Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07119D32C98011EFA870A877762E951A.roa
File: 07119D32C98011EFA870A877762E951A.roa (raw, json)
Hash identifier: 56c0uhr3atA6UnH9zGKs2/7bYAs5Ej1qdfweQJc9MvA=
Subject key identifier: DF:0D:BB:A2:6D:10:E1:32:36:71:8A:43:9B:11:9F:57:7F:55:76:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F545
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07119D32C98011EFA870A877762E951A.roa
Signing time: Fri 03 Jan 2025 03:08:38 +0000
ROA not before: Fri 03 Jan 2025 03:08:35 +0000
ROA not after: Sat 13 Dec 2025 03:08:35 +0000
asID: 984
IP address blocks: 156.229.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62789 (0xf545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 03:08:35 2025 GMT
Not After : Dec 13 03:08:35 2025 GMT
Subject: CN=677754b6-84cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:b2:b6:81:58:7b:81:11:6a:5c:6a:c2:31:
69:52:5c:3b:dd:d0:52:c9:cd:3a:3f:d8:8a:ee:7f:
73:dd:c4:0a:5e:4d:02:45:dd:ad:9f:5f:7d:d7:79:
ef:1e:5b:a6:a2:32:c6:41:50:aa:68:80:3d:05:8c:
33:c3:fe:a7:11:e3:16:50:5a:a9:ae:e6:d1:94:27:
39:8f:d0:7f:c0:a8:3a:97:90:4c:33:b8:18:f4:1b:
f5:73:4a:79:3e:39:bf:12:a5:f9:1a:05:57:6e:30:
69:4d:e1:7e:4c:d9:c8:b9:be:fa:0e:2f:c7:75:c5:
2c:42:b7:90:39:98:a3:a3:59:92:1f:4d:67:07:06:
c4:58:51:3c:08:ba:f7:ad:2c:74:78:f8:6d:fb:f7:
60:7d:ff:76:3e:56:11:6b:25:1f:29:7f:0d:ba:f9:
71:82:b0:a2:ea:9e:a1:6a:ce:57:4a:5d:b4:d3:d9:
be:0d:1a:0b:34:e1:33:f4:b2:cf:41:43:f3:42:f7:
9a:3a:b3:23:ed:4b:99:b9:96:9e:75:f7:8c:7c:df:
5d:26:46:53:68:21:56:72:11:c2:76:a0:43:95:9c:
2b:c6:11:9c:76:2b:e3:80:e8:40:8e:f9:32:c4:1e:
59:a4:13:6f:c0:eb:ea:4a:45:1e:7b:5a:b3:58:8b:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:BB:A2:6D:10:E1:32:36:71:8A:43:9B:11:9F:57:7F:55:76:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07119D32C98011EFA870A877762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.241.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2b:f4:6f:07:39:4e:63:fc:1f:36:44:7b:3d:b2:92:cd:8b:
6f:17:ce:12:98:4b:16:2a:8d:bf:f9:5b:5b:52:a8:1a:c1:1e:
4e:3e:c9:97:3f:0a:16:37:45:f9:47:a3:18:4a:7a:d5:38:7c:
22:d4:0e:55:26:ab:f1:34:d4:32:9b:2b:21:92:89:cb:ed:f7:
fc:71:9f:81:2b:96:5e:8a:0a:71:27:82:00:da:8a:d2:22:f4:
bb:ce:94:e4:18:b7:dd:cf:c2:f5:9e:a3:16:99:dd:f6:e8:e9:
52:5f:98:0e:1e:75:82:1b:11:0c:80:ac:46:5e:10:9d:9b:78:
c5:d7:8a:f9:fc:4b:d2:22:1a:df:22:9c:ae:f4:8c:43:c0:86:
8e:44:bf:b4:95:8a:62:9b:df:43:35:a5:86:b4:74:48:8d:ce:
f0:46:ed:a0:18:67:45:70:36:ef:1e:cd:41:dc:04:db:7e:1e:
0a:fd:08:03:c6:b1:a0:cf:38:0a:5b:28:5b:1a:46:0f:05:54:
6d:8f:3d:c5:24:f0:cb:c3:03:97:2d:6d:63:bc:e2:04:98:ae:
35:4a:fa:18:bf:90:3f:62:8f:e0:3a:15:99:06:ab:e4:9b:83:
26:5d:9e:ad:26:37:ef:b4:62:fd:30:35:1b:dc:a3:c3:a4:13:
70:2b:0b:78
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPVFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDMwODM1WhcNMjUxMjEzMDMwODM1WjAYMRYw
FAYDVQQDEw02Nzc3NTRiNi04NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuB6ytoFYe4ERalxqwjFpUlw73dBSyc06P9iK7n9z3cQKXk0CRd2tn199
13nvHlumojLGQVCqaIA9BYwzw/6nEeMWUFqprubRlCc5j9B/wKg6l5BMM7gY9Bv1
c0p5Pjm/EqX5GgVXbjBpTeF+TNnIub76Di/HdcUsQreQOZijo1mSH01nBwbEWFE8
CLr3rSx0ePht+/dgff92PlYRayUfKX8NuvlxgrCi6p6has5XSl2009m+DRoLNOEz
9LLPQUPzQveaOrMj7UuZuZaedfeMfN9dJkZTaCFWchHCdqBDlZwrxhGcdivjgOhA
jvkyxB5ZpBNvwOvqSkUee1qzWIuzzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN8N
u6JtEOEyNnGKQ5sRn1d/VXbvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzExOUQzMkM5ODAxMUVGQTg3MEE4Nzc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOXxMA0GCSqGSIb3DQEBCwUA
A4IBAQB1K/RvBzlOY/wfNkR7PbKSzYtvF84SmEsWKo2/+VtbUqgawR5OPsmXPwoW
N0X5R6MYSnrVOHwi1A5VJqvxNNQymyshkonL7ff8cZ+BK5ZeigpxJ4IA2orSIvS7
zpTkGLfdz8L1nqMWmd326OlSX5gOHnWCGxEMgKxGXhCdm3jF14r5/EvSIhrfIpyu
9IxDwIaORL+0lYpim99DNaWGtHRIjc7wRu2gGGdFcDbvHs1B3ATbfh4K/QgDxrGg
zzgKWyhbGkYPBVRtjz3FJPDLwwOXLW1jvOIEmK41SvoYv5A/Yo/gOhWZBqvkm4Mm
XZ6tJjfvtGL9MDUb3KPDpBNwKwt4
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:35 2025 by rpki-client