Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FFC645ECD2711EFA3CD5D9E762E951A.roa
File: 0FFC645ECD2711EFA3CD5D9E762E951A.roa (raw, json)
Hash identifier: rGCzYdo/oUMDElbv/YiXV8Zm1hudpo7h6L7MCmqmMTo=
Subject key identifier: 1A:74:B2:2A:9D:33:93:85:76:E6:CA:56:29:F4:B9:35:AC:9F:90:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FFC645ECD2711EFA3CD5D9E762E951A.roa
Signing time: Tue 07 Jan 2025 18:41:53 +0000
ROA not before: Tue 07 Jan 2025 18:41:49 +0000
ROA not after: Sat 13 Dec 2025 18:41:49 +0000
asID: 984
IP address blocks: 156.241.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64931 (0xfda3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:41:49 2025 GMT
Not After : Dec 13 18:41:49 2025 GMT
Subject: CN=677d7571-743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5e:50:66:8d:61:84:1c:09:6b:ff:9a:c9:1d:
44:bf:e4:1b:26:26:2f:5f:55:24:5f:fb:c7:58:26:
4a:b6:0f:b9:cf:44:a1:58:d4:a7:44:50:13:3f:01:
74:35:57:de:2c:16:62:dd:78:99:2b:5d:57:2a:84:
5d:b2:f1:89:6c:ef:df:00:65:cd:7a:a4:80:fe:f1:
3d:fc:c9:0e:48:50:e6:c5:cd:4c:50:11:fc:5d:ec:
56:aa:91:9e:34:47:d4:b3:f7:22:0a:fc:82:64:81:
50:70:ab:0a:68:38:bd:42:12:ac:3d:82:7b:dc:f2:
f5:b8:2a:17:4a:a8:aa:01:e3:df:27:51:bf:f8:81:
19:d9:a5:53:55:db:ba:09:11:94:23:7d:b8:d3:a2:
d6:c7:6e:bc:12:b8:4d:f1:ea:1d:9e:80:eb:ab:93:
f1:f3:c5:10:84:4c:c8:57:ff:b4:42:c8:2d:38:ac:
5f:ca:8f:a1:6b:5b:23:06:7a:30:ab:58:16:50:3c:
5d:03:f2:6c:e6:d9:9b:b6:05:e1:c3:9c:37:f3:e1:
de:3e:16:a1:a9:c6:09:3d:f5:68:de:30:02:6e:da:
45:f1:20:44:e8:f8:75:5a:cb:45:aa:26:9d:55:24:
55:85:f1:6a:12:4a:88:ec:56:74:f6:87:41:84:be:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:74:B2:2A:9D:33:93:85:76:E6:CA:56:29:F4:B9:35:AC:9F:90:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FFC645ECD2711EFA3CD5D9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.221.0/24
Signature Algorithm: sha256WithRSAEncryption
39:bc:6f:9b:e6:e6:98:41:b4:3f:17:da:44:3c:58:3d:37:71:
66:16:11:ea:7a:64:15:9e:f3:9b:ff:87:f0:cf:f7:6e:72:a1:
dc:7c:18:3b:62:1c:61:ab:9b:be:00:ce:2e:04:26:97:33:42:
40:1c:2f:1f:b6:4b:b8:a4:79:6c:88:dc:c7:32:f6:e2:eb:a6:
55:f8:52:ad:f2:4d:9b:71:ef:60:ef:7b:70:9f:6a:44:2c:23:
0c:34:0f:e3:1f:3e:9c:83:16:9e:b3:4d:e1:61:77:4f:e6:01:
3c:30:d8:2c:8e:88:02:fc:43:50:e9:8d:53:15:fb:ea:ca:9f:
61:be:80:eb:61:4b:9b:79:bd:5c:04:92:e9:69:6d:7f:f3:b3:
6e:cf:5e:49:4f:a9:2c:0b:77:e0:71:e8:fc:fe:47:02:6d:8f:
04:36:0b:9c:76:f7:3c:97:e1:dd:c3:73:42:eb:d9:25:97:12:
27:39:39:22:9c:e1:7a:0c:c3:11:d8:7f:21:dd:44:6c:36:7b:
2d:f4:9a:85:35:4d:17:a4:63:93:1f:83:b1:45:8d:9e:97:83:
e4:ec:55:f9:b1:26:4a:7e:f5:ea:cd:34:1a:7a:f7:5c:4f:f3:
fe:ad:49:24:c4:d6:96:b8:3e:31:5b:04:8d:3c:16:65:65:bd:
69:05:a0:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP2jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTg0MTQ5WhcNMjUxMjEzMTg0MTQ5WjAYMRYw
FAYDVQQDEw02NzdkNzU3MS03NDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+l5QZo1hhBwJa/+ayR1Ev+QbJiYvX1UkX/vHWCZKtg+5z0ShWNSnRFAT
PwF0NVfeLBZi3XiZK11XKoRdsvGJbO/fAGXNeqSA/vE9/MkOSFDmxc1MUBH8XexW
qpGeNEfUs/ciCvyCZIFQcKsKaDi9QhKsPYJ73PL1uCoXSqiqAePfJ1G/+IEZ2aVT
Vdu6CRGUI32406LWx268ErhN8eodnoDrq5Px88UQhEzIV/+0QsgtOKxfyo+ha1sj
Bnowq1gWUDxdA/Js5tmbtgXhw5w38+HePhahqcYJPfVo3jACbtpF8SBE6Ph1WstF
qiadVSRVhfFqEkqI7FZ09odBhL5xLwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBp0
siqdM5OFdubKVin0uTWsn5BSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRkZDNjQ1RUNEMjcxMUVGQTNDRDVEOUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHdMA0GCSqGSIb3DQEBCwUA
A4IBAQA5vG+b5uaYQbQ/F9pEPFg9N3FmFhHqemQVnvOb/4fwz/ducqHcfBg7Yhxh
q5u+AM4uBCaXM0JAHC8ftku4pHlsiNzHMvbi66ZV+FKt8k2bce9g73twn2pELCMM
NA/jHz6cgxaes03hYXdP5gE8MNgsjogC/ENQ6Y1TFfvqyp9hvoDrYUubeb1cBJLp
aW1/87Nuz15JT6ksC3fgcej8/kcCbY8ENgucdvc8l+Hdw3NC69kllxInOTkinOF6
DMMR2H8h3URsNnst9JqFNU0XpGOTH4OxRY2el4Pk7FX5sSZKfvXqzTQaevdcT/P+
rUkkxNaWuD4xWwSNPBZlZb1pBaAn
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:40 2025 by rpki-client