Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBCFA58CC97911EFABEE234C762E951A.roa
File: FBCFA58CC97911EFABEE234C762E951A.roa (raw, json)
Hash identifier: eTD1zCFyNATP39W+BmFHHzjR4ATlyYtRPTStmQ3SWnU=
Subject key identifier: 71:45:66:66:1C:28:2E:05:94:76:15:75:5A:A6:18:66:61:53:EF:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F50B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBCFA58CC97911EFABEE234C762E951A.roa
Signing time: Fri 03 Jan 2025 02:25:22 +0000
ROA not before: Fri 03 Jan 2025 02:25:19 +0000
ROA not after: Mon 13 Dec 2027 02:25:19 +0000
asID: 17561
IP address blocks: 156.227.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62731 (0xf50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:25:19 2025 GMT
Not After : Dec 13 02:25:19 2027 GMT
Subject: CN=67774a92-764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:27:87:30:80:01:cf:1c:19:8b:1d:48:d5:
4d:58:4c:17:9b:8d:e4:59:fc:44:72:fd:05:9b:bd:
55:c6:79:cb:50:ca:82:d3:72:a2:1a:42:ef:46:0b:
a0:7a:4a:65:00:77:5e:af:c1:80:6f:3c:af:07:05:
96:d9:c8:42:ab:dc:61:9f:67:0f:69:2d:5c:23:77:
5f:bd:35:e2:e3:3a:6d:2d:02:27:ff:45:f7:7f:63:
c5:6c:19:b9:1e:4c:91:34:7d:68:a2:eb:e2:ea:36:
25:0d:2a:92:4a:4d:16:39:c8:f7:90:9d:21:61:85:
5f:83:96:d5:1e:a9:70:8d:2f:00:98:05:b9:18:66:
35:6a:98:8b:5c:ac:89:86:bb:d3:bc:9c:9d:eb:b8:
ca:c0:3c:f4:c3:99:dc:f7:3a:87:54:65:bf:07:bc:
b1:63:e2:e2:b2:8f:c3:c8:51:cb:e7:e6:2f:1b:6b:
71:a8:7e:78:9e:94:75:36:a4:60:87:2c:5f:f5:97:
43:e7:c2:14:16:fd:e4:ea:67:b7:cb:22:ee:eb:83:
d1:db:d5:e9:fc:26:23:63:4c:d9:7f:e3:3e:c2:9f:
74:e5:86:af:35:5f:e5:9a:b0:47:5c:f0:e6:05:ee:
8f:d7:85:04:da:73:9e:42:6d:fa:fe:95:5b:d8:22:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:66:66:1C:28:2E:05:94:76:15:75:5A:A6:18:66:61:53:EF:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBCFA58CC97911EFABEE234C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:60:64:9a:9a:9e:d1:64:e2:d5:d7:5a:01:41:e8:b0:f7:9d:
a3:e3:50:ef:a4:40:3d:64:7d:73:0d:86:4a:b8:47:4f:28:43:
21:bc:bf:35:ab:d0:1b:68:85:64:f1:5a:7c:c8:fd:78:d6:2d:
74:1f:08:01:1e:90:5a:d0:ab:d9:a2:20:39:5f:1c:fb:54:22:
83:65:7b:b2:0e:3a:97:65:29:4a:28:a0:cd:98:e3:c0:8b:ef:
b9:0b:2b:fe:6b:86:d6:54:fc:43:81:02:4d:d5:f8:51:c3:dd:
03:53:16:2f:37:3b:db:25:1b:40:20:54:bb:ad:cf:49:16:20:
9a:6c:94:ff:f2:13:31:f9:97:7f:10:17:cf:42:d0:d3:62:3a:
c9:c6:f6:3c:9b:ec:0b:87:b9:42:14:38:6a:35:90:90:38:f1:
5f:d0:df:70:c1:d0:77:67:ad:6a:b2:8a:d2:b4:51:41:ff:f8:
ea:0d:35:5f:b9:14:1c:4c:ca:aa:9e:44:9e:1e:df:d6:06:2b:
d9:3d:cd:62:d3:f2:cf:aa:7a:ea:b4:72:36:cc:d2:3d:93:4f:
c2:41:41:39:31:70:bd:a8:2e:1b:90:44:07:08:c5:c1:f3:06:
4b:b6:7a:2d:3b:ae:ef:53:24:59:85:6b:f0:25:09:c2:98:95:
1e:3a:9b:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPULMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDIyNTE5WhcNMjcxMjEzMDIyNTE5WjAYMRYw
FAYDVQQDEw02Nzc3NGE5Mi03NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3F0nhzCAAc8cGYsdSNVNWEwXm43kWfxEcv0Fm71VxnnLUMqC03KiGkLv
RgugekplAHder8GAbzyvBwWW2chCq9xhn2cPaS1cI3dfvTXi4zptLQIn/0X3f2PF
bBm5HkyRNH1oouvi6jYlDSqSSk0WOcj3kJ0hYYVfg5bVHqlwjS8AmAW5GGY1apiL
XKyJhrvTvJyd67jKwDz0w5nc9zqHVGW/B7yxY+Liso/DyFHL5+YvG2txqH54npR1
NqRghyxf9ZdD58IUFv3k6me3yyLu64PR29Xp/CYjY0zZf+M+wp905YavNV/lmrBH
XPDmBe6P14UE2nOeQm36/pVb2CKOeQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHFF
ZmYcKC4FlHYVdVqmGGZhU+9zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQkNGQTU4Q0M5NzkxMUVGQUJFRTIzNEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnON3MA0GCSqGSIb3DQEBCwUA
A4IBAQBtYGSamp7RZOLV11oBQeiw952j41DvpEA9ZH1zDYZKuEdPKEMhvL81q9Ab
aIVk8Vp8yP141i10HwgBHpBa0KvZoiA5Xxz7VCKDZXuyDjqXZSlKKKDNmOPAi++5
Cyv+a4bWVPxDgQJN1fhRw90DUxYvNzvbJRtAIFS7rc9JFiCabJT/8hMx+Zd/EBfP
QtDTYjrJxvY8m+wLh7lCFDhqNZCQOPFf0N9wwdB3Z61qsorStFFB//jqDTVfuRQc
TMqqnkSeHt/WBivZPc1i0/LPqnrqtHI2zNI9k0/CQUE5MXC9qC4bkEQHCMXB8wZL
tnotO67vUyRZhWvwJQnCmJUeOpsN
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:23 2025 by rpki-client