Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/244EEAD8CCFC11EF9F6E2490762E951A.roa
File: 244EEAD8CCFC11EF9F6E2490762E951A.roa (raw, json)
Hash identifier: F7OJrkE4VYWtLIwHi6Ma6QwhAKMRZl54xNmcwSXajhc=
Subject key identifier: 9F:1A:06:0C:0F:7A:A6:22:F6:18:6A:DC:D8:66:4B:81:6A:36:0C:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/244EEAD8CCFC11EF9F6E2490762E951A.roa
Signing time: Tue 07 Jan 2025 13:34:38 +0000
ROA not before: Tue 07 Jan 2025 13:34:35 +0000
ROA not after: Sat 13 Dec 2025 13:34:35 +0000
asID: 984
IP address blocks: 156.238.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64585 (0xfc49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:34:35 2025 GMT
Not After : Dec 13 13:34:35 2025 GMT
Subject: CN=677d2d6e-df0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:be:77:20:d3:0b:32:b9:62:b3:8a:82:13:
db:33:88:10:d2:50:5a:35:84:f6:9d:c6:63:af:51:
43:03:62:1a:ac:66:32:f3:1b:5d:41:66:9e:4f:61:
c1:49:fe:fa:af:f2:b2:23:94:a3:f2:47:28:52:30:
92:0c:8c:5f:05:58:7c:1c:76:f5:7a:72:e0:f7:54:
56:84:1a:41:d6:f9:05:27:f9:b4:81:c2:1d:a0:e6:
59:5f:a0:7c:29:55:dd:6d:09:c1:ce:be:cc:46:a0:
9e:1f:29:c8:d1:78:52:13:79:38:44:71:3a:e1:43:
96:85:0d:cd:75:1c:2c:a3:87:01:87:24:62:2f:c5:
65:e0:c2:af:73:5a:0d:61:c3:fd:61:55:c1:48:ee:
cc:af:41:23:f9:d8:34:ff:54:bc:86:fa:5e:44:90:
68:c6:be:23:1a:57:08:21:e7:27:b5:5e:01:a0:07:
df:1e:a2:b3:26:a4:92:ed:a6:a6:cb:ef:6d:da:70:
30:27:b0:93:24:13:ba:d0:eb:2f:2f:59:f7:dd:11:
92:8c:2a:ff:f0:aa:57:47:2b:0e:ad:0d:85:fa:75:
67:6b:91:63:72:6a:61:0b:3e:68:66:b8:e0:44:48:
7f:57:a3:12:77:7e:72:3c:af:01:61:52:13:de:48:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:06:0C:0F:7A:A6:22:F6:18:6A:DC:D8:66:4B:81:6A:36:0C:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/244EEAD8CCFC11EF9F6E2490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.89.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a1:9e:07:a9:f4:92:fb:3a:f2:ab:1b:24:54:7c:48:19:dc:
bc:09:32:40:e5:c0:5a:6a:a9:a4:ac:3a:4d:97:d5:98:91:e2:
2c:6a:86:8d:40:fa:84:c9:25:04:f2:8c:c0:91:31:85:dc:47:
db:d2:ab:d3:93:b4:b7:96:1e:99:7a:38:ff:81:a2:53:e8:11:
74:8d:a9:1e:62:e9:46:34:ec:63:1c:78:4b:50:aa:53:d4:a4:
8a:96:9c:bd:76:ba:96:9c:07:28:c7:46:60:aa:27:03:ba:1a:
c2:0b:9a:63:bd:77:d1:bd:71:db:ac:ae:74:51:95:a5:db:93:
4b:65:be:49:e8:a9:f1:c2:35:d7:2a:51:e1:98:c5:a8:08:dc:
55:65:b9:fd:5a:e1:9c:6a:44:98:0a:61:84:c0:20:ec:d7:8f:
e6:e4:9b:0b:cd:c3:87:a6:85:ff:82:94:07:6d:3f:d2:4b:af:
6e:a5:af:ee:8f:12:ff:52:c2:76:cc:42:f1:a3:6d:63:db:f2:
6a:ee:ae:f1:f4:f6:2c:95:e1:33:16:48:2d:2c:f3:29:fb:2a:
9e:87:11:7d:45:5d:67:8a:78:7d:6b:01:f0:aa:f3:31:7e:88:
64:6e:62:06:7f:12:d8:28:6c:a0:f2:f9:72:5a:48:d8:81:42:
a8:25:59:fc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPxJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTMzNDM1WhcNMjUxMjEzMTMzNDM1WjAYMRYw
FAYDVQQDEw02NzdkMmQ2ZS1kZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3w2+dyDTCzK5YrOKghPbM4gQ0lBaNYT2ncZjr1FDA2IarGYy8xtdQWae
T2HBSf76r/KyI5Sj8kcoUjCSDIxfBVh8HHb1enLg91RWhBpB1vkFJ/m0gcIdoOZZ
X6B8KVXdbQnBzr7MRqCeHynI0XhSE3k4RHE64UOWhQ3NdRwso4cBhyRiL8Vl4MKv
c1oNYcP9YVXBSO7Mr0Ej+dg0/1S8hvpeRJBoxr4jGlcIIecntV4BoAffHqKzJqSS
7aamy+9t2nAwJ7CTJBO60OsvL1n33RGSjCr/8KpXRysOrQ2F+nVna5FjcmphCz5o
ZrjgREh/V6MSd35yPK8BYVIT3kiS8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ8a
BgwPeqYi9hhq3NhmS4FqNgxMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDRFRUFEOENDRkMxMUVGOUY2RTI0OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5ZMA0GCSqGSIb3DQEBCwUA
A4IBAQCToZ4HqfSS+zryqxskVHxIGdy8CTJA5cBaaqmkrDpNl9WYkeIsaoaNQPqE
ySUE8ozAkTGF3Efb0qvTk7S3lh6Zejj/gaJT6BF0jakeYulGNOxjHHhLUKpT1KSK
lpy9drqWnAcox0ZgqicDuhrCC5pjvXfRvXHbrK50UZWl25NLZb5J6KnxwjXXKlHh
mMWoCNxVZbn9WuGcakSYCmGEwCDs14/m5JsLzcOHpoX/gpQHbT/SS69upa/ujxL/
UsJ2zELxo21j2/Jq7q7x9PYsleEzFkgtLPMp+yqehxF9RV1ninh9awHwqvMxfohk
bmIGfxLYKGyg8vlyWkjYgUKoJVn8
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:55 2025 by rpki-client