Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2531CA42C95511EFA15CF254762E951A.roa
File: 2531CA42C95511EFA15CF254762E951A.roa (raw, json)
Hash identifier: +d7u+rtbOhvQYyCTvgKqbR1XS8LDrqqfOWk8tSer6po=
Subject key identifier: 7C:80:31:6B:65:2F:FF:0F:CB:BC:D8:E1:FF:66:44:FF:CA:99:37:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F3EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2531CA42C95511EFA15CF254762E951A.roa
Signing time: Thu 02 Jan 2025 22:01:41 +0000
ROA not before: Thu 02 Jan 2025 22:01:37 +0000
ROA not after: Sat 13 Dec 2025 22:01:37 +0000
asID: 984
IP address blocks: 156.226.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62446 (0xf3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 22:01:37 2025 GMT
Not After : Dec 13 22:01:37 2025 GMT
Subject: CN=67770cc4-6edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:e4:53:8b:33:70:7e:0d:7b:89:b3:c1:5d:
c0:e6:ea:eb:fc:c6:67:a6:9a:88:19:99:63:8d:84:
96:90:49:6b:39:fa:73:c2:a9:de:e2:aa:1b:4d:9a:
47:31:53:db:4d:38:d8:9e:04:34:3f:2d:75:55:4e:
f6:10:e6:02:f0:26:f5:9f:02:7e:e4:67:6b:d6:5d:
b2:63:5f:3e:00:af:73:e9:23:f0:55:bb:55:df:46:
8b:c3:09:77:1f:e9:83:dc:03:70:dc:05:10:9f:15:
dc:0b:1d:7d:3a:53:76:32:70:d6:7e:66:52:bf:45:
e5:39:a6:6c:d3:05:ec:85:0e:97:22:e6:8c:a9:af:
d6:1a:28:8b:a3:09:db:ed:d6:6f:cd:40:42:04:65:
10:da:17:12:76:20:cd:5d:62:30:06:d0:f8:0c:11:
94:f1:a7:59:8f:f3:bf:ec:5e:5a:85:55:0b:e1:91:
1f:23:f4:cb:ac:18:7c:95:ef:b6:80:04:a2:d8:f4:
ac:ba:38:72:ea:2e:48:e2:bb:5d:8c:5d:90:58:d9:
4c:31:c6:7b:b9:2e:f8:aa:49:99:ee:d8:78:ed:82:
36:3b:1f:94:82:93:d0:49:04:74:27:dd:60:56:b8:
f0:d1:cd:18:3e:a0:de:85:b3:80:20:be:7f:ee:ac:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:31:6B:65:2F:FF:0F:CB:BC:D8:E1:FF:66:44:FF:CA:99:37:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2531CA42C95511EFA15CF254762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.143.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e6:fd:e7:43:b9:e6:1f:f5:e3:72:0e:7f:86:0c:24:ef:45:
7b:6c:6f:29:cb:86:7e:e7:07:5d:af:bb:bb:6b:01:37:1c:4b:
2c:d6:77:a2:f4:04:14:97:96:68:ca:87:aa:3b:b0:24:0c:ca:
a9:ce:d9:d6:9d:67:20:b3:8a:62:78:49:da:4a:25:5e:ac:16:
d6:ad:3b:ec:15:d3:6f:75:d9:6c:ff:28:f8:6e:71:06:70:17:
3e:9f:77:22:d0:f8:cc:1f:e1:3f:cc:3f:25:7a:7e:89:7f:88:
56:8d:68:da:c3:36:be:95:51:f9:89:67:4d:85:44:fe:b6:ae:
09:b5:e1:4d:99:7c:37:fe:d1:66:9c:f9:fc:8f:86:81:4a:c3:
2a:a2:a4:59:31:bd:46:65:5e:96:8d:46:36:48:f1:66:57:7e:
aa:51:61:7e:33:e1:78:69:8d:fb:1b:b9:0b:ba:00:52:2d:2b:
b5:8e:73:87:08:ee:65:ce:97:33:3b:7f:ad:74:85:e9:34:32:
ac:70:14:80:7b:57:5d:56:10:f0:9e:c2:29:e9:31:dc:8e:43:
77:a9:57:07:0b:68:cc:65:06:70:7f:d6:8c:b2:87:e8:87:e9:
4b:3d:e5:70:2f:40:79:49:5a:bc:ee:23:11:1d:64:ef:16:6a:
a4:ca:8a:a2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPPuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjIwMTM3WhcNMjUxMjEzMjIwMTM3WjAYMRYw
FAYDVQQDEw02Nzc3MGNjNC02ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxubkU4szcH4Ne4mzwV3A5urr/MZnppqIGZljjYSWkElrOfpzwqne4qob
TZpHMVPbTTjYngQ0Py11VU72EOYC8Cb1nwJ+5Gdr1l2yY18+AK9z6SPwVbtV30aL
wwl3H+mD3ANw3AUQnxXcCx19OlN2MnDWfmZSv0XlOaZs0wXshQ6XIuaMqa/WGiiL
ownb7dZvzUBCBGUQ2hcSdiDNXWIwBtD4DBGU8adZj/O/7F5ahVUL4ZEfI/TLrBh8
le+2gASi2PSsujhy6i5I4rtdjF2QWNlMMcZ7uS74qkmZ7th47YI2Ox+UgpPQSQR0
J91gVrjw0c0YPqDehbOAIL5/7qx9fwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHyA
MWtlL/8Py7zY4f9mRP/KmTc8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNTMxQ0E0MkM5NTUxMUVGQTE1Q0YyNTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOKPMA0GCSqGSIb3DQEBCwUA
A4IBAQAX5v3nQ7nmH/Xjcg5/hgwk70V7bG8py4Z+5wddr7u7awE3HEss1nei9AQU
l5ZoyoeqO7AkDMqpztnWnWcgs4pieEnaSiVerBbWrTvsFdNvddls/yj4bnEGcBc+
n3ci0PjMH+E/zD8len6Jf4hWjWjawza+lVH5iWdNhUT+tq4JteFNmXw3/tFmnPn8
j4aBSsMqoqRZMb1GZV6WjUY2SPFmV36qUWF+M+F4aY37G7kLugBSLSu1jnOHCO5l
zpczO3+tdIXpNDKscBSAe1ddVhDwnsIp6THcjkN3qVcHC2jMZQZwf9aMsofoh+lL
PeVwL0B5SVq87iMRHWTvFmqkyoqi
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:58 2025 by rpki-client