Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEE4E4D0CD4E11EF8C35EC98762E951A.roa
File: EEE4E4D0CD4E11EF8C35EC98762E951A.roa (raw, json)
Hash identifier: EQqeJeaocxXE/LURZ+XrJCINk1m0xgEGKjuHGB8yHdU=
Subject key identifier: 9B:C0:29:8C:B0:7C:76:12:94:C0:02:16:8E:76:66:FF:97:73:6C:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FEDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEE4E4D0CD4E11EF8C35EC98762E951A.roa
Signing time: Tue 07 Jan 2025 23:27:17 +0000
ROA not before: Tue 07 Jan 2025 23:27:13 +0000
ROA not after: Mon 13 Dec 2027 23:27:13 +0000
asID: 17561
IP address blocks: 156.247.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65245 (0xfedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 23:27:13 2025 GMT
Not After : Dec 13 23:27:13 2027 GMT
Subject: CN=677db855-3603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:91:1b:11:bb:32:61:54:e6:15:b1:c5:2b:
bf:fe:2a:ae:ed:7f:0b:7a:ac:b7:2d:90:03:54:b6:
0a:a2:5c:5f:2a:91:a2:14:99:27:f5:80:58:a4:69:
9e:f1:d9:80:b4:04:08:ed:fb:c7:43:bf:71:25:14:
57:f6:9b:eb:17:80:da:4e:c4:0b:76:4c:af:a3:fe:
8e:ac:50:c8:e3:59:02:03:3b:15:07:da:81:5b:5e:
ab:84:b7:a4:72:25:aa:41:a9:84:cf:7d:20:d9:76:
8e:3e:7b:ca:7b:35:39:69:fc:eb:43:b4:0d:00:dd:
d0:fd:96:d1:8e:df:13:db:f4:eb:28:76:db:61:66:
45:d4:77:cc:7e:56:df:8b:42:91:53:f7:4e:de:ed:
58:39:64:f0:8a:05:59:05:89:9b:ce:77:9b:62:36:
41:14:d0:93:14:ce:8e:cf:45:64:a6:d0:33:8c:ee:
c8:ec:63:18:fd:c0:63:2b:cf:4b:c0:cd:b8:71:48:
b0:34:52:09:bb:ca:80:9a:2d:05:a6:cd:09:cd:47:
11:2d:c5:64:a4:87:e4:6a:3f:f0:2a:ff:64:14:fb:
c9:1f:28:02:8c:93:fc:16:71:65:5a:de:1e:f1:8d:
01:da:0c:94:9a:0e:b9:1a:39:36:99:9d:47:08:52:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:29:8C:B0:7C:76:12:94:C0:02:16:8E:76:66:FF:97:73:6C:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEE4E4D0CD4E11EF8C35EC98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.22.0/24
Signature Algorithm: sha256WithRSAEncryption
73:14:18:4f:f4:12:c7:03:0d:4a:13:cc:78:6b:35:d1:b7:66:
b7:1d:27:80:b5:a7:9b:c8:d3:91:84:d1:31:44:3e:f9:4f:31:
b8:07:21:b6:a2:25:55:1d:a6:68:48:05:b0:91:48:82:ed:ea:
c0:31:16:cc:96:c8:55:bc:9b:34:6b:1d:78:b6:5e:a0:7d:cd:
b7:6a:2f:0c:d4:1a:7e:4d:4a:77:cf:b8:c4:86:80:0b:a3:03:
f4:34:d2:e9:1d:ce:4a:cf:16:5b:6b:66:1d:0c:40:70:07:8f:
35:64:84:2d:7e:96:fd:0a:65:11:1a:fb:7a:53:ab:88:66:ff:
0d:99:7a:d4:0d:e3:52:5f:1b:b8:cd:47:71:50:4b:27:6e:b2:
df:ed:89:eb:fa:7f:30:f9:9b:3f:0a:ba:45:42:8a:75:d2:78:
03:60:a9:92:9d:37:12:87:ee:01:25:e5:75:14:97:f7:51:a0:
fd:f2:ae:0e:dd:2c:b8:3e:9e:97:ce:33:b4:2d:ef:d0:ec:4d:
1e:92:b1:c8:a7:8f:65:f1:4c:cb:8f:54:f3:7a:d0:80:62:04:
84:ad:43:f7:95:b4:88:21:31:3a:13:99:20:8f:94:28:29:66:
d2:ad:0e:9a:e8:db:53:ad:d0:80:69:c3:17:e0:e2:ba:04:be:
62:9b:35:29
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP7dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjMyNzEzWhcNMjcxMjEzMjMyNzEzWjAYMRYw
FAYDVQQDEw02NzdkYjg1NS0zNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA032RGxG7MmFU5hWxxSu//iqu7X8Leqy3LZADVLYKolxfKpGiFJkn9YBY
pGme8dmAtAQI7fvHQ79xJRRX9pvrF4DaTsQLdkyvo/6OrFDI41kCAzsVB9qBW16r
hLekciWqQamEz30g2XaOPnvKezU5afzrQ7QNAN3Q/ZbRjt8T2/TrKHbbYWZF1HfM
flbfi0KRU/dO3u1YOWTwigVZBYmbznebYjZBFNCTFM6Oz0VkptAzjO7I7GMY/cBj
K89LwM24cUiwNFIJu8qAmi0Fps0JzUcRLcVkpIfkaj/wKv9kFPvJHygCjJP8FnFl
Wt4e8Y0B2gyUmg65Gjk2mZ1HCFIUmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJvA
KYywfHYSlMACFo52Zv+Xc2xrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRUU0RTREMENENEUxMUVGOEMzNUVDOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcWMA0GCSqGSIb3DQEBCwUA
A4IBAQBzFBhP9BLHAw1KE8x4azXRt2a3HSeAtaebyNORhNExRD75TzG4ByG2oiVV
HaZoSAWwkUiC7erAMRbMlshVvJs0ax14tl6gfc23ai8M1Bp+TUp3z7jEhoALowP0
NNLpHc5KzxZba2YdDEBwB481ZIQtfpb9CmURGvt6U6uIZv8NmXrUDeNSXxu4zUdx
UEsnbrLf7Ynr+n8w+Zs/CrpFQop10ngDYKmSnTcSh+4BJeV1FJf3UaD98q4O3Sy4
Pp6XzjO0Le/Q7E0ekrHIp49l8UzLj1TzetCAYgSErUP3lbSIITE6E5kgj5QoKWbS
rQ6a6NtTrdCAacMX4OK6BL5imzUp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:26 2025 by rpki-client