Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B0A136AD24911EFAF0DDABA762E951A.roa
File: 1B0A136AD24911EFAF0DDABA762E951A.roa (raw, json)
Hash identifier: IwL0Kia13l57BDDJWelopf96UC6Yit9rcxTOR+jbDRw=
Subject key identifier: BA:AD:FA:37:7B:47:09:A7:94:65:25:E7:5D:1D:75:99:13:59:65:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B0A136AD24911EFAF0DDABA762E951A.roa
Signing time: Tue 14 Jan 2025 07:28:10 +0000
ROA not before: Tue 14 Jan 2025 07:28:06 +0000
ROA not after: Tue 18 Feb 2025 07:28:06 +0000
asID: 214413
IP address blocks: 156.226.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67300 (0x106e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:28:06 2025 GMT
Not After : Feb 18 07:28:06 2025 GMT
Subject: CN=6786120a-a56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:52:87:b8:08:4e:5e:c8:84:2b:b9:9a:e5:
f4:8a:7d:4c:e0:eb:d7:62:f8:61:d9:81:40:c9:92:
f9:42:38:48:9b:8c:96:0e:9f:03:12:d0:82:31:d5:
82:01:ba:b7:0a:13:c2:79:2c:79:ab:bc:04:c3:57:
b3:22:d9:30:50:d8:fb:40:34:12:78:89:c6:87:1f:
f6:84:6a:24:24:d1:7d:2c:20:b4:aa:7c:19:db:d3:
b5:fe:33:d0:ae:f7:ee:58:d9:2a:5b:5a:bc:eb:af:
b1:ac:eb:9f:8b:96:34:e3:dd:93:ac:d1:23:31:fc:
54:b0:0e:e0:2a:37:29:09:9c:77:02:a1:fa:f9:6f:
c1:3e:90:d2:52:e7:cb:f6:08:34:0e:b1:91:95:00:
16:c8:64:b2:77:ae:b6:10:28:80:52:61:a9:f8:e7:
35:66:45:9d:48:5b:0f:5b:4c:63:6e:e7:79:0a:81:
ab:36:28:1d:ba:86:1f:b9:c1:c9:01:b8:7d:24:c6:
f5:4e:b6:ff:9a:73:82:a8:4f:32:56:93:be:7e:1b:
25:c8:81:82:e7:81:98:94:0f:4d:2f:67:8f:3b:ed:
28:1d:a9:a2:ef:2e:ac:24:cc:13:61:57:eb:32:ae:
3a:67:dd:51:53:0b:ee:24:ba:1b:d1:fa:87:99:6c:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:FA:37:7B:47:09:A7:94:65:25:E7:5D:1D:75:99:13:59:65:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B0A136AD24911EFAF0DDABA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.218.0/23
Signature Algorithm: sha256WithRSAEncryption
16:45:46:b4:f3:aa:a8:2e:ef:21:d6:4e:12:8f:07:68:cf:11:
ff:8c:6c:62:71:f4:4e:a9:24:9e:ac:b8:f7:78:f0:d0:22:f8:
e4:00:f1:85:ce:a7:90:1d:9e:80:c8:50:09:05:52:f9:41:1d:
60:70:f0:83:2a:d8:90:8d:8d:aa:a8:77:af:f1:34:44:6f:e9:
69:c6:fb:c5:ee:ee:89:c3:a2:a8:a4:1c:e6:b9:5d:a7:4f:2a:
db:dc:20:d6:06:52:ca:9e:14:45:1f:8e:1c:71:a4:f5:5e:89:
12:fe:b4:3f:98:b5:19:d5:79:dd:b0:43:73:e0:a1:bb:06:e7:
9f:4d:b5:c0:b7:61:7e:f4:e0:c9:01:9f:a1:cd:ee:b2:3d:12:
81:0c:d8:7b:3d:02:d0:ff:77:d9:59:5c:89:9f:96:46:55:57:
7f:59:e7:ac:73:0b:bd:ad:ff:6a:64:51:69:16:71:61:32:04:
5d:36:24:f4:70:b2:5e:4c:51:8e:38:20:43:5f:c2:02:5e:b3:
bf:8b:9c:ee:5d:0a:21:d9:2e:af:b2:0e:2a:35:e2:9e:16:7e:
90:91:d2:cf:3a:3b:d7:4a:3e:d3:ca:2b:e7:5a:53:ad:55:c6:
17:8d:4d:4b:93:1c:27:3f:f6:72:11:2d:8a:68:da:b4:1f:a3:
21:49:d0:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQbkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE0MDcyODA2WhcNMjUwMjE4MDcyODA2WjAYMRYw
FAYDVQQDEw02Nzg2MTIwYS1hNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3npSh7gITl7IhCu5muX0in1M4OvXYvhh2YFAyZL5QjhIm4yWDp8DEtCC
MdWCAbq3ChPCeSx5q7wEw1ezItkwUNj7QDQSeInGhx/2hGokJNF9LCC0qnwZ29O1
/jPQrvfuWNkqW1q866+xrOufi5Y0492TrNEjMfxUsA7gKjcpCZx3AqH6+W/BPpDS
UufL9gg0DrGRlQAWyGSyd662ECiAUmGp+Oc1ZkWdSFsPW0xjbud5CoGrNigduoYf
ucHJAbh9JMb1Trb/mnOCqE8yVpO+fhslyIGC54GYlA9NL2ePO+0oHami7y6sJMwT
YVfrMq46Z91RUwvuJLob0fqHmWxr5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLqt
+jd7RwmnlGUl510ddZkTWWUkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQjBBMTM2QUQyNDkxMUVGQUYwRERBQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOLaMA0GCSqGSIb3DQEBCwUA
A4IBAQAWRUa086qoLu8h1k4SjwdozxH/jGxicfROqSSerLj3ePDQIvjkAPGFzqeQ
HZ6AyFAJBVL5QR1gcPCDKtiQjY2qqHev8TREb+lpxvvF7u6Jw6KopBzmuV2nTyrb
3CDWBlLKnhRFH44ccaT1XokS/rQ/mLUZ1XndsENz4KG7BuefTbXAt2F+9ODJAZ+h
ze6yPRKBDNh7PQLQ/3fZWVyJn5ZGVVd/Weescwu9rf9qZFFpFnFhMgRdNiT0cLJe
TFGOOCBDX8ICXrO/i5zuXQoh2S6vsg4qNeKeFn6QkdLPOjvXSj7TyivnWlOtVcYX
jU1LkxwnP/ZyES2KaNq0H6MhSdA7
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:29 2025 by rpki-client