Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA456D52CD0A11EF83864D6E762E951A.roa
File: FA456D52CD0A11EF83864D6E762E951A.roa (raw, json)
Hash identifier: fvNtmHa0KT87B2khcPWhy8VSBvm/fMgc4E+bQpZTmwg=
Subject key identifier: 8F:D9:4F:81:6B:FA:FF:90:C4:44:C2:A2:6F:5D:13:8D:F8:0B:5A:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA456D52CD0A11EF83864D6E762E951A.roa
Signing time: Tue 07 Jan 2025 15:20:50 +0000
ROA not before: Tue 07 Jan 2025 15:20:47 +0000
ROA not after: Mon 13 Dec 2027 15:20:47 +0000
asID: 17561
IP address blocks: 156.239.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64705 (0xfcc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:20:47 2025 GMT
Not After : Dec 13 15:20:47 2027 GMT
Subject: CN=677d4652-de7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:14:7c:7a:b9:4b:94:10:11:a0:b5:9a:4e:
fa:96:51:a6:09:f5:30:08:b1:7b:88:b5:0e:02:ec:
c7:b4:b0:fa:70:dc:66:3a:02:6e:fa:1a:1c:dc:96:
dc:c8:d3:30:dc:af:86:16:e5:1c:1b:ed:6e:2f:3e:
cd:89:85:22:e2:93:e0:f5:22:4c:04:e1:96:53:15:
bf:a6:33:fd:53:64:02:5c:b2:dc:eb:30:d6:82:c7:
34:63:29:4a:2a:f4:1d:6a:90:04:27:ea:7c:75:d6:
e8:c2:0c:09:01:32:24:9b:49:ac:8d:71:e6:1f:13:
ca:f5:19:aa:cf:07:5b:7a:5d:bb:34:ed:c9:79:a3:
e1:b8:54:3f:42:f5:ed:24:7b:c3:28:ec:df:34:1a:
29:9c:52:0f:5c:cd:63:45:1f:7b:4b:4e:22:b7:80:
2d:20:e7:53:fa:ac:47:09:c5:43:cd:d2:ae:e9:90:
c5:01:9a:7c:2d:de:aa:99:2c:de:f6:93:fe:29:68:
74:b0:77:bb:fc:67:2d:25:0e:90:e3:d5:ef:67:41:
4d:45:5b:ca:b9:fb:d4:35:80:54:ac:a0:4b:82:74:
5e:28:ae:36:8d:b8:35:68:99:2a:23:05:4b:1f:c8:
c4:3f:ff:bf:f0:f5:97:41:4f:d5:be:0f:fe:b7:27:
8e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:4F:81:6B:FA:FF:90:C4:44:C2:A2:6F:5D:13:8D:F8:0B:5A:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA456D52CD0A11EF83864D6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:85:26:5b:65:32:37:6b:f0:d4:00:6e:19:32:4c:ed:b0:4f:
b3:52:8a:ad:eb:16:04:1a:8e:1e:31:11:4f:e2:8e:69:7f:b9:
89:c6:d8:c6:6a:d9:92:3b:cf:fc:05:7b:5b:35:70:3b:99:d1:
03:b3:95:9b:24:48:2e:eb:bd:90:b5:8b:7a:f7:51:63:6e:7b:
18:dd:1c:bd:4e:ff:28:f2:6d:d0:51:f7:12:35:32:ae:53:49:
62:ba:f6:6a:af:7e:e8:c7:cc:94:e7:c6:1d:67:2e:8f:20:e9:
a7:91:89:1c:25:4a:12:66:a1:88:09:44:33:21:6a:ff:97:68:
03:38:2d:37:0e:0b:2a:d2:18:29:6c:0c:b1:9d:fd:9c:d4:78:
12:87:75:1c:5e:2e:5d:e4:53:45:de:b0:cd:9b:dd:02:7d:89:
00:ad:8c:a8:cd:5b:02:a3:c5:63:ea:3e:25:48:d7:fe:67:c4:
6d:7f:2a:75:6e:19:a0:95:cc:3d:ca:5e:1c:b1:43:ce:ad:f9:
b5:67:97:af:99:4e:e2:b8:f8:1c:68:9c:72:26:c9:b6:90:36:
e9:bf:c8:93:69:86:a7:d4:94:be:a9:43:53:f8:54:bb:3c:da:
70:31:51:fb:07:d2:a1:fe:0e:f1:f7:07:32:66:73:0c:e8:fe:
c8:c9:87:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPzBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTUyMDQ3WhcNMjcxMjEzMTUyMDQ3WjAYMRYw
FAYDVQQDEw02NzdkNDY1Mi1kZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1/4UfHq5S5QQEaC1mk76llGmCfUwCLF7iLUOAuzHtLD6cNxmOgJu+hoc
3JbcyNMw3K+GFuUcG+1uLz7NiYUi4pPg9SJMBOGWUxW/pjP9U2QCXLLc6zDWgsc0
YylKKvQdapAEJ+p8ddbowgwJATIkm0msjXHmHxPK9Rmqzwdbel27NO3JeaPhuFQ/
QvXtJHvDKOzfNBopnFIPXM1jRR97S04it4AtIOdT+qxHCcVDzdKu6ZDFAZp8Ld6q
mSze9pP+KWh0sHe7/GctJQ6Q49XvZ0FNRVvKufvUNYBUrKBLgnReKK42jbg1aJkq
IwVLH8jEP/+/8PWXQU/Vvg/+tyeOqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI/Z
T4Fr+v+QxETCom9dE434C1okMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQTQ1NkQ1MkNEMEExMUVGODM4NjRENkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO8yMA0GCSqGSIb3DQEBCwUA
A4IBAQBqhSZbZTI3a/DUAG4ZMkztsE+zUoqt6xYEGo4eMRFP4o5pf7mJxtjGatmS
O8/8BXtbNXA7mdEDs5WbJEgu672QtYt691FjbnsY3Ry9Tv8o8m3QUfcSNTKuU0li
uvZqr37ox8yU58YdZy6PIOmnkYkcJUoSZqGICUQzIWr/l2gDOC03Dgsq0hgpbAyx
nf2c1HgSh3UcXi5d5FNF3rDNm90CfYkArYyozVsCo8Vj6j4lSNf+Z8Rtfyp1bhmg
lcw9yl4csUPOrfm1Z5evmU7iuPgcaJxyJsm2kDbpv8iTaYan1JS+qUNT+FS7PNpw
MVH7B9Kh/g7x9wcyZnMM6P7IyYd4
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:15 2025 by rpki-client