Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEF14D56CD8511EFA299BF8A762E951A.roa
File: EEF14D56CD8511EFA299BF8A762E951A.roa (raw, json)
Hash identifier: RQhFgBIal1AiCTau6r2mFAXA6XPUBYktIDqgdp/c4uA=
Subject key identifier: 89:1B:9C:B9:BB:BD:78:CB:27:6B:42:CB:07:E3:CC:97:20:25:C1:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010029
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEF14D56CD8511EFA299BF8A762E951A.roa
Signing time: Wed 08 Jan 2025 06:00:59 +0000
ROA not before: Wed 08 Jan 2025 06:00:56 +0000
ROA not after: Mon 13 Dec 2027 06:00:56 +0000
asID: 17561
IP address blocks: 156.252.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65577 (0x10029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:00:56 2025 GMT
Not After : Dec 13 06:00:56 2027 GMT
Subject: CN=677e149b-ccc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:43:f5:6c:75:c8:24:5d:30:d8:96:07:b5:
25:d4:05:0a:5c:cd:a3:ca:56:85:0f:78:2e:d7:cd:
a9:d0:0d:4f:cf:0b:a2:3e:8a:33:6b:c2:04:32:6f:
4e:e6:c1:e5:25:fd:1c:2e:7b:e7:6f:14:91:47:18:
4a:30:31:49:e1:77:95:06:dc:07:97:b4:26:73:0a:
9d:f4:b9:01:2b:6a:ee:36:ef:51:61:88:0a:7a:e8:
22:45:40:ff:c0:ae:5c:fc:35:40:fa:26:fa:d2:d8:
96:6a:8a:95:21:cf:71:8b:35:3a:0d:15:33:b8:ca:
c0:13:c4:78:9b:23:ef:32:a4:ec:c9:63:09:f3:6e:
7f:d3:f7:c3:6e:2f:5e:fa:2d:f5:47:88:5d:d4:77:
31:92:14:ff:07:c4:88:78:76:51:b2:01:53:6f:44:
9a:0a:9e:59:58:7b:82:33:35:31:80:f9:18:84:58:
21:fe:93:69:2b:8e:54:f0:80:e7:26:bf:74:c0:f7:
9c:ed:3b:f7:85:d0:f7:ae:34:ef:81:f0:b2:9a:d5:
3c:47:54:12:05:07:24:c1:31:de:33:b4:51:39:1e:
19:c1:c1:95:2b:4a:d7:2e:b7:87:c3:25:ed:2b:bf:
79:aa:2a:48:b5:3d:53:2c:62:e6:bb:0f:28:3c:de:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:9C:B9:BB:BD:78:CB:27:6B:42:CB:07:E3:CC:97:20:25:C1:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EEF14D56CD8511EFA299BF8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.32.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0b:f1:2d:30:bc:95:39:19:7f:f8:5f:4c:08:97:de:ae:98:
9a:80:b5:e6:94:e1:a9:cb:7e:e9:f8:d7:9a:6f:3c:f0:35:07:
02:eb:4c:7a:2c:b9:f1:13:e0:47:4d:d8:38:a0:1a:68:41:2f:
54:b8:59:cc:fe:99:55:d0:d5:75:38:ce:50:3e:72:ea:ba:c3:
6a:c6:a8:db:96:f0:4d:7e:d7:6f:6f:18:44:77:21:f6:95:1b:
ee:3e:45:a0:5c:56:91:47:34:3e:54:bf:0d:e6:07:b1:b7:5c:
dd:51:30:3a:0a:9d:6e:30:02:c8:57:69:48:75:60:55:4b:d0:
54:a6:31:49:40:5a:7a:5e:99:5d:64:d9:e9:cf:ee:fe:c9:5c:
05:1e:a7:e2:a7:de:43:e2:16:fd:af:38:10:7f:e8:6f:02:34:
b9:19:da:17:4d:79:51:b2:a3:99:70:c7:98:f9:b6:00:bc:2c:
1d:a1:8c:74:ba:ab:62:5c:84:6d:44:2b:b6:b1:dd:42:16:43:
28:a7:cd:f9:2a:88:7b:d6:2d:54:5f:e8:91:d9:f9:ed:3d:72:
42:85:1b:d8:23:67:82:c7:6f:65:20:01:6e:9e:be:a9:2a:67:
92:60:9c:fb:b2:60:62:a0:79:6e:0c:83:4e:30:0c:ac:86:a8:
72:8b:ea:86
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQApMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDYwMDU2WhcNMjcxMjEzMDYwMDU2WjAYMRYw
FAYDVQQDEw02NzdlMTQ5Yi1jY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzFJD9Wx1yCRdMNiWB7Ul1AUKXM2jylaFD3gu182p0A1PzwuiPooza8IE
Mm9O5sHlJf0cLnvnbxSRRxhKMDFJ4XeVBtwHl7Qmcwqd9LkBK2ruNu9RYYgKeugi
RUD/wK5c/DVA+ib60tiWaoqVIc9xizU6DRUzuMrAE8R4myPvMqTsyWMJ825/0/fD
bi9e+i31R4hd1HcxkhT/B8SIeHZRsgFTb0SaCp5ZWHuCMzUxgPkYhFgh/pNpK45U
8IDnJr90wPec7Tv3hdD3rjTvgfCymtU8R1QSBQckwTHeM7RROR4ZwcGVK0rXLreH
wyXtK795qipItT1TLGLmuw8oPN6OTQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIkb
nLm7vXjLJ2tCywfjzJcgJcH7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRUYxNEQ1NkNEODUxMUVGQTI5OUJGOEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwgMA0GCSqGSIb3DQEBCwUA
A4IBAQA2C/EtMLyVORl/+F9MCJferpiagLXmlOGpy37p+NeabzzwNQcC60x6LLnx
E+BHTdg4oBpoQS9UuFnM/plV0NV1OM5QPnLqusNqxqjblvBNftdvbxhEdyH2lRvu
PkWgXFaRRzQ+VL8N5gext1zdUTA6Cp1uMALIV2lIdWBVS9BUpjFJQFp6XpldZNnp
z+7+yVwFHqfip95D4hb9rzgQf+hvAjS5GdoXTXlRsqOZcMeY+bYAvCwdoYx0uqti
XIRtRCu2sd1CFkMop835Koh71i1UX+iR2fntPXJChRvYI2eCx29lIAFunr6pKmeS
YJz7smBioHluDINOMAyshqhyi+qG
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:55 2025 by rpki-client