Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/252DF392CD7211EFB5A19E8E762E951A.roa
File: 252DF392CD7211EFB5A19E8E762E951A.roa (raw, json)
Hash identifier: VSFn3yykWa4u8lluD6BiHepa94unEoEfJ9VXQWAwSOw=
Subject key identifier: BC:A9:80:3E:B3:F4:AC:D7:B0:A6:FB:79:43:4F:04:AF:51:CA:8E:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/252DF392CD7211EFB5A19E8E762E951A.roa
Signing time: Wed 08 Jan 2025 03:39:20 +0000
ROA not before: Wed 08 Jan 2025 03:39:17 +0000
ROA not after: Mon 13 Dec 2027 03:39:17 +0000
asID: 17561
IP address blocks: 156.248.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65427 (0xff93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:39:17 2025 GMT
Not After : Dec 13 03:39:17 2027 GMT
Subject: CN=677df368-30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:d6:8f:ed:00:da:6b:17:af:17:cd:49:3c:
e8:f0:2d:38:56:5e:88:f8:70:08:23:4e:e0:8f:7d:
96:7b:fa:83:85:fa:e0:4b:72:71:ac:81:0b:dc:45:
a8:04:bd:65:54:79:01:0f:b1:62:83:9b:b1:7d:18:
f1:b4:1d:61:c4:bb:68:98:57:71:29:db:dd:8a:87:
55:9d:b5:7a:9f:ee:e3:07:65:95:8b:10:ac:fe:ef:
23:53:aa:4e:a9:4d:b1:03:61:66:53:d1:9c:c1:c2:
ef:41:d4:bf:d5:c5:c7:1a:7a:51:f4:e8:8d:5e:f0:
33:b9:e4:94:26:a7:2d:5d:0d:6a:68:ba:c7:1e:c7:
fd:83:a6:7e:bb:ec:9e:56:df:c8:b0:c0:03:05:7a:
a7:d2:ec:36:a6:05:06:6c:fc:04:3d:c3:cb:03:61:
f6:86:1f:7b:fb:df:07:db:27:b0:4f:7a:de:f5:e4:
c4:23:f1:a0:15:b6:9b:2c:2e:29:1c:a0:0d:c5:20:
42:79:4c:a6:74:5f:ce:90:a3:59:cf:0b:c4:ba:a5:
75:5d:21:d2:67:09:6c:c9:a5:24:e9:a2:e5:6f:cb:
ee:13:80:65:1f:0e:fe:a1:c2:4c:c7:fa:fa:63:1d:
1b:66:9f:9e:02:53:1a:7a:35:24:77:c6:38:b5:6e:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A9:80:3E:B3:F4:AC:D7:B0:A6:FB:79:43:4F:04:AF:51:CA:8E:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/252DF392CD7211EFB5A19E8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.67.0/24
Signature Algorithm: sha256WithRSAEncryption
51:75:6f:1d:ef:83:eb:60:1e:3b:5b:49:66:2d:ed:17:16:7d:
59:20:6f:02:f4:8e:e9:65:98:84:41:03:a7:e2:9f:40:84:0c:
08:42:7f:63:0d:7a:1d:f7:fd:2f:dd:7c:1f:3e:e1:b5:de:b9:
12:14:0f:86:f7:df:1f:09:3b:7e:20:7d:27:5e:21:96:69:5b:
c2:7f:64:b8:1a:89:5e:7f:78:f4:14:c0:ec:ad:b2:62:59:21:
c8:a5:6b:32:cd:39:ba:ab:22:53:76:50:95:d3:3c:0b:70:25:
33:d7:fd:ec:e7:b3:d1:d6:d1:ad:57:3b:ba:20:90:21:73:af:
73:0a:e7:0e:de:fc:12:56:7f:2d:a9:20:7a:dd:ba:3c:34:ff:
d2:a7:8d:2b:cf:06:12:c8:7b:ab:60:53:f5:25:f5:74:e4:c3:
36:d7:8f:17:39:6d:03:10:be:35:4f:53:92:33:43:43:b8:7d:
0d:da:c5:df:b5:92:1b:fb:24:e1:07:e8:82:6b:c2:0b:f4:0a:
b0:10:f5:a3:5d:73:50:1c:86:ae:72:70:51:9c:59:36:95:09:
46:af:fe:c2:f2:05:91:55:45:2d:06:37:ab:35:50:35:f3:e5:
cb:97:9f:38:3d:2a:65:73:86:b5:3e:a6:4b:a4:7e:44:9c:f5:
46:2f:5c:19
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP+TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDMzOTE3WhcNMjcxMjEzMDMzOTE3WjAYMRYw
FAYDVQQDEw02NzdkZjM2OC0zMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx9vWj+0A2msXrxfNSTzo8C04Vl6I+HAII07gj32We/qDhfrgS3JxrIEL
3EWoBL1lVHkBD7Fig5uxfRjxtB1hxLtomFdxKdvdiodVnbV6n+7jB2WVixCs/u8j
U6pOqU2xA2FmU9GcwcLvQdS/1cXHGnpR9OiNXvAzueSUJqctXQ1qaLrHHsf9g6Z+
u+yeVt/IsMADBXqn0uw2pgUGbPwEPcPLA2H2hh97+98H2yewT3re9eTEI/GgFbab
LC4pHKANxSBCeUymdF/OkKNZzwvEuqV1XSHSZwlsyaUk6aLlb8vuE4BlHw7+ocJM
x/r6Yx0bZp+eAlMaejUkd8Y4tW5hVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLyp
gD6z9KzXsKb7eUNPBK9Ryo6IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNTJERjM5MkNENzIxMUVGQjVBMTlFOEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPhDMA0GCSqGSIb3DQEBCwUA
A4IBAQBRdW8d74PrYB47W0lmLe0XFn1ZIG8C9I7pZZiEQQOn4p9AhAwIQn9jDXod
9/0v3XwfPuG13rkSFA+G998fCTt+IH0nXiGWaVvCf2S4Golef3j0FMDsrbJiWSHI
pWsyzTm6qyJTdlCV0zwLcCUz1/3s57PR1tGtVzu6IJAhc69zCucO3vwSVn8tqSB6
3bo8NP/Sp40rzwYSyHurYFP1JfV05MM2148XOW0DEL41T1OSM0NDuH0N2sXftZIb
+yThB+iCa8IL9AqwEPWjXXNQHIaucnBRnFk2lQlGr/7C8gWRVUUtBjerNVA18+XL
l584PSplc4a1PqZLpH5EnPVGL1wZ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:58 2025 by rpki-client