Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24688BCEC95911EF900A806E762E951A.roa
File: 24688BCEC95911EF900A806E762E951A.roa (raw, json)
Hash identifier: A/jrDNFSW+sdsYkSZJlVt+xc/d0XmyE0Qf9oaHgV8dY=
Subject key identifier: 77:CB:E5:E2:B7:2B:C4:A3:9E:F0:FC:6A:CD:C8:A3:B9:AC:D9:A1:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F414
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24688BCEC95911EF900A806E762E951A.roa
Signing time: Thu 02 Jan 2025 22:30:17 +0000
ROA not before: Thu 02 Jan 2025 22:30:14 +0000
ROA not after: Mon 13 Dec 2027 22:30:14 +0000
asID: 17561
IP address blocks: 156.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62484 (0xf414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:30:14 2025 GMT
Not After : Dec 13 22:30:14 2027 GMT
Subject: CN=67771379-a444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:83:c2:22:67:96:66:f6:42:cb:ad:a7:4a:
38:5b:5d:48:6f:e2:ea:67:b1:31:42:2f:b7:e2:9a:
c9:b1:ef:64:51:5f:07:ee:a8:d3:36:ad:0e:9f:e4:
dc:d5:1a:5b:0c:26:60:68:0f:1b:2a:ab:57:4a:03:
0c:c3:98:25:dc:b9:ba:e0:cc:dc:b3:46:ef:58:a1:
6d:fe:dc:be:56:f3:bb:0f:7e:b1:23:d1:9e:1b:f1:
43:01:01:b2:ed:7e:cf:95:de:7c:9b:62:06:7a:01:
90:0d:2c:ef:23:85:5d:8e:ac:38:60:95:e9:3d:9c:
a5:32:92:1c:c3:67:7a:3d:7d:a6:aa:f9:00:cd:e3:
0a:97:78:b9:6a:91:28:d3:21:51:09:0d:97:8e:6e:
79:36:68:c9:d4:c0:ff:63:16:b7:6f:5d:14:a7:19:
1f:52:1f:b5:87:ea:57:f3:c8:07:dc:28:a8:0f:e5:
09:a5:a0:42:08:47:33:d7:85:15:cd:68:92:23:11:
1d:40:25:6a:c1:39:17:98:81:bc:80:ee:e9:15:4a:
4a:65:e5:e7:13:5d:5e:21:f9:1a:7d:7a:61:df:18:
e1:84:01:de:3b:07:c4:f7:31:2d:55:7a:ab:92:bd:
31:8f:b5:ae:68:9a:61:0d:ac:f4:bd:d5:3f:17:6d:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:E5:E2:B7:2B:C4:A3:9E:F0:FC:6A:CD:C8:A3:B9:AC:D9:A1:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24688BCEC95911EF900A806E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1b:9f:cb:c2:b1:34:6f:74:1a:f9:f7:fc:20:d2:30:d0:fa:
17:2f:33:52:2a:07:6e:53:f0:ea:18:86:e9:f0:0f:03:9e:27:
1b:f9:91:18:db:64:49:fc:e6:f7:e9:3f:9d:87:d3:33:c2:2c:
6c:71:b8:e4:72:3e:f5:a1:db:77:6a:be:eb:c0:50:a8:c6:8b:
1d:a7:a8:ed:be:38:27:3e:04:da:4a:5b:89:d2:ac:56:11:52:
32:94:1b:bc:2b:f0:17:d0:d3:cd:e7:a4:ff:2f:d9:4f:6e:98:
87:1c:c2:12:d6:10:c5:bd:4e:b1:d3:a4:1c:8d:ae:a2:12:e1:
09:78:32:49:2a:3e:de:8a:b7:15:e8:bd:17:3f:eb:7f:3d:c4:
9b:0d:59:8b:2d:c4:0d:c6:0b:47:1f:60:d3:fa:eb:35:7a:99:
9f:6e:f2:b6:65:2e:c5:30:e4:79:d1:d8:10:62:7c:74:41:30:
2c:65:d2:04:2d:9e:ce:1f:e4:67:63:11:63:48:61:da:57:8d:
d5:0b:1d:0e:1b:70:e9:c8:0f:b9:83:29:f9:0c:35:88:2e:c3:
73:d4:96:54:19:67:af:76:9e:05:dd:24:d3:b5:fe:58:d5:06:
59:fc:0a:e2:0f:fa:5c:45:6a:15:01:09:64:1b:a5:06:04:1c:
16:d3:ea:43
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPQUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjIzMDE0WhcNMjcxMjEzMjIzMDE0WjAYMRYw
FAYDVQQDEw02Nzc3MTM3OS1hNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvFGDwiJnlmb2Qsutp0o4W11Ib+LqZ7ExQi+34prJse9kUV8H7qjTNq0O
n+Tc1RpbDCZgaA8bKqtXSgMMw5gl3Lm64Mzcs0bvWKFt/ty+VvO7D36xI9GeG/FD
AQGy7X7Pld58m2IGegGQDSzvI4Vdjqw4YJXpPZylMpIcw2d6PX2mqvkAzeMKl3i5
apEo0yFRCQ2Xjm55NmjJ1MD/Yxa3b10UpxkfUh+1h+pX88gH3CioD+UJpaBCCEcz
14UVzWiSIxEdQCVqwTkXmIG8gO7pFUpKZeXnE11eIfkafXph3xjhhAHeOwfE9zEt
VXqrkr0xj7WuaJphDaz0vdU/F20LqwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHfL
5eK3K8SjnvD8as3Io7ms2aEaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDY4OEJDRUM5NTkxMUVGOTAwQTgwNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOK4MA0GCSqGSIb3DQEBCwUA
A4IBAQBxG5/LwrE0b3Qa+ff8INIw0PoXLzNSKgduU/DqGIbp8A8Dnicb+ZEY22RJ
/Ob36T+dh9Mzwixscbjkcj71odt3ar7rwFCoxosdp6jtvjgnPgTaSluJ0qxWEVIy
lBu8K/AX0NPN56T/L9lPbpiHHMIS1hDFvU6x06Qcja6iEuEJeDJJKj7eircV6L0X
P+t/PcSbDVmLLcQNxgtHH2DT+us1epmfbvK2ZS7FMOR50dgQYnx0QTAsZdIELZ7O
H+RnYxFjSGHaV43VCx0OG3DpyA+5gyn5DDWILsNz1JZUGWevdp4F3STTtf5Y1QZZ
/AriD/pcRWoVAQlkG6UGBBwW0+pD
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:32 2025 by rpki-client