Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183ED81AD2F211EFA6006670762E951A.roa
File: 183ED81AD2F211EFA6006670762E951A.roa (raw, json)
Hash identifier: 6pMsIJJAfbkqQ6ucEf0vArNsxt4JahkZtCe2KmtLCF0=
Subject key identifier: 35:F4:38:BB:47:53:2F:12:3B:92:E6:A3:28:18:40:E6:29:BC:3E:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010787
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183ED81AD2F211EFA6006670762E951A.roa
Signing time: Wed 15 Jan 2025 03:37:50 +0000
ROA not before: Wed 15 Jan 2025 03:37:46 +0000
ROA not after: Sat 03 Jan 2026 03:37:46 +0000
asID: 984
IP address blocks: 156.243.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67463 (0x10787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:37:46 2025 GMT
Not After : Jan 3 03:37:46 2026 GMT
Subject: CN=67872d8e-8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:fe:e3:93:9a:93:17:09:e3:b1:2e:cf:e0:
41:01:90:9a:db:3f:c9:e9:b5:85:e9:bd:6d:ec:da:
fe:31:39:9e:74:8c:98:cb:e3:85:fc:cd:02:45:d7:
09:cf:34:7a:22:94:db:5f:fc:f8:26:e5:91:b9:42:
c1:84:fb:0b:1f:61:0e:ed:46:5d:e7:84:16:a9:17:
df:58:ca:9d:13:63:98:6e:d4:2d:eb:80:64:67:a1:
b6:b8:ef:b1:bc:ac:7e:84:62:4f:35:64:7e:e5:95:
5d:ed:26:97:c8:c3:11:3c:8c:7a:ec:6e:09:91:95:
75:d1:f1:7a:4c:89:94:48:59:9a:d7:81:d0:cf:da:
39:10:ae:d4:b5:ab:9e:34:48:bb:da:5c:ed:a8:bb:
85:d6:a7:ac:c1:a5:09:f2:82:1c:31:d8:32:b3:c4:
58:22:e7:b4:c8:de:65:a1:7f:32:23:d1:ee:18:ff:
0e:04:39:e7:b2:c4:74:6b:0a:23:1c:ea:f8:87:78:
46:92:67:31:e2:54:39:b0:1c:f4:49:f3:d4:7e:84:
92:49:c7:83:32:21:11:8a:a3:64:a0:74:bf:38:a9:
2a:8f:08:b7:f0:d4:0b:07:0f:2e:27:a1:7c:43:fd:
36:a4:9d:08:0b:8f:c0:0c:e5:ab:35:ec:07:44:c6:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:38:BB:47:53:2F:12:3B:92:E6:A3:28:18:40:E6:29:BC:3E:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183ED81AD2F211EFA6006670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ef:d2:8b:66:3c:37:ba:df:40:00:2b:ff:2a:a5:44:a5:84:
4b:0b:5c:2d:9e:dc:27:be:84:45:e6:44:f9:37:c5:21:9a:fc:
fc:0d:10:37:3b:17:90:0b:8a:2f:08:90:57:d9:55:2b:d7:9e:
04:54:24:7f:fd:8a:a6:ab:17:42:d0:99:a7:11:84:35:6c:d7:
f6:bd:8b:13:d8:e5:1a:08:76:ec:91:ba:9c:c7:c4:69:9c:6a:
9c:cb:59:b1:d7:1e:a8:fc:88:2c:68:74:fa:1f:b4:95:73:60:
ff:50:a1:8b:0f:06:0b:98:71:9d:4e:ca:9e:44:0d:69:0c:ca:
4c:1e:da:2c:7b:e3:75:31:b4:9a:f0:31:9f:10:fd:09:4f:b2:
22:31:26:d6:37:15:54:3a:a4:84:ac:cd:df:21:a2:fd:a6:31:
0b:48:cb:aa:7e:bc:11:8e:89:19:99:b0:0c:62:1e:09:e7:e5:
85:da:0f:4f:16:98:8c:49:47:a5:60:77:4c:eb:00:43:a6:93:
fe:a5:33:b9:df:13:cc:ec:6c:ee:37:b6:14:26:64:aa:06:65:
e4:03:4c:6d:22:50:79:65:77:95:a8:a4:3d:44:39:ef:16:f7:
df:75:18:19:22:3c:b7:3d:f3:d5:ae:52:0a:24:f2:d0:97:10:
99:a1:db:3f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQeHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDMzNzQ2WhcNMjYwMTAzMDMzNzQ2WjAYMRYw
FAYDVQQDEw02Nzg3MmQ4ZS04MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Wj+45OakxcJ47Euz+BBAZCa2z/J6bWF6b1t7Nr+MTmedIyYy+OF/M0C
RdcJzzR6IpTbX/z4JuWRuULBhPsLH2EO7UZd54QWqRffWMqdE2OYbtQt64BkZ6G2
uO+xvKx+hGJPNWR+5ZVd7SaXyMMRPIx67G4JkZV10fF6TImUSFma14HQz9o5EK7U
taueNEi72lztqLuF1qeswaUJ8oIcMdgys8RYIue0yN5loX8yI9HuGP8OBDnnssR0
awojHOr4h3hGkmcx4lQ5sBz0SfPUfoSSSceDMiERiqNkoHS/OKkqjwi38NQLBw8u
J6F8Q/02pJ0IC4/ADOWrNewHRMZ+TwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDX0
OLtHUy8SO5LmoygYQOYpvD5XMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xODNFRDgxQUQyRjIxMUVGQTYwMDY2NzA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPN6MA0GCSqGSIb3DQEBCwUA
A4IBAQBL79KLZjw3ut9AACv/KqVEpYRLC1wtntwnvoRF5kT5N8Uhmvz8DRA3OxeQ
C4ovCJBX2VUr154EVCR//YqmqxdC0JmnEYQ1bNf2vYsT2OUaCHbskbqcx8RpnGqc
y1mx1x6o/IgsaHT6H7SVc2D/UKGLDwYLmHGdTsqeRA1pDMpMHtose+N1MbSa8DGf
EP0JT7IiMSbWNxVUOqSErM3fIaL9pjELSMuqfrwRjokZmbAMYh4J5+WF2g9PFpiM
SUelYHdM6wBDppP+pTO53xPM7GzuN7YUJmSqBmXkA0xtIlB5ZXeVqKQ9RDnvFvff
dRgZIjy3PfPVrlIKJPLQlxCZods/
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:03 2025 by rpki-client