Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2539F96CD1111EFBF7D559A762E951A.roa
File: E2539F96CD1111EFBF7D559A762E951A.roa (raw, json)
Hash identifier: xMR9u5AES4LXHBk8fcghL16TrDiOcxe8G+mgugawr7g=
Subject key identifier: 2C:1A:AB:C4:1A:F3:B3:50:AF:93:57:A1:F2:3C:CE:AD:C3:84:D5:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2539F96CD1111EFBF7D559A762E951A.roa
Signing time: Tue 07 Jan 2025 16:10:17 +0000
ROA not before: Tue 07 Jan 2025 16:10:13 +0000
ROA not after: Mon 13 Dec 2027 16:10:13 +0000
asID: 17561
IP address blocks: 156.240.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64761 (0xfcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:10:13 2025 GMT
Not After : Dec 13 16:10:13 2027 GMT
Subject: CN=677d51e9-6105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:13:25:bd:b4:63:78:0b:68:a7:38:83:75:
d7:ab:8e:a1:33:ec:f0:38:39:02:e0:32:8a:3e:4e:
fb:1f:bb:c0:59:c1:1d:66:95:ab:f2:27:f5:48:6b:
ee:89:00:ac:f4:7d:9c:62:06:16:3a:a2:f6:e1:34:
9a:ed:95:55:d8:ac:ed:28:b5:c3:76:37:53:99:44:
84:fd:3b:ad:93:63:a7:99:95:71:22:d1:c3:e0:cc:
b5:04:17:a4:da:a5:a9:fa:e1:9a:56:c6:fe:c7:93:
1d:ff:87:ea:3f:39:26:e5:50:67:17:12:fc:17:55:
91:e5:ed:cf:b8:e4:5c:72:b4:15:cd:ba:b1:a3:de:
aa:de:fd:9f:91:7c:56:94:8b:57:61:7f:f3:82:ab:
3e:ba:87:cb:39:81:99:bf:aa:c4:93:68:eb:18:b0:
76:2e:fd:5c:4a:42:ce:0d:de:e1:92:29:98:4e:e4:
db:13:9b:94:05:5c:f1:ea:09:a9:69:ae:07:82:3d:
56:ba:33:26:42:d0:9a:38:e9:1c:fd:a1:73:00:b9:
97:5e:5c:c7:81:b6:aa:e5:04:b4:03:ed:0d:25:4f:
7f:88:8d:51:42:6e:8a:0c:4b:9d:73:b1:1d:1f:68:
e1:5d:59:ed:a0:8a:c1:fc:16:dc:c9:f7:63:c1:b1:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1A:AB:C4:1A:F3:B3:50:AF:93:57:A1:F2:3C:CE:AD:C3:84:D5:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2539F96CD1111EFBF7D559A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:78:ce:05:0f:d5:38:d5:07:74:c3:2e:83:38:43:97:c7:1e:
f1:0d:d3:35:fa:83:09:32:14:95:ae:13:71:79:06:c3:45:a3:
96:08:35:bd:cb:f8:85:ef:69:d5:2b:20:3d:d0:12:9f:cc:3d:
fc:98:0a:56:39:cb:84:e1:5c:d6:4c:52:1e:12:22:d3:a5:30:
4e:1d:3b:03:e6:99:65:bf:da:b5:a1:e2:6d:5f:a4:f3:cf:62:
3b:10:5c:c2:87:23:5e:1d:be:5c:80:9e:4b:07:82:fc:27:4e:
7c:51:b0:a2:83:80:4d:44:d9:f8:04:ad:60:61:1d:e4:63:ea:
21:d6:79:8e:71:db:19:77:31:d3:c2:bc:d5:21:d6:a0:42:ca:
11:29:f9:41:a3:83:a7:5a:84:a7:4f:5c:b5:dc:9c:5a:6f:8f:
a4:38:72:36:d0:fc:e8:15:53:7b:c9:60:0b:1d:52:85:07:26:
c5:12:39:19:b0:7b:2b:d5:aa:52:a2:c5:49:6e:79:8d:ef:9b:
19:d2:95:7e:9a:1f:8e:ff:50:97:df:7d:61:b1:f9:de:95:d1:
48:3d:06:f7:e6:87:9c:5e:fb:9b:bb:d6:d6:1e:1d:e8:0c:d2:
74:ef:fb:cc:b7:01:ac:30:60:a5:37:34:5b:f6:af:ca:22:1a:
bd:d8:51:b2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPz5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTYxMDEzWhcNMjcxMjEzMTYxMDEzWjAYMRYw
FAYDVQQDEw02NzdkNTFlOS02MTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz+wTJb20Y3gLaKc4g3XXq46hM+zwODkC4DKKPk77H7vAWcEdZpWr8if1
SGvuiQCs9H2cYgYWOqL24TSa7ZVV2KztKLXDdjdTmUSE/Tutk2OnmZVxItHD4My1
BBek2qWp+uGaVsb+x5Md/4fqPzkm5VBnFxL8F1WR5e3PuORccrQVzbqxo96q3v2f
kXxWlItXYX/zgqs+uofLOYGZv6rEk2jrGLB2Lv1cSkLODd7hkimYTuTbE5uUBVzx
6gmpaa4Hgj1WujMmQtCaOOkc/aFzALmXXlzHgbaq5QS0A+0NJU9/iI1RQm6KDEud
c7EdH2jhXVntoIrB/BbcyfdjwbHu0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCwa
q8Qa87NQr5NXofI8zq3DhNUuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMjUzOUY5NkNEMTExMUVGQkY3RDU1OUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPA7MA0GCSqGSIb3DQEBCwUA
A4IBAQBneM4FD9U41Qd0wy6DOEOXxx7xDdM1+oMJMhSVrhNxeQbDRaOWCDW9y/iF
72nVKyA90BKfzD38mApWOcuE4VzWTFIeEiLTpTBOHTsD5pllv9q1oeJtX6Tzz2I7
EFzChyNeHb5cgJ5LB4L8J058UbCig4BNRNn4BK1gYR3kY+oh1nmOcdsZdzHTwrzV
IdagQsoRKflBo4OnWoSnT1y13Jxab4+kOHI20PzoFVN7yWALHVKFBybFEjkZsHsr
1apSosVJbnmN75sZ0pV+mh+O/1CX331hsfneldFIPQb35oecXvubu9bWHh3oDNJ0
7/vMtwGsMGClNzRb9q/KIhq92FGy
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:18 2025 by rpki-client