Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/176B3E20C34211EFBDA99D44762E951A.roa
File: 176B3E20C34211EFBDA99D44762E951A.roa (raw, json)
Hash identifier: gPcQFI/oQgagzx+Srih5HNgNzAqO/78SmB85k+E96XQ=
Subject key identifier: 0E:07:CA:75:48:91:A4:89:3D:02:3D:6D:7C:DC:08:3B:05:CE:EF:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EBD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/176B3E20C34211EFBDA99D44762E951A.roa
Signing time: Thu 26 Dec 2024 04:30:10 +0000
ROA not before: Thu 26 Dec 2024 04:30:06 +0000
ROA not after: Fri 10 Dec 2027 04:30:06 +0000
asID: 17561
IP address blocks: 156.244.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60375 (0xebd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 04:30:06 2024 GMT
Not After : Dec 10 04:30:06 2027 GMT
Subject: CN=676cdbd2-3da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:61:2b:08:75:5a:df:9e:7e:54:80:d3:93:
b0:fb:74:52:bc:68:82:d0:b2:33:b7:26:9a:99:9f:
23:73:8e:03:38:70:d2:34:9d:86:68:57:54:1a:7d:
6a:83:b4:33:54:df:f5:85:35:7e:a8:d2:5f:0a:12:
f2:55:f3:f5:3b:77:70:8a:68:9b:8e:36:70:89:19:
03:17:3e:63:74:25:b9:7e:eb:79:4e:dd:12:64:f0:
89:54:f3:e8:01:d4:42:10:5f:aa:01:b0:88:90:67:
71:1e:99:a1:a7:9e:aa:a4:cd:8b:2f:8b:94:af:4c:
86:cb:2d:3d:02:77:42:4c:97:2d:a5:96:7d:0e:8b:
b4:db:1a:df:7d:c2:7f:39:1e:69:29:78:8f:ec:6a:
7d:b1:25:0b:3d:c4:0b:75:73:43:5e:3f:8f:1d:aa:
9a:e2:80:a8:50:a4:1b:cb:3f:18:60:b0:c4:03:00:
b0:5d:c4:cc:1e:ab:ed:f8:ad:e2:0b:55:86:f9:6a:
8e:d9:d5:8c:0d:d2:e8:eb:ad:5b:31:5e:41:49:ca:
ef:aa:e7:86:28:8e:0a:17:b4:ff:05:96:a9:74:f5:
f5:c0:2c:87:02:53:42:7e:84:29:ef:06:46:0d:91:
d2:33:9d:dd:91:a3:17:87:5a:3e:0a:7f:27:bd:cd:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:07:CA:75:48:91:A4:89:3D:02:3D:6D:7C:DC:08:3B:05:CE:EF:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/176B3E20C34211EFBDA99D44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.231.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6b:e4:5c:c5:0b:5d:2a:6c:2b:7d:40:c2:01:ce:7c:31:15:
3f:7c:1d:89:a9:59:96:02:b2:01:d4:5a:45:8a:26:07:7b:40:
71:b4:f0:0b:d3:80:d9:e2:64:69:cc:67:30:c2:e6:b5:e8:35:
d5:50:bd:3e:d8:b0:2c:cf:e4:fa:a3:b4:17:4b:28:6d:15:e9:
6e:23:6a:2e:c3:4c:05:4c:8d:80:b8:e8:4b:af:11:67:a7:15:
3f:69:2e:27:84:a4:cb:22:22:30:1b:2d:59:04:9a:a9:40:27:
56:c3:8d:87:a1:41:4e:c0:0b:48:c6:d2:d2:d6:c2:93:16:fb:
59:fb:ca:ac:ba:a5:49:b3:f6:cf:f6:2c:e2:25:cb:24:2b:8d:
02:8c:da:72:76:04:f9:d9:ac:af:72:1c:9b:13:60:76:9c:e4:
07:3b:18:79:23:31:50:b1:a2:1c:e3:dc:00:4b:9b:87:da:52:
6b:a3:f1:ff:5d:d2:18:75:d7:a3:03:ac:94:fc:55:7c:7b:81:
a0:31:f5:3e:e9:ee:d5:c7:76:93:df:fc:33:46:95:f8:2e:1e:
97:4e:aa:88:92:a8:f9:db:47:49:df:9d:45:4b:3c:41:47:1f:
0d:62:98:88:9a:b1:d0:5a:50:a6:81:6b:e4:b3:b5:1a:90:90:
5d:39:ac:3d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOvXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDQzMDA2WhcNMjcxMjEwMDQzMDA2WjAYMRYw
FAYDVQQDEw02NzZjZGJkMi0zZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1ZhhKwh1Wt+eflSA05Ow+3RSvGiC0LIztyaamZ8jc44DOHDSNJ2GaFdU
Gn1qg7QzVN/1hTV+qNJfChLyVfP1O3dwimibjjZwiRkDFz5jdCW5fut5Tt0SZPCJ
VPPoAdRCEF+qAbCIkGdxHpmhp56qpM2LL4uUr0yGyy09AndCTJctpZZ9Dou02xrf
fcJ/OR5pKXiP7Gp9sSULPcQLdXNDXj+PHaqa4oCoUKQbyz8YYLDEAwCwXcTMHqvt
+K3iC1WG+WqO2dWMDdLo661bMV5BScrvqueGKI4KF7T/BZapdPX1wCyHAlNCfoQp
7wZGDZHSM53dkaMXh1o+Cn8nvc3e3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA4H
ynVIkaSJPQI9bXzcCDsFzu/dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzZCM0UyMEMzNDIxMUVGQkRBOTlENDQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPTnMA0GCSqGSIb3DQEBCwUA
A4IBAQCBa+RcxQtdKmwrfUDCAc58MRU/fB2JqVmWArIB1FpFiiYHe0BxtPAL04DZ
4mRpzGcwwua16DXVUL0+2LAsz+T6o7QXSyhtFeluI2ouw0wFTI2AuOhLrxFnpxU/
aS4nhKTLIiIwGy1ZBJqpQCdWw42HoUFOwAtIxtLS1sKTFvtZ+8qsuqVJs/bP9izi
JcskK40CjNpydgT52ayvchybE2B2nOQHOxh5IzFQsaIc49wAS5uH2lJro/H/XdIY
ddejA6yU/FV8e4GgMfU+6e7Vx3aT3/wzRpX4Lh6XTqqIkqj520dJ351FSzxBRx8N
YpiImrHQWlCmgWvks7UakJBdOaw9
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:59 2025 by rpki-client