Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE10563CCCE611EFB8D2F98C762E951A.roa
File: FE10563CCCE611EFB8D2F98C762E951A.roa (raw, json)
Hash identifier: H7ZolQPDCyjpgSCV1itVQ7XE07uK2URTM7bH+BjTlzM=
Subject key identifier: B7:ED:F8:FC:F6:D4:C9:83:62:17:F8:7D:2C:6E:A6:5F:53:B1:17:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE10563CCCE611EFB8D2F98C762E951A.roa
Signing time: Tue 07 Jan 2025 11:03:15 +0000
ROA not before: Tue 07 Jan 2025 11:03:11 +0000
ROA not after: Mon 13 Dec 2027 11:03:11 +0000
asID: 17561
IP address blocks: 156.235.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64471 (0xfbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:03:11 2025 GMT
Not After : Dec 13 11:03:11 2027 GMT
Subject: CN=677d09f3-eeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:06:0d:d2:c2:c0:fc:7f:ad:ed:0c:53:b6:
fd:61:dc:c0:b3:15:20:3b:4c:54:30:c1:02:ef:ec:
e4:76:43:b0:f5:c9:34:00:8e:9f:4a:35:eb:7c:38:
ae:19:3d:83:bc:2d:9b:58:c0:6d:e7:f6:d6:f1:73:
5d:ba:1d:a9:af:7e:2b:12:37:08:bb:91:2a:58:60:
0c:3d:e5:86:58:86:3d:76:3c:78:c4:08:e3:e2:7c:
bc:07:f6:74:cf:81:81:31:e3:25:9c:47:26:90:1a:
26:b1:d2:bc:8d:90:54:ba:7c:09:1c:f5:ee:8c:0c:
12:76:ed:df:98:2d:64:55:c4:10:d8:43:cd:a7:e9:
eb:08:ab:f9:d6:77:62:7e:96:1c:09:e3:5f:44:0f:
3b:5e:9f:a3:03:59:92:ea:f4:a7:6f:c1:d8:2a:72:
d5:2b:ee:52:4f:d8:7c:f0:76:14:f0:d9:87:a3:78:
4b:46:34:d9:59:51:b2:26:74:ee:52:36:07:62:39:
59:a9:ba:cf:9f:7b:a2:08:a1:4a:aa:a5:3a:71:98:
bf:96:31:ff:e4:73:bd:f9:b5:b6:49:1a:ad:c7:00:
9b:8d:fd:14:6e:67:33:e2:bf:cb:02:ef:53:7c:69:
d0:d7:93:9f:ab:31:76:7e:81:7a:bd:a0:6a:ba:b2:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:F8:FC:F6:D4:C9:83:62:17:F8:7D:2C:6E:A6:5F:53:B1:17:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE10563CCCE611EFB8D2F98C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.55.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4e:4c:6d:db:59:8e:6e:26:18:1b:09:71:fe:51:4c:1b:3f:
6e:7e:5f:8f:dd:11:15:73:41:c8:6c:70:00:27:e7:fe:ad:dc:
d0:52:9b:17:5c:c2:b0:14:eb:9a:e2:fb:09:ea:13:65:63:54:
9c:de:30:dd:ab:b8:67:0d:c8:68:22:be:2d:76:b7:cb:a7:e2:
f9:d1:ab:63:9a:22:40:a3:b8:fd:10:db:19:e5:ef:54:55:f2:
8b:91:a4:6d:6f:80:46:db:a8:23:14:3f:f9:04:32:a5:ec:6e:
80:ea:7f:a2:1b:32:44:bf:f5:ed:89:50:bb:42:7c:14:fc:b5:
57:8d:24:ea:cc:24:c0:53:fe:fe:e4:8f:fc:cd:5c:93:fd:ef:
92:b3:46:8e:3f:c8:6d:95:ca:23:71:ae:93:60:c3:d4:c6:da:
52:9f:fd:28:38:3f:c5:60:ca:a5:5b:c7:ce:3d:26:cd:c4:59:
56:17:40:df:17:4e:39:5f:f8:53:04:d6:e6:83:37:43:41:a7:
17:35:dd:85:27:17:ee:ac:97:28:0d:61:4b:f2:4a:c3:ca:f7:
2c:16:ee:31:6a:b6:2b:22:a2:91:5a:af:72:97:f3:8c:6f:1f:
a6:1c:29:e2:ed:5f:15:51:16:18:b6:2c:77:7f:12:9b:b3:d1:
99:b9:b0:cc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPvXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTEwMzExWhcNMjcxMjEzMTEwMzExWjAYMRYw
FAYDVQQDEw02NzdkMDlmMy1lZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0E8GDdLCwPx/re0MU7b9YdzAsxUgO0xUMMEC7+zkdkOw9ck0AI6fSjXr
fDiuGT2DvC2bWMBt5/bW8XNduh2pr34rEjcIu5EqWGAMPeWGWIY9djx4xAjj4ny8
B/Z0z4GBMeMlnEcmkBomsdK8jZBUunwJHPXujAwSdu3fmC1kVcQQ2EPNp+nrCKv5
1ndifpYcCeNfRA87Xp+jA1mS6vSnb8HYKnLVK+5ST9h88HYU8NmHo3hLRjTZWVGy
JnTuUjYHYjlZqbrPn3uiCKFKqqU6cZi/ljH/5HO9+bW2SRqtxwCbjf0Ubmcz4r/L
Au9TfGnQ15OfqzF2foF6vaBqurI1wwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLft
+Pz21MmDYhf4fSxupl9TsRfZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRTEwNTYzQ0NDRTYxMUVGQjhEMkY5OEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOs3MA0GCSqGSIb3DQEBCwUA
A4IBAQAwTkxt21mObiYYGwlx/lFMGz9ufl+P3REVc0HIbHAAJ+f+rdzQUpsXXMKw
FOua4vsJ6hNlY1Sc3jDdq7hnDchoIr4tdrfLp+L50atjmiJAo7j9ENsZ5e9UVfKL
kaRtb4BG26gjFD/5BDKl7G6A6n+iGzJEv/XtiVC7QnwU/LVXjSTqzCTAU/7+5I/8
zVyT/e+Ss0aOP8htlcojca6TYMPUxtpSn/0oOD/FYMqlW8fOPSbNxFlWF0DfF045
X/hTBNbmgzdDQacXNd2FJxfurJcoDWFL8krDyvcsFu4xarYrIqKRWq9yl/OMbx+m
HCni7V8VURYYtix3fxKbs9GZubDM
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:29 2025 by rpki-client