Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22CA62F4CE4211EFB0F6BABE762E951A.roa
File: 22CA62F4CE4211EFB0F6BABE762E951A.roa (raw, json)
Hash identifier: NnjothOYCZjMkAyx/gMi802InSULitAinoOuNHNhyhU=
Subject key identifier: 33:45:2C:41:A0:84:76:8D:99:8A:37:55:89:F0:81:55:F8:86:B4:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010279
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22CA62F4CE4211EFB0F6BABE762E951A.roa
Signing time: Thu 09 Jan 2025 04:28:12 +0000
ROA not before: Thu 09 Jan 2025 04:28:08 +0000
ROA not after: Fri 09 Jan 2026 04:28:08 +0000
asID: 17561
IP address blocks: 156.245.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66169 (0x10279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 9 04:28:08 2025 GMT
Not After : Jan 9 04:28:08 2026 GMT
Subject: CN=677f505c-f014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:29:4f:d6:8f:72:d8:88:65:6f:d8:df:bb:
7d:17:31:98:94:2c:78:35:6b:58:dc:cd:ee:05:19:
ed:50:37:14:54:6a:7a:7d:0d:42:53:06:13:a1:96:
38:81:27:6d:de:7d:fe:f9:cb:f8:e6:f7:28:08:95:
bf:dc:e4:bc:1e:e7:26:be:72:b8:d8:6b:fd:7e:7c:
53:e9:53:5e:cc:7c:e7:07:e1:17:c7:36:9c:81:db:
55:c4:4d:82:eb:8a:b7:79:3e:ac:f8:a3:0d:fd:cf:
80:2c:0c:c1:18:63:11:a4:ac:a7:51:d4:e8:d8:61:
ae:26:ba:a7:5d:23:d4:29:e7:e4:97:e3:54:77:89:
d0:7b:3c:39:f2:1a:9e:0e:87:cf:cf:5e:85:44:77:
eb:be:d0:ff:99:a6:42:9c:ce:70:3b:31:07:7a:26:
9b:ab:93:45:64:40:f6:50:3b:ea:10:85:ba:63:45:
56:47:d0:53:3f:3b:66:b4:f7:56:38:4a:d8:b4:a0:
26:2b:02:7d:a2:08:95:17:af:80:56:5e:6b:2b:7c:
b1:81:c2:bb:39:86:2d:67:8a:e0:4b:ed:2e:0b:00:
3f:e6:56:3e:44:74:ee:85:ac:82:5c:2e:5d:fa:d0:
d8:91:72:91:86:9e:47:0b:a8:ae:17:6f:e1:bc:2c:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:45:2C:41:A0:84:76:8D:99:8A:37:55:89:F0:81:55:F8:86:B4:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22CA62F4CE4211EFB0F6BABE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1b:9d:a3:9a:15:17:7b:0a:05:0c:59:16:a5:0d:06:ab:53:
51:75:da:ba:d1:23:d3:68:8c:39:04:49:81:32:01:a0:8f:42:
8d:18:db:ea:a3:96:a9:06:15:f7:fe:cf:a1:d6:ca:1f:0a:1f:
76:f4:40:41:32:c8:88:6f:62:7c:39:d9:a4:e0:d3:75:a7:b8:
bf:a0:f3:86:6a:6e:de:91:b2:8f:4d:35:b7:9f:7f:fc:79:ce:
d8:ec:5f:ff:57:4f:07:b8:d2:26:b2:24:1b:9d:46:6a:16:1a:
e5:43:1c:a6:80:a1:54:3e:dd:cf:31:74:15:d9:5c:17:2b:76:
73:3f:ac:99:a3:a9:1f:a9:1a:f0:ea:f6:b0:64:06:c2:8d:18:
6d:6a:51:b6:13:a4:82:25:45:92:39:4d:04:08:a1:69:3a:d9:
fd:aa:02:43:44:10:cd:17:eb:95:95:64:e1:21:ed:3e:35:9a:
f4:88:83:ce:8f:a1:78:c9:ac:aa:78:dd:6e:20:2a:44:7e:cc:
10:cf:a7:20:36:21:ef:85:e6:64:49:4a:81:a3:72:0c:17:6f:
c1:29:ac:f3:83:8b:ce:f1:9a:1b:f5:fe:d7:8e:64:88:33:39:
3d:1e:9a:c5:6a:e3:bd:55:cb:a4:26:10:20:49:3c:52:d7:eb:
fb:54:54:7a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQJ5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA5MDQyODA4WhcNMjYwMTA5MDQyODA4WjAYMRYw
FAYDVQQDEw02NzdmNTA1Yy1mMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu5YpT9aPctiIZW/Y37t9FzGYlCx4NWtY3M3uBRntUDcUVGp6fQ1CUwYT
oZY4gSdt3n3++cv45vcoCJW/3OS8HucmvnK42Gv9fnxT6VNezHznB+EXxzacgdtV
xE2C64q3eT6s+KMN/c+ALAzBGGMRpKynUdTo2GGuJrqnXSPUKefkl+NUd4nQezw5
8hqeDofPz16FRHfrvtD/maZCnM5wOzEHeiabq5NFZED2UDvqEIW6Y0VWR9BTPztm
tPdWOErYtKAmKwJ9ogiVF6+AVl5rK3yxgcK7OYYtZ4rgS+0uCwA/5lY+RHTuhayC
XC5d+tDYkXKRhp5HC6iuF2/hvCz2kQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDNF
LEGghHaNmYo3VYnwgVX4hrSTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMkNBNjJGNENFNDIxMUVGQjBGNkJBQkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPVwMA0GCSqGSIb3DQEBCwUA
A4IBAQATG52jmhUXewoFDFkWpQ0Gq1NRddq60SPTaIw5BEmBMgGgj0KNGNvqo5ap
BhX3/s+h1sofCh929EBBMsiIb2J8Odmk4NN1p7i/oPOGam7ekbKPTTW3n3/8ec7Y
7F//V08HuNImsiQbnUZqFhrlQxymgKFUPt3PMXQV2VwXK3ZzP6yZo6kfqRrw6vaw
ZAbCjRhtalG2E6SCJUWSOU0ECKFpOtn9qgJDRBDNF+uVlWThIe0+NZr0iIPOj6F4
yayqeN1uICpEfswQz6cgNiHvheZkSUqBo3IMF2/BKazzg4vO8Zob9f7XjmSIMzk9
HprFauO9VcukJhAgSTxS1+v7VFR6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:46 2025 by rpki-client