Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1098AEBEC95C11EFA9F6D27F762E951A.roa
File: 1098AEBEC95C11EFA9F6D27F762E951A.roa (raw, json)
Hash identifier: Al0o8k/u1kg8FUJs+RRneE+hd4p0EAIrHqNE5fm/sxQ=
Subject key identifier: 3A:01:09:95:B3:E8:5A:BC:AB:D7:15:8A:92:37:2C:19:7C:4F:8F:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F430
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1098AEBEC95C11EFA9F6D27F762E951A.roa
Signing time: Thu 02 Jan 2025 22:51:12 +0000
ROA not before: Thu 02 Jan 2025 22:51:09 +0000
ROA not after: Sat 13 Dec 2025 22:51:09 +0000
asID: 984
IP address blocks: 156.226.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62512 (0xf430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:51:09 2025 GMT
Not After : Dec 13 22:51:09 2025 GMT
Subject: CN=67771860-9879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:33:e0:3d:ae:2e:25:38:36:5c:52:85:fc:
42:c7:4d:69:8f:c4:5d:5d:eb:0e:0b:5e:93:9f:5f:
a3:69:db:a6:08:d7:5f:55:e0:5f:01:ff:98:5f:61:
29:9b:62:04:b3:4c:8c:e4:9e:d0:4e:fe:3d:2f:43:
66:5a:2f:28:85:5c:51:7c:9a:8d:75:66:d8:f8:18:
c0:8b:ab:f4:46:89:dc:e0:cb:85:14:95:bd:f7:bb:
75:ca:95:69:00:1d:ec:5a:49:3e:fc:cf:7a:01:24:
b5:47:43:f2:41:d6:84:c0:d0:9d:d0:aa:5b:ec:37:
ed:d3:77:67:46:b0:3e:c9:ef:1b:5d:4a:56:e5:02:
9b:c3:1b:24:99:9a:8b:d0:e6:7a:fe:57:11:bc:d3:
33:a0:0f:3a:e8:0a:70:1f:e7:a3:a5:fa:1a:a1:f5:
e3:66:09:5a:7d:c9:ca:1b:b4:f2:7f:c0:ff:b8:92:
39:af:a8:7b:b2:86:05:87:d1:3c:03:84:2a:f8:5a:
03:6b:64:8d:24:64:31:a9:63:2a:ff:05:50:0b:05:
26:05:e6:76:42:e3:87:fa:06:29:5d:0a:5a:5f:50:
b7:be:0d:86:0f:ec:e0:97:4d:0c:94:5c:c9:48:3b:
50:f0:f3:d1:70:28:48:be:ce:e0:89:96:f9:23:06:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:09:95:B3:E8:5A:BC:AB:D7:15:8A:92:37:2C:19:7C:4F:8F:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1098AEBEC95C11EFA9F6D27F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.202.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b9:7e:dc:ce:92:b7:ff:96:af:5b:4a:1c:50:75:bd:13:2a:
70:04:66:ff:43:c5:16:fa:a0:29:00:cd:37:91:6f:67:b6:fb:
18:72:23:91:99:28:f2:46:42:9f:40:52:47:56:a0:99:09:eb:
28:92:4b:f1:50:ae:87:82:48:db:92:f4:0e:26:87:4d:42:63:
d5:d3:7d:1d:49:1d:af:8a:99:85:59:41:6a:65:56:59:4b:8b:
f5:0c:46:a9:41:3f:ba:ed:f9:50:f0:55:5b:ca:a8:dc:7d:da:
f8:1b:f6:4f:f9:47:d7:2e:dd:78:ca:81:f5:c6:74:98:16:06:
e3:bf:e9:ce:88:c3:18:8e:ab:33:ae:65:e3:17:dd:aa:38:ff:
ce:d2:f4:ec:2a:16:b2:2e:97:88:8d:5e:54:61:e5:30:0d:81:
6e:14:be:9a:35:4c:ba:77:7f:d2:60:7b:e9:6f:52:0a:da:64:
f1:79:aa:90:56:0f:c9:e2:46:0e:8c:8b:62:c8:5a:72:37:40:
58:02:82:f6:7b:26:32:71:b9:06:7a:fd:86:ba:93:b7:f4:9e:
78:4b:72:fa:e1:24:4d:ce:34:a6:cd:15:2e:66:d4:31:29:b0:
56:16:75:11:80:d7:78:62:4c:47:90:94:07:cf:ad:88:5d:38:
26:13:a6:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPQwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjI1MTA5WhcNMjUxMjEzMjI1MTA5WjAYMRYw
FAYDVQQDEw02Nzc3MTg2MC05ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8oUz4D2uLiU4NlxShfxCx01pj8RdXesOC16Tn1+jadumCNdfVeBfAf+Y
X2Epm2IEs0yM5J7QTv49L0NmWi8ohVxRfJqNdWbY+BjAi6v0Ronc4MuFFJW997t1
ypVpAB3sWkk+/M96ASS1R0PyQdaEwNCd0Kpb7Dft03dnRrA+ye8bXUpW5QKbwxsk
mZqL0OZ6/lcRvNMzoA866ApwH+ejpfoaofXjZglafcnKG7Tyf8D/uJI5r6h7soYF
h9E8A4Qq+FoDa2SNJGQxqWMq/wVQCwUmBeZ2QuOH+gYpXQpaX1C3vg2GD+zgl00M
lFzJSDtQ8PPRcChIvs7giZb5IwavqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDoB
CZWz6Fq8q9cVipI3LBl8T4+FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDk4QUVCRUM5NUMxMUVGQTlGNkQyN0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOLKMA0GCSqGSIb3DQEBCwUA
A4IBAQARuX7czpK3/5avW0ocUHW9EypwBGb/Q8UW+qApAM03kW9ntvsYciORmSjy
RkKfQFJHVqCZCesokkvxUK6HgkjbkvQOJodNQmPV030dSR2vipmFWUFqZVZZS4v1
DEapQT+67flQ8FVbyqjcfdr4G/ZP+UfXLt14yoH1xnSYFgbjv+nOiMMYjqszrmXj
F92qOP/O0vTsKhayLpeIjV5UYeUwDYFuFL6aNUy6d3/SYHvpb1IK2mTxeaqQVg/J
4kYOjItiyFpyN0BYAoL2eyYycbkGev2GupO39J54S3L64SRNzjSmzRUuZtQxKbBW
FnURgNd4YkxHkJQHz62IXTgmE6Y1
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:39 2025 by rpki-client