Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30EA7E14CCA311EF90CC235D762E951A.roa
File: 30EA7E14CCA311EF90CC235D762E951A.roa (raw, json)
Hash identifier: 8L/PxuJL1wQIZGKUpWh2CBek+SlWOUhhv8oxU9BcneQ=
Subject key identifier: 78:CE:E3:31:A8:8B:6A:2A:21:92:0E:5E:75:0C:9E:51:4D:94:15:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30EA7E14CCA311EF90CC235D762E951A.roa
Signing time: Tue 07 Jan 2025 02:57:54 +0000
ROA not before: Tue 07 Jan 2025 02:57:51 +0000
ROA not after: Sat 13 Dec 2025 02:57:51 +0000
asID: 984
IP address blocks: 156.229.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63910 (0xf9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:57:51 2025 GMT
Not After : Dec 13 02:57:51 2025 GMT
Subject: CN=677c9832-4fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:71:56:1f:d1:df:33:9a:d7:fe:35:86:b3:
1a:25:71:5d:b0:0f:a9:2d:e8:4b:75:df:aa:25:5e:
41:f1:37:5b:d9:b7:59:27:2d:67:4d:89:4a:dd:23:
96:48:eb:81:8b:ed:21:3d:c7:30:61:ad:38:f6:bc:
d8:ba:78:86:19:c2:4f:b6:e2:e7:31:87:d7:81:e3:
26:d6:f7:c4:15:ab:55:3e:c5:cd:c7:61:f7:06:12:
cb:68:7a:29:54:89:74:24:54:cc:93:81:f3:c5:a0:
43:22:67:df:0d:78:14:d0:80:af:c0:e5:b6:31:a5:
be:d6:45:e8:5d:5c:88:2f:d1:b8:c9:c1:fa:a7:f3:
ba:02:cc:03:55:18:a1:51:70:35:be:98:e7:78:46:
f2:a9:ac:74:08:b8:e0:01:44:1b:59:03:7b:b6:12:
9c:57:24:70:f8:de:8f:c0:49:45:c8:e9:19:17:d7:
24:04:3a:15:a3:50:bf:21:f5:de:d7:b6:e5:a2:19:
c1:c0:4f:14:42:50:19:6d:fd:68:bc:03:05:a5:5c:
e0:bb:06:a4:75:af:2d:b0:22:05:3f:d8:f7:50:5e:
f6:17:c3:05:3f:b8:a5:6a:d5:a7:76:05:6a:41:57:
29:d0:72:62:d6:32:3e:8b:fe:9f:4e:42:77:2f:da:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:E3:31:A8:8B:6A:2A:21:92:0E:5E:75:0C:9E:51:4D:94:15:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30EA7E14CCA311EF90CC235D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:82:36:4f:70:c0:bc:fd:a5:a6:bc:db:4a:a8:1f:a5:da:8d:
a1:9e:e6:24:03:2e:8d:52:60:49:43:94:4d:0b:75:76:76:86:
06:ca:4a:77:b5:df:ba:9b:fb:8a:5f:cb:68:fd:0d:d5:cd:67:
20:13:28:99:41:cd:e9:f3:0a:37:ae:fc:5d:a9:e1:ca:ee:34:
d0:13:e8:51:56:ab:09:f4:92:d1:61:10:85:9c:c1:57:2f:29:
fa:ff:b9:25:c1:0f:d0:a0:fe:76:3b:b2:80:8a:a7:24:36:50:
00:98:e3:66:6e:45:83:d6:30:3c:fe:ae:0c:65:0f:d5:ca:0d:
d8:63:e8:a0:8c:df:22:e0:b1:d0:ea:88:99:a8:18:65:c0:b7:
a3:69:55:97:74:b6:04:56:b6:0b:4e:76:10:74:62:58:0f:95:
ec:81:b2:16:6e:46:34:29:ba:aa:d9:c5:1f:51:1b:34:25:e6:
fe:4a:7e:ea:7d:c3:37:4e:c4:41:cb:1c:09:24:73:44:b4:68:
8b:f8:0a:21:85:5e:dd:fb:2e:52:78:f5:2d:14:7c:eb:b9:54:
de:a3:95:b5:14:1d:3e:cd:54:0a:ee:ce:51:0f:b8:7b:17:94:
26:6e:54:ce:8d:81:ef:f6:be:ed:1d:ed:48:18:b1:ca:8c:d3:
d6:1b:53:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPmmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDI1NzUxWhcNMjUxMjEzMDI1NzUxWjAYMRYw
FAYDVQQDEw02NzdjOTgzMi00ZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlU1xVh/R3zOa1/41hrMaJXFdsA+pLehLdd+qJV5B8Tdb2bdZJy1nTYlK
3SOWSOuBi+0hPccwYa049rzYuniGGcJPtuLnMYfXgeMm1vfEFatVPsXNx2H3BhLL
aHopVIl0JFTMk4HzxaBDImffDXgU0ICvwOW2MaW+1kXoXVyIL9G4ycH6p/O6AswD
VRihUXA1vpjneEbyqax0CLjgAUQbWQN7thKcVyRw+N6PwElFyOkZF9ckBDoVo1C/
IfXe17blohnBwE8UQlAZbf1ovAMFpVzguwakda8tsCIFP9j3UF72F8MFP7ilatWn
dgVqQVcp0HJi1jI+i/6fTkJ3L9rwvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHjO
4zGoi2oqIZIOXnUMnlFNlBW6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMEVBN0UxNENDQTMxMUVGOTBDQzIzNUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOWtMA0GCSqGSIb3DQEBCwUA
A4IBAQBcgjZPcMC8/aWmvNtKqB+l2o2hnuYkAy6NUmBJQ5RNC3V2doYGykp3td+6
m/uKX8to/Q3VzWcgEyiZQc3p8wo3rvxdqeHK7jTQE+hRVqsJ9JLRYRCFnMFXLyn6
/7klwQ/QoP52O7KAiqckNlAAmONmbkWD1jA8/q4MZQ/Vyg3YY+igjN8i4LHQ6oiZ
qBhlwLejaVWXdLYEVrYLTnYQdGJYD5XsgbIWbkY0Kbqq2cUfURs0Jeb+Sn7qfcM3
TsRByxwJJHNEtGiL+AohhV7d+y5SePUtFHzruVTeo5W1FB0+zVQK7s5RD7h7F5Qm
blTOjYHv9r7tHe1IGLHKjNPWG1Ns
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:01 2025 by rpki-client