Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2513F280CCD711EF834B74A8762E951A.roa
File: 2513F280CCD711EF834B74A8762E951A.roa (raw, json)
Hash identifier: mGv/YEr5P/o5kV8MIUvCw1zb7PrSoI39brWrPuy/ihY=
Subject key identifier: D1:12:3D:8C:4A:41:91:26:0D:D7:1A:A6:CC:A0:97:43:EB:1D:20:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2513F280CCD711EF834B74A8762E951A.roa
Signing time: Tue 07 Jan 2025 09:09:48 +0000
ROA not before: Tue 07 Jan 2025 09:09:44 +0000
ROA not after: Mon 13 Dec 2027 09:09:44 +0000
asID: 17561
IP address blocks: 156.233.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64277 (0xfb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:09:44 2025 GMT
Not After : Dec 13 09:09:44 2027 GMT
Subject: CN=677cef5c-ec8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:4b:d6:6a:3a:68:4d:d9:a5:3f:a4:40:c2:
c2:ad:7e:20:e5:5d:9a:6f:ef:64:43:a3:2d:65:00:
ed:11:46:1c:d3:4d:47:31:3a:6c:13:1c:94:64:d6:
04:29:1d:77:7e:88:66:48:c3:5b:ef:2c:e4:8d:dd:
a3:f6:ec:a9:19:f2:c7:f2:2a:b2:49:57:ac:43:18:
7c:5c:3d:8f:97:0d:d8:ba:a2:c3:dc:e8:8b:39:f2:
f5:24:0f:47:90:34:5c:39:6f:ab:74:0b:b0:47:73:
3b:33:30:23:c1:b9:b8:54:18:ee:8c:40:67:8b:7a:
46:4b:64:5d:4e:57:f7:aa:58:82:3e:31:cf:b3:c2:
74:d6:5f:a9:2b:9f:cc:51:ef:93:a4:7b:0a:4d:42:
ae:27:02:9a:cc:6a:4b:7d:d9:1c:fb:cb:95:ed:9a:
ba:3f:aa:52:88:b0:e4:c5:a2:09:72:e9:6f:d3:63:
ab:7c:25:ef:e4:f0:52:ff:ec:91:15:56:c1:ef:82:
bb:59:d7:71:6d:17:bf:96:cf:c9:d8:37:36:e8:27:
61:2b:72:dc:96:bb:5e:c6:47:92:4b:eb:6e:9d:05:
df:42:47:8d:f3:40:c5:73:04:81:88:eb:aa:0b:21:
b8:eb:9b:82:21:56:82:ed:2e:af:8e:8a:83:7e:39:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:3D:8C:4A:41:91:26:0D:D7:1A:A6:CC:A0:97:43:EB:1D:20:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2513F280CCD711EF834B74A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a8:e6:82:ca:57:71:a2:b3:4a:af:30:f7:a5:ff:01:e0:c4:
0a:63:99:cc:0e:d9:5c:3f:f6:2d:c5:96:89:31:bb:b0:2b:68:
fd:e3:fd:fb:55:48:f9:7c:81:be:ca:89:9b:a0:ff:0b:58:74:
7f:44:7f:f3:6f:0e:69:b2:61:4a:ee:8e:34:ce:32:4f:2a:b0:
b6:06:e6:1c:50:a9:65:8e:c9:7d:26:69:26:eb:a2:08:b8:95:
89:06:95:d6:53:1f:a6:e6:dc:ca:7c:84:ce:d8:e4:6d:0c:7f:
85:a0:0b:c7:f1:90:ec:4f:c5:65:b2:c0:e4:2b:59:82:d5:51:
f4:cf:81:75:e5:72:48:51:82:d7:d7:15:45:54:c9:96:d2:8c:
e7:51:5d:b8:f1:1b:bd:75:c8:d6:8a:71:48:18:ae:b1:00:85:
6c:c0:63:05:b0:4b:59:87:ec:68:7b:9b:f9:95:87:9d:06:50:
51:d6:22:f4:93:bc:da:90:57:b2:f0:0d:07:69:31:b5:6f:d3:
b1:18:0d:43:9a:75:01:19:79:4d:d4:1b:74:16:50:fd:e7:f6:
0b:d3:d9:f9:a8:b5:95:44:32:ec:18:f6:4b:ba:29:ae:8d:d7:
55:0c:c8:08:9e:13:32:82:77:22:34:0e:a7:9a:76:36:4a:a7:
b1:75:72:db
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPsVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDkwOTQ0WhcNMjcxMjEzMDkwOTQ0WjAYMRYw
FAYDVQQDEw02NzdjZWY1Yy1lYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzf5L1mo6aE3ZpT+kQMLCrX4g5V2ab+9kQ6MtZQDtEUYc001HMTpsExyU
ZNYEKR13fohmSMNb7yzkjd2j9uypGfLH8iqySVesQxh8XD2Plw3YuqLD3OiLOfL1
JA9HkDRcOW+rdAuwR3M7MzAjwbm4VBjujEBni3pGS2RdTlf3qliCPjHPs8J01l+p
K5/MUe+TpHsKTUKuJwKazGpLfdkc+8uV7Zq6P6pSiLDkxaIJculv02OrfCXv5PBS
/+yRFVbB74K7WddxbRe/ls/J2Dc26CdhK3LclrtexkeSS+tunQXfQkeN80DFcwSB
iOuqCyG465uCIVaC7S6vjoqDfjmeGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNES
PYxKQZEmDdcapsygl0PrHSAKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNTEzRjI4MENDRDcxMUVGODM0Qjc0QTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOm0MA0GCSqGSIb3DQEBCwUA
A4IBAQBrqOaCyldxorNKrzD3pf8B4MQKY5nMDtlcP/YtxZaJMbuwK2j94/37VUj5
fIG+yomboP8LWHR/RH/zbw5psmFK7o40zjJPKrC2BuYcUKlljsl9Jmkm66IIuJWJ
BpXWUx+m5tzKfITO2ORtDH+FoAvH8ZDsT8VlssDkK1mC1VH0z4F15XJIUYLX1xVF
VMmW0oznUV248Ru9dcjWinFIGK6xAIVswGMFsEtZh+xoe5v5lYedBlBR1iL0k7za
kFey8A0HaTG1b9OxGA1DmnUBGXlN1Bt0FlD95/YL09n5qLWVRDLsGPZLuimujddV
DMgInhMygnciNA6nmnY2SqexdXLb
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:34 2025 by rpki-client