Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1679A2EC27A11EFBEEE7254762E951A.roa
File: F1679A2EC27A11EFBEEE7254762E951A.roa (raw, json)
Hash identifier: 5FVmgp/3xb5B3rskgpf8Viu/NbpyG2uCbYVYAhyKlJI=
Subject key identifier: 8F:39:BC:32:78:87:73:DE:1F:0A:A4:BD:22:F7:AC:B9:D5:DA:B0:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E89D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1679A2EC27A11EFBEEE7254762E951A.roa
Signing time: Wed 25 Dec 2024 04:44:36 +0000
ROA not before: Wed 25 Dec 2024 04:44:33 +0000
ROA not after: Wed 10 Dec 2025 04:44:33 +0000
asID: 984
IP address blocks: 156.227.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59549 (0xe89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:44:33 2024 GMT
Not After : Dec 10 04:44:33 2025 GMT
Subject: CN=676b8db4-833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:b7:db:71:53:12:b5:db:2e:35:8e:f8:a0:
a9:fa:7b:96:89:5f:a9:42:08:2f:79:f6:b0:5e:31:
51:ec:88:ae:6c:9e:3c:17:99:3e:e1:ba:4a:71:74:
c5:4d:03:8b:96:fc:71:7d:45:3e:c0:31:3f:ce:e7:
c3:61:86:b6:62:fc:19:1f:fe:c5:cb:09:69:5b:76:
f6:0a:1b:15:b2:1d:b5:12:60:ef:f4:2e:af:9c:f9:
99:1e:27:20:60:6a:c9:d4:7a:e5:6e:5a:c8:09:fe:
71:6b:96:61:28:b5:37:b4:b1:a5:42:a7:f8:29:c9:
37:de:9a:6c:a3:1e:a2:a5:1e:4b:72:fd:6b:96:5c:
2b:e9:b3:e7:2c:5b:dd:ce:92:c5:59:1f:7e:57:2a:
19:75:39:55:d2:00:b5:b3:87:c3:ef:35:19:14:89:
6b:36:29:13:6e:3a:f1:bb:ea:35:12:72:04:51:ab:
11:a9:15:02:d8:a6:02:74:26:24:f3:83:3e:17:b1:
36:0d:86:30:cf:53:0c:a6:c7:c4:f5:79:1a:9f:68:
5d:89:ab:df:d1:93:28:88:9f:a1:d3:dc:65:c2:59:
06:65:e0:2a:e1:a6:a0:c1:12:d7:bc:2c:7a:55:c8:
88:4c:4f:82:9e:3d:0e:8d:ff:3a:57:bd:13:0d:96:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:39:BC:32:78:87:73:DE:1F:0A:A4:BD:22:F7:AC:B9:D5:DA:B0:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1679A2EC27A11EFBEEE7254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/24
Signature Algorithm: sha256WithRSAEncryption
af:db:fc:14:b8:b4:76:d6:9f:b9:0b:7c:88:c9:cb:94:1f:5e:
d5:c9:2f:dd:cf:d8:87:1b:ce:e2:86:65:ce:28:9d:57:fa:f1:
0d:a4:60:e5:b8:6c:e0:33:61:6b:d9:20:9d:31:64:cf:bd:04:
6e:e9:5a:f1:1a:ce:6c:ea:c7:e7:71:16:1e:5c:b5:4f:b8:47:
bd:17:1f:90:eb:54:e7:dc:54:cc:e5:bf:46:a5:2d:ff:5a:7f:
0b:32:1a:02:27:f3:e7:3b:49:cb:1c:fe:5f:df:27:e9:70:41:
d4:29:da:90:c2:40:e0:38:1c:85:53:b7:c7:a2:2a:30:c3:5d:
49:06:6b:48:eb:59:4d:1d:01:e2:a2:00:16:5a:2e:32:4b:24:
f8:c0:07:d0:1a:85:3a:e9:cb:9a:9a:0d:cb:e5:8b:be:56:f6:
f7:73:25:d5:40:3b:4f:e5:8e:78:f9:29:50:0d:21:c9:d3:1e:
52:54:8b:ac:d0:cd:e6:21:0a:9c:9f:dc:1f:19:3f:7b:1e:2b:
07:de:28:33:0c:2c:b8:8e:8b:c3:e5:e2:95:c6:90:60:fc:fd:
75:05:f4:62:11:8b:71:bb:0e:23:60:57:7c:d2:01:0b:64:cd:
d4:ab:31:b8:57:56:28:0a:c5:1c:21:a9:36:2f:38:18:c2:62:
2a:3c:0c:56
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOidMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDQ0NDMzWhcNMjUxMjEwMDQ0NDMzWjAYMRYw
FAYDVQQDEw02NzZiOGRiNC04MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0uC323FTErXbLjWO+KCp+nuWiV+pQggvefawXjFR7IiubJ48F5k+4bpK
cXTFTQOLlvxxfUU+wDE/zufDYYa2YvwZH/7FywlpW3b2ChsVsh21EmDv9C6vnPmZ
HicgYGrJ1HrlblrICf5xa5ZhKLU3tLGlQqf4Kck33ppsox6ipR5Lcv1rllwr6bPn
LFvdzpLFWR9+VyoZdTlV0gC1s4fD7zUZFIlrNikTbjrxu+o1EnIEUasRqRUC2KYC
dCYk84M+F7E2DYYwz1MMpsfE9Xkan2hdiavf0ZMoiJ+h09xlwlkGZeAq4aagwRLX
vCx6VciITE+Cnj0Ojf86V70TDZZClQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI85
vDJ4h3PeHwqkvSL3rLnV2rBuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMTY3OUEyRUMyN0ExMUVGQkVFRTcyNTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOOgMA0GCSqGSIb3DQEBCwUA
A4IBAQCv2/wUuLR21p+5C3yIycuUH17VyS/dz9iHG87ihmXOKJ1X+vENpGDluGzg
M2Fr2SCdMWTPvQRu6VrxGs5s6sfncRYeXLVPuEe9Fx+Q61Tn3FTM5b9GpS3/Wn8L
MhoCJ/PnO0nLHP5f3yfpcEHUKdqQwkDgOByFU7fHoioww11JBmtI61lNHQHiogAW
Wi4ySyT4wAfQGoU66cuamg3L5Yu+Vvb3cyXVQDtP5Y54+SlQDSHJ0x5SVIus0M3m
IQqcn9wfGT97HisH3igzDCy4jovD5eKVxpBg/P11BfRiEYtxuw4jYFd80gELZM3U
qzG4V1YoCsUcIak2LzgYwmIqPAxW
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:44 2025 by rpki-client