Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08CBF5F8CD6F11EFA919A178762E951A.roa
File: 08CBF5F8CD6F11EFA919A178762E951A.roa (raw, json)
Hash identifier: 8GKqB9pghRB3DYFWOYQCqx75UDzG3C1lcfSLj1iuD7g=
Subject key identifier: 0F:FA:01:10:0F:E3:55:ED:F1:9B:EF:03:68:F9:C8:89:2D:39:EC:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08CBF5F8CD6F11EFA919A178762E951A.roa
Signing time: Wed 08 Jan 2025 03:17:04 +0000
ROA not before: Wed 08 Jan 2025 03:17:01 +0000
ROA not after: Mon 13 Dec 2027 03:17:01 +0000
asID: 17561
IP address blocks: 156.248.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65403 (0xff7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:17:01 2025 GMT
Not After : Dec 13 03:17:01 2027 GMT
Subject: CN=677dee30-4a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:63:98:8f:1c:d8:f3:f2:3d:91:58:13:fa:
6a:d1:30:74:ac:6e:cd:14:44:e1:56:cb:ee:0e:94:
a7:1f:6c:d1:b0:84:14:1d:1f:3a:c1:67:af:25:2e:
75:e7:19:52:fd:3b:a0:15:e8:70:cb:5d:a8:fd:29:
80:73:fc:da:1f:a6:ac:d6:8b:fa:42:bf:53:b5:4b:
99:32:c7:2a:a0:66:ca:96:49:c8:eb:eb:6b:f8:da:
0e:1d:18:62:71:95:d2:f7:1f:aa:d2:bf:db:d2:da:
09:d3:6e:57:e1:ae:2d:f3:58:98:25:da:20:5e:4a:
54:ba:06:10:90:f6:0d:6a:1f:86:a0:4d:0a:71:46:
e4:fb:e1:8d:65:7d:f8:70:13:c2:ac:81:b0:7d:ac:
ed:52:02:6c:33:fe:52:c8:7d:fa:17:06:80:08:0a:
73:dc:a1:cd:ea:1c:88:16:b0:3b:b9:a8:df:5c:bd:
df:71:2d:18:1d:3b:1f:ea:31:0d:ba:fc:d0:10:35:
26:ca:7f:fe:ee:ba:c5:1d:5f:6f:85:9a:cb:05:4b:
b8:36:e0:c5:0e:9b:42:8c:e3:1d:41:60:9f:50:3d:
63:df:77:c6:8c:66:60:6d:4e:ac:d1:db:95:22:b3:
4a:93:c3:80:5a:a3:ac:6d:14:0d:38:ce:68:56:ea:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FA:01:10:0F:E3:55:ED:F1:9B:EF:03:68:F9:C8:89:2D:39:EC:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08CBF5F8CD6F11EFA919A178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:84:bb:97:91:e4:1a:86:e7:23:b6:f2:14:63:83:7f:e7:af:
94:8b:3b:dc:f9:4c:58:f2:98:4e:30:b9:d9:7d:df:b2:cc:ed:
ad:fc:ac:29:40:1c:8a:a1:af:c2:b0:c3:18:4c:b7:43:db:40:
35:49:ac:b4:8d:de:b8:c3:ba:2b:e8:0c:6e:ea:1e:cf:98:ef:
96:87:59:b2:34:02:74:60:fc:46:16:93:31:3c:f4:9d:e3:c3:
3c:79:48:e7:6b:08:79:6e:97:b7:69:13:a5:60:7c:89:a5:67:
98:10:eb:e9:3d:72:f6:da:48:85:78:31:8b:bf:8a:a3:47:3b:
6c:f9:8a:65:06:1c:12:11:f3:87:86:bc:af:39:9f:72:ac:c0:
a9:24:96:11:a9:a6:77:86:cb:b9:76:be:c2:0b:b6:13:fa:c2:
63:56:74:a5:1f:d2:49:34:c2:67:23:cd:b8:09:4a:bd:8d:94:
1f:4d:c2:87:ab:ae:52:58:12:bd:76:98:57:74:b5:91:52:24:
5a:75:07:9f:bc:59:32:97:04:fd:a2:77:47:6f:8e:40:58:ab:
40:bb:7e:58:b8:55:3c:34:92:bf:1a:0b:2f:e1:43:97:75:26:
ce:cc:72:30:52:dc:20:71:43:43:b0:6d:6a:dd:22:95:e5:4d:
64:f7:c6:bf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP97MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDMxNzAxWhcNMjcxMjEzMDMxNzAxWjAYMRYw
FAYDVQQDEw02NzdkZWUzMC00YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3pZjmI8c2PPyPZFYE/pq0TB0rG7NFEThVsvuDpSnH2zRsIQUHR86wWev
JS515xlS/TugFehwy12o/SmAc/zaH6as1ov6Qr9TtUuZMscqoGbKlknI6+tr+NoO
HRhicZXS9x+q0r/b0toJ025X4a4t81iYJdogXkpUugYQkPYNah+GoE0KcUbk++GN
ZX34cBPCrIGwfaztUgJsM/5SyH36FwaACApz3KHN6hyIFrA7uajfXL3fcS0YHTsf
6jENuvzQEDUmyn/+7rrFHV9vhZrLBUu4NuDFDptCjOMdQWCfUD1j33fGjGZgbU6s
0duVIrNKk8OAWqOsbRQNOM5oVuoHXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA/6
ARAP41Xt8ZvvA2j5yIktOez2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOENCRjVGOENENkYxMUVGQTkxOUExNzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPgXMA0GCSqGSIb3DQEBCwUA
A4IBAQBbhLuXkeQahucjtvIUY4N/56+Uizvc+UxY8phOMLnZfd+yzO2t/KwpQByK
oa/CsMMYTLdD20A1Say0jd64w7or6Axu6h7PmO+Wh1myNAJ0YPxGFpMxPPSd48M8
eUjnawh5bpe3aROlYHyJpWeYEOvpPXL22kiFeDGLv4qjRzts+YplBhwSEfOHhryv
OZ9yrMCpJJYRqaZ3hsu5dr7CC7YT+sJjVnSlH9JJNMJnI824CUq9jZQfTcKHq65S
WBK9dphXdLWRUiRadQefvFkylwT9ondHb45AWKtAu35YuFU8NJK/Ggsv4UOXdSbO
zHIwUtwgcUNDsG1q3SKV5U1k98a/
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:15 2025 by rpki-client