62:75:
04:4f:0d:17:23:ef:ab:ee:4d:14:a2:be:3c:ce:22:
3a:64:31:f3:72:78:41:22:ec:6e:5c:75:78:f0:7f:
68:2c:c6:8d:29:f1:6c:d3:8d:1f:94:39:d8:ea:87:
49:53:0e:6c:0e:df:f6:03:99:e7:9d:f4:ec:a0:a6:
cb:65:91:6b:d2:a7:94:af:a0:fb:2d:84:1f:76:e0:
d8:60:2e:c1:b7:7f:fb:90:cd:a0:b7:e3:75:e1:0a:
f9:3f:87:a1:46:82:21:ce:c0:48:58:1a:e1:f8:75:
38:61:80:a4:1d:73:15:3e:4c:5e:29:ad:55:6d:f2:
6a:0f:09:a5:c2:6a:59:6d:d1:eb:99:fb:cf:0e:5a:
72:b3:37:31:a9:93:9f:5e:ec:06:99:d3:3c:ce:21:
0a:d2:88:fa:74:26:7b:9f:22:e3:7e:62:f2:e4:59:
84:d1:1c:41:69:7f:62:65:e7:24:76:35:b8:5e:b5:
aa:90:16:57:52:83:3c:4b:e8:7e:e4:0a:4e:c5:2c:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:ED:49:E3:B4:CA:BB:68:65:D5:49:31:F6:5C:BA:F7:B0:71:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1FE5D24CDAC11EFAE690381762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ab:b6:5c:98:d7:b9:49:4a:9e:0a:36:a3:15:74:65:e5:43:
2d:85:a6:a5:69:17:00:de:2b:dd:42:01:88:cd:84:da:81:08:
1a:ec:da:16:4e:3e:6d:45:a8:a7:dd:69:50:90:e3:2c:6a:12:
81:98:91:86:fb:74:ae:3e:cc:4a:73:17:3b:6f:ac:9d:23:a7:
7c:d2:30:ab:ac:bc:23:90:b1:13:1b:77:ca:54:7d:2a:4b:0c:
94:5f:8f:26:fe:a2:30:a0:89:83:6a:ac:5c:f0:f4:ff:10:c2:
e8:3d:ae:9d:39:03:09:7e:5a:37:2c:06:ea:8a:d0:13:a4:89:
f0:46:42:69:36:ea:ee:bf:27:e3:b1:1f:7b:b0:9a:c0:b1:f3:
8d:ce:82:b9:14:38:8b:6a:18:c5:f6:88:0f:0d:c7:71:35:25:
fb:62:eb:33:81:eb:e2:b6:63:59:ba:a4:24:b9:42:ba:76:0d:
fd:87:4e:da:8e:d0:fe:ae:b4:11:83:bf:af:e9:ca:82:0c:2f:
e1:6a:4d:de:d8:81:28:32:af:5a:dc:c1:22:47:d6:33:7d:ca:
dc:26:3c:73:0d:17:b6:90:96:53:c4:90:dc:96:d8:c6:22:d1:
89:fd:16:8d:12:6b:b7:7d:3d:d6:6c:54:22:8c:b4:50:12:a4:
b1:d7:db:5a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQFfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MTAzOTQ0WhcNMjcxMjEzMTAzOTQ0WjAYMRYw
FAYDVQQDEw02NzdlNTVmNC1mY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyxx/Ap8LebHwapxR44y5m1mwVQLeZj2Gl2ITbH6zKHrbK1SxB4k8h95r
JLo35GQl33EGQCoU9DOsYnUETw0XI++r7k0Uor48ziI6ZDHzcnhBIuxuXHV48H9o
LMaNKfFs040flDnY6odJUw5sDt/2A5nnnfTsoKbLZZFr0qeUr6D7LYQfduDYYC7B
t3/7kM2gt+N14Qr5P4ehRoIhzsBIWBrh+HU4YYCkHXMVPkxeKa1VbfJqDwmlwmpZ
bdHrmfvPDlpyszcxqZOfXuwGmdM8ziEK0oj6dCZ7nyLjfmLy5FmE0RxBaX9iZeck
djW4XrWqkBZXUoM8S+h+5ApOxSzDFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP31
7UnjtMq7aGXVSTH2XLr3sHGLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMUZFNUQyNENEQUMxMUVGQUU2OTAzODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8yMA0GCSqGSIb3DQEBCwUA
A4IBAQBMq7ZcmNe5SUqeCjajFXRl5UMthaalaRcA3ivdQgGIzYTagQga7NoWTj5t
Rain3WlQkOMsahKBmJGG+3SuPsxKcxc7b6ydI6d80jCrrLwjkLETG3fKVH0qSwyU
X48m/qIwoImDaqxc8PT/EMLoPa6dOQMJflo3LAbqitATpInwRkJpNuruvyfjsR97
sJrAsfONzoK5FDiLahjF9ogPDcdxNSX7YuszgevitmNZuqQkuUK6dg39h07ajtD+
rrQRg7+v6cqCDC/hak3e2IEoMq9a3MEiR9YzfcrcJjxzDRe2kJZTxJDcltjGItGJ
/RaNEmu3fT3WbFQijLRQEqSx19ta
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:13 2025 by rpki-client