Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11AED366CE4111EFBD8750B8762E951A.roa
File: 11AED366CE4111EFBD8750B8762E951A.roa (raw, json)
Hash identifier: M3atg9OAd0th4n/v5AR9ZzbxCLsniJFOaUKJE7XnSac=
Subject key identifier: C7:FA:94:7A:58:C6:57:71:BB:26:1E:C6:25:A9:90:C8:77:85:AF:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010271
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11AED366CE4111EFBD8750B8762E951A.roa
Signing time: Thu 09 Jan 2025 04:20:34 +0000
ROA not before: Thu 09 Jan 2025 04:20:30 +0000
ROA not after: Fri 09 Jan 2026 04:20:30 +0000
asID: 17561
IP address blocks: 156.245.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66161 (0x10271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:20:30 2025 GMT
Not After : Jan 9 04:20:30 2026 GMT
Subject: CN=677f4e92-b565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:ba:2e:80:37:6e:e8:e5:8f:4f:c7:72:e9:
05:34:93:07:eb:01:08:c4:ed:92:00:38:2f:0a:86:
b0:ce:07:83:5f:9c:11:d1:5c:bb:bb:37:e7:02:95:
cb:ed:4f:cf:b5:fb:92:a2:88:c7:5e:48:84:6a:f5:
1d:6f:bd:90:3f:07:60:1a:01:f0:66:8e:80:88:62:
b6:3d:b3:40:e6:53:f1:3b:de:96:43:32:07:bb:b9:
15:c6:1f:18:cf:17:0d:fd:19:5c:2d:c1:51:b9:46:
5e:37:49:9b:0e:c5:c4:fa:1d:ef:bf:2f:70:4a:9f:
fd:a9:e6:6b:37:cb:bc:48:9c:8f:b4:0c:fa:74:e5:
94:53:99:8e:22:66:3e:8f:ac:04:81:2a:2c:20:c3:
bb:c8:21:30:b4:6d:38:7e:e9:64:95:e4:87:75:b3:
8c:5b:a7:c4:f8:47:3a:b5:c3:93:83:52:70:34:0e:
c5:26:a7:00:ed:82:ef:a7:9d:33:52:83:1a:63:14:
e9:df:7c:95:c9:a5:da:5f:bf:ea:08:10:c1:91:3d:
7c:c6:2c:e9:08:67:26:b1:01:84:1b:e1:54:d1:51:
43:a5:a9:b1:aa:62:b8:74:87:a2:97:bf:8e:66:4f:
c1:d9:89:9a:ff:80:29:be:32:65:28:60:b6:a3:fa:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:94:7A:58:C6:57:71:BB:26:1E:C6:25:A9:90:C8:77:85:AF:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11AED366CE4111EFBD8750B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.108.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e7:a4:6e:51:49:e5:6c:61:73:ad:e0:20:81:0d:33:f6:cf:
b9:49:53:10:03:a4:c4:a1:4e:f9:3f:6a:e7:a3:7a:c8:1a:9b:
cb:ba:6f:eb:8e:4c:ad:fb:13:b5:c7:06:a8:1d:75:7a:ac:bd:
33:22:29:f8:33:ee:e8:8c:88:57:c5:e3:ea:3f:9c:32:d1:66:
dd:1f:3d:00:7f:40:20:cc:6f:1b:3c:06:02:e4:8e:6c:41:70:
8d:26:26:95:7a:52:26:2b:d7:20:69:11:d9:8d:51:12:4f:6d:
ea:71:23:b4:c6:12:a1:33:22:e0:2e:a2:88:bf:a0:32:b0:9f:
d5:48:bd:3a:d3:66:1d:0a:84:e1:09:b6:c3:70:69:c9:9d:05:
d0:08:2a:0e:72:7d:28:2e:88:02:7a:0b:a1:90:71:b2:59:c8:
8f:c0:96:7c:7b:62:49:3e:51:91:fd:e5:f5:5c:c2:14:76:14:
cd:4a:31:77:db:e7:91:30:7c:34:a1:6b:89:e3:04:f2:d0:74:
0c:cf:31:3e:1b:da:8d:eb:cc:4f:99:a7:46:1f:03:a6:b7:0a:
77:2c:5b:a7:fc:0b:56:bb:cb:88:15:e5:8b:8f:c7:d0:55:bd:
64:12:0d:2d:eb:84:1d:6a:29:1e:35:ee:88:43:51:1a:70:c1:
12:4b:3a:d0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQJxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MDQyMDMwWhcNMjYwMTA5MDQyMDMwWjAYMRYw
FAYDVQQDEw02NzdmNGU5Mi1iNTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq/O6LoA3bujlj0/HcukFNJMH6wEIxO2SADgvCoawzgeDX5wR0Vy7uzfn
ApXL7U/PtfuSoojHXkiEavUdb72QPwdgGgHwZo6AiGK2PbNA5lPxO96WQzIHu7kV
xh8YzxcN/RlcLcFRuUZeN0mbDsXE+h3vvy9wSp/9qeZrN8u8SJyPtAz6dOWUU5mO
ImY+j6wEgSosIMO7yCEwtG04fulkleSHdbOMW6fE+Ec6tcOTg1JwNA7FJqcA7YLv
p50zUoMaYxTp33yVyaXaX7/qCBDBkT18xizpCGcmsQGEG+FU0VFDpamxqmK4dIei
l7+OZk/B2Yma/4ApvjJlKGC2o/qPwwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMf6
lHpYxldxuyYexiWpkMh3ha/iMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUFFRDM2NkNFNDExMUVGQkQ4NzUwQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPVsMA0GCSqGSIb3DQEBCwUA
A4IBAQBY56RuUUnlbGFzreAggQ0z9s+5SVMQA6TEoU75P2rno3rIGpvLum/rjkyt
+xO1xwaoHXV6rL0zIin4M+7ojIhXxePqP5wy0WbdHz0Af0AgzG8bPAYC5I5sQXCN
JiaVelImK9cgaRHZjVEST23qcSO0xhKhMyLgLqKIv6AysJ/VSL0602YdCoThCbbD
cGnJnQXQCCoOcn0oLogCeguhkHGyWciPwJZ8e2JJPlGR/eX1XMIUdhTNSjF32+eR
MHw0oWuJ4wTy0HQMzzE+G9qN68xPmadGHwOmtwp3LFun/AtWu8uIFeWLj8fQVb1k
Eg0t64QdaikeNe6IQ1EacMESSzrQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:31 2025 by rpki-client