Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E54E9A8CC34011EFAAE19CBA762E951A.roa
File: E54E9A8CC34011EFAAE19CBA762E951A.roa (raw, json)
Hash identifier: ujDWqliuSzrrmDnp4jib+ux5FoL/XxoAwq8Opa387JM=
Subject key identifier: FB:B3:CB:96:9B:00:38:B4:12:58:A8:46:8A:3A:F8:5C:6E:D0:5C:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E54E9A8CC34011EFAAE19CBA762E951A.roa
Signing time: Thu 26 Dec 2024 04:21:36 +0000
ROA not before: Thu 26 Dec 2024 04:21:33 +0000
ROA not after: Fri 10 Dec 2027 04:21:33 +0000
asID: 17561
IP address blocks: 156.244.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60361 (0xebc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 04:21:33 2024 GMT
Not After : Dec 10 04:21:33 2027 GMT
Subject: CN=676cd9d0-21d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:f5:ff:e4:58:dd:2c:7a:98:f8:9e:2c:fc:
30:5f:27:68:57:35:f1:1d:f5:f6:ba:18:c4:31:06:
96:3f:66:4e:cc:75:9c:08:df:e4:84:be:9a:8e:ba:
ce:96:83:24:b5:13:bf:b3:08:4f:75:7f:7b:3a:80:
ce:7e:7d:1d:6b:72:91:1b:9a:f6:b2:ab:c4:6e:d6:
c1:e4:b7:fd:f6:21:e7:4e:8c:1d:52:b4:c1:8e:0b:
4e:da:ea:5b:6f:a7:9e:36:96:1f:8f:d2:04:cf:b4:
7a:d6:81:0c:70:ab:98:d6:a7:3e:38:c0:83:2b:3e:
4b:39:9c:c2:d8:ff:59:a4:89:40:f9:5d:2f:84:a8:
40:70:7b:4d:ac:bb:07:75:ae:31:63:d8:80:ac:96:
a3:d4:4c:78:fe:57:1d:5c:93:80:40:fd:86:ca:42:
87:7a:b1:ca:49:e8:e4:53:74:8c:73:8f:0d:ef:34:
81:c0:c1:b1:8c:7a:55:8b:a8:dd:9f:ed:fe:14:6b:
43:8c:5b:c8:35:92:45:b4:07:44:83:36:5a:9c:a3:
22:5e:a9:9c:c8:09:4d:5f:16:2d:39:59:81:f3:c1:
52:2f:68:b4:b7:b9:f1:50:a5:44:9c:26:92:3f:f8:
c9:74:99:3d:db:63:25:77:50:59:75:40:c2:f9:ac:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B3:CB:96:9B:00:38:B4:12:58:A8:46:8A:3A:F8:5C:6E:D0:5C:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E54E9A8CC34011EFAAE19CBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.224.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b9:45:4e:7b:61:69:9a:8f:49:6e:7d:50:8d:fe:2f:37:53:
29:12:9e:1a:f4:53:ee:d8:d2:8d:2d:58:31:ab:f7:73:33:66:
40:d2:9f:a4:59:3b:e5:63:79:bc:03:be:0a:e0:06:0c:47:ce:
f9:a0:c4:a4:d6:4d:83:b8:3d:c1:21:3c:6e:26:b7:3a:a7:23:
d0:3b:8f:24:14:8d:a5:39:3d:7a:92:a7:70:d5:2e:a1:ce:cd:
5b:74:e0:6e:0f:a5:b1:c2:f5:21:46:4d:2b:a1:56:1b:bd:76:
ad:31:d2:f9:b9:76:e8:fd:53:19:cf:6d:7a:11:11:d6:ab:f0:
b1:94:b4:9f:02:fa:a1:76:26:f4:c7:f6:74:6a:e1:5b:a6:ef:
77:f4:3b:22:8b:5e:4a:a4:50:63:1f:02:14:51:79:8e:53:87:
71:f6:58:bb:82:23:73:85:a8:3f:db:ce:2f:53:db:c4:5b:fe:
01:27:a3:c4:d8:82:1b:a4:6c:48:52:c6:4f:9f:e3:c0:81:e9:
28:8e:9b:c1:60:1d:25:29:c7:37:e5:3f:6d:30:0d:ea:77:de:
40:15:6f:26:dd:1c:20:3f:ba:8f:c2:ac:01:45:0d:b9:2e:1b:
47:4b:3f:c5:80:6d:6d:f4:17:5d:97:f4:a0:f0:b6:14:86:d0:
04:40:fe:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOvJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDQyMTMzWhcNMjcxMjEwMDQyMTMzWjAYMRYw
FAYDVQQDEw02NzZjZDlkMC0yMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyID1/+RY3Sx6mPieLPwwXydoVzXxHfX2uhjEMQaWP2ZOzHWcCN/khL6a
jrrOloMktRO/swhPdX97OoDOfn0da3KRG5r2sqvEbtbB5Lf99iHnTowdUrTBjgtO
2upbb6eeNpYfj9IEz7R61oEMcKuY1qc+OMCDKz5LOZzC2P9ZpIlA+V0vhKhAcHtN
rLsHda4xY9iArJaj1Ex4/lcdXJOAQP2GykKHerHKSejkU3SMc48N7zSBwMGxjHpV
i6jdn+3+FGtDjFvINZJFtAdEgzZanKMiXqmcyAlNXxYtOVmB88FSL2i0t7nxUKVE
nCaSP/jJdJk922Mld1BZdUDC+azcwQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPuz
y5abADi0ElioRoo6+Fxu0FwPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNTRFOUE4Q0MzNDAxMUVGQUFFMTlDQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPTgMA0GCSqGSIb3DQEBCwUA
A4IBAQA3uUVOe2Fpmo9Jbn1Qjf4vN1MpEp4a9FPu2NKNLVgxq/dzM2ZA0p+kWTvl
Y3m8A74K4AYMR875oMSk1k2DuD3BITxuJrc6pyPQO48kFI2lOT16kqdw1S6hzs1b
dOBuD6WxwvUhRk0roVYbvXatMdL5uXbo/VMZz216ERHWq/CxlLSfAvqhdib0x/Z0
auFbpu939Dsii15KpFBjHwIUUXmOU4dx9li7giNzhag/284vU9vEW/4BJ6PE2IIb
pGxIUsZPn+PAgekojpvBYB0lKcc35T9tMA3qd95AFW8m3RwgP7qPwqwBRQ25LhtH
Sz/FgG1t9Bddl/Sg8LYUhtAEQP4a
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:20 2025 by rpki-client on console.sobornost.net