Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB8BCCB4D2FC11EF9A9287B6762E951A.roa
File: EB8BCCB4D2FC11EF9A9287B6762E951A.roa (raw, json)
Hash identifier: E30HYaVHohHiGpJ9mLhnbxETkhZpKbF31t/IKjnd8v4=
Subject key identifier: B1:8E:B6:C2:9F:FB:15:98:26:62:24:75:43:BB:0E:45:F1:0E:90:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0107D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB8BCCB4D2FC11EF9A9287B6762E951A.roa
Signing time: Wed 15 Jan 2025 04:55:20 +0000
ROA not before: Wed 15 Jan 2025 04:55:16 +0000
ROA not after: Sat 03 Jan 2026 04:55:16 +0000
asID: 984
IP address blocks: 156.254.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67537 (0x107d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 04:55:16 2025 GMT
Not After : Jan 3 04:55:16 2026 GMT
Subject: CN=67873fb8-4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:ca:ec:c7:9c:00:99:4c:87:9d:a8:5b:56:
3d:a8:29:b9:2a:42:fc:56:b0:13:9a:b1:fe:17:7e:
b1:c6:ed:09:cd:c4:b6:c6:2e:8b:17:80:75:ab:71:
8e:03:6d:e0:1f:dd:5f:af:82:d5:5a:08:84:b2:d3:
f8:5f:09:ef:9c:01:ab:6d:2f:d8:6c:61:6f:17:26:
c0:72:d4:18:8b:82:be:de:9c:1c:fb:90:e0:a0:6b:
f0:09:b7:a9:d8:f1:e4:10:02:2c:13:81:4d:04:b7:
24:db:30:24:f7:04:8f:a0:13:0e:ac:a3:19:89:79:
f8:fd:88:29:20:7d:f7:d9:ba:de:b5:3e:ae:c4:28:
1e:d3:49:bb:3f:90:e5:c4:48:97:be:75:88:c6:55:
09:c3:a1:fc:e8:5e:24:b5:5a:8d:d1:6d:27:75:03:
74:61:78:f3:69:86:f8:a2:a1:7e:2d:87:41:1d:b2:
bf:af:1d:65:d3:05:48:7f:f6:72:46:bd:6d:d9:c2:
cf:37:b7:e6:36:fe:f8:f3:86:da:fd:58:6f:5d:b1:
eb:61:c0:30:61:40:00:86:23:15:b0:44:e6:86:a5:
26:a5:d3:f0:58:66:2b:41:2c:1d:3d:89:22:7e:9a:
e1:72:33:13:c1:8c:55:f6:90:7a:01:14:25:28:34:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:B6:C2:9F:FB:15:98:26:62:24:75:43:BB:0E:45:F1:0E:90:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB8BCCB4D2FC11EF9A9287B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8b:f0:1c:4b:c6:e1:c9:f3:64:89:84:73:64:61:60:18:65:
ce:42:98:61:c1:f6:d9:f8:40:77:fc:05:2d:f3:60:59:78:05:
bd:a3:7b:ea:12:b9:1e:e6:5a:90:b2:00:6f:36:5c:22:dd:24:
e4:9b:aa:fc:9a:30:18:52:f8:76:46:35:2f:ec:31:41:21:10:
7e:24:a0:bf:32:06:6b:5e:d2:e1:21:f4:06:72:96:5f:d5:17:
b7:b9:e1:f2:13:80:46:72:2f:db:47:f3:08:01:72:70:88:9c:
f5:9e:26:cb:3a:1b:35:41:22:55:d1:0c:f6:8e:3f:bb:2f:ae:
52:d0:8a:e5:6a:a5:e4:80:3e:29:5c:98:30:da:90:32:3c:47:
da:15:99:0f:1f:10:ae:9a:c5:d5:9d:65:d3:7c:2b:77:8d:c5:
07:51:bb:88:b7:95:a9:36:e5:12:ef:c8:25:ad:35:f1:06:3b:
22:ff:fd:eb:2a:6b:b7:52:e6:f9:2d:97:0f:ae:1e:95:9e:0f:
92:74:12:8b:05:08:d7:f8:a0:89:19:23:e1:dc:e5:18:9e:a6:
16:7c:3d:d9:a4:d3:91:79:14:e7:3c:45:3a:37:ad:db:78:cc:
3a:4f:9c:45:2d:1e:cc:3a:c5:75:e3:f1:c8:9f:ca:8b:4a:de:
e0:04:cf:ae
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQfRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDQ1NTE2WhcNMjYwMTAzMDQ1NTE2WjAYMRYw
FAYDVQQDEw02Nzg3M2ZiOC00ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA557K7MecAJlMh52oW1Y9qCm5KkL8VrATmrH+F36xxu0JzcS2xi6LF4B1
q3GOA23gH91fr4LVWgiEstP4XwnvnAGrbS/YbGFvFybActQYi4K+3pwc+5DgoGvw
Cbep2PHkEAIsE4FNBLck2zAk9wSPoBMOrKMZiXn4/YgpIH332bretT6uxCge00m7
P5DlxEiXvnWIxlUJw6H86F4ktVqN0W0ndQN0YXjzaYb4oqF+LYdBHbK/rx1l0wVI
f/ZyRr1t2cLPN7fmNv7484ba/VhvXbHrYcAwYUAAhiMVsETmhqUmpdPwWGYrQSwd
PYkifprhcjMTwYxV9pB6ARQlKDTweQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLGO
tsKf+xWYJmIkdUO7DkXxDpA4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjhCQ0NCNEQyRkMxMUVGOUE5Mjg3QjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP4TMA0GCSqGSIb3DQEBCwUA
A4IBAQAMi/AcS8bhyfNkiYRzZGFgGGXOQphhwfbZ+EB3/AUt82BZeAW9o3vqErke
5lqQsgBvNlwi3STkm6r8mjAYUvh2RjUv7DFBIRB+JKC/MgZrXtLhIfQGcpZf1Re3
ueHyE4BGci/bR/MIAXJwiJz1nibLOhs1QSJV0Qz2jj+7L65S0IrlaqXkgD4pXJgw
2pAyPEfaFZkPHxCumsXVnWXTfCt3jcUHUbuIt5WpNuUS78glrTXxBjsi//3rKmu3
Uub5LZcPrh6Vng+SdBKLBQjX+KCJGSPh3OUYnqYWfD3ZpNOReRTnPEU6N63beMw6
T5xFLR7MOsV14/HIn8qLSt7gBM+u
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:27 2025 by rpki-client