Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318100A8CD8611EF8121F68D762E951A.roa
File: 318100A8CD8611EF8121F68D762E951A.roa (raw, json)
Hash identifier: IcosjtdSMGmG9ko0mVTEE3Fit9vFzWVgW3r+ZzXWFyw=
Subject key identifier: ED:82:8D:48:70:D7:D5:4E:90:CC:87:A8:8C:B0:D4:51:85:B5:DA:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01002B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318100A8CD8611EF8121F68D762E951A.roa
Signing time: Wed 08 Jan 2025 06:02:51 +0000
ROA not before: Wed 08 Jan 2025 06:02:47 +0000
ROA not after: Sat 13 Dec 2025 06:02:47 +0000
asID: 984
IP address blocks: 156.252.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65579 (0x1002b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 06:02:47 2025 GMT
Not After : Dec 13 06:02:47 2025 GMT
Subject: CN=677e150b-c217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:8d:86:19:fe:02:b9:9a:8a:46:67:cf:5d:
b6:2a:2d:b2:6d:da:bb:b9:dd:fa:94:11:dc:7d:c1:
67:18:bf:55:96:a1:ac:a9:9c:59:62:0e:c7:24:11:
51:44:f2:b1:94:6a:dc:ae:be:d1:2f:7d:7b:a8:50:
50:ac:a6:b4:52:65:56:ef:93:f6:ab:12:4b:6a:71:
e4:6e:8e:28:d6:57:3a:0b:c1:8e:bc:f5:f7:ca:71:
ce:99:9c:26:44:a4:aa:dd:93:92:22:b8:a1:c3:49:
41:9f:ca:4b:54:d1:b5:37:a6:8b:c4:80:ee:9c:92:
84:ef:40:6f:6d:54:cc:89:af:ed:91:59:09:f6:3e:
da:54:b9:68:1f:b0:91:ee:81:bd:37:ee:db:fe:bd:
11:c5:9c:ba:ab:a8:01:17:88:0b:b0:70:f9:ff:a9:
27:f3:4c:23:4f:aa:c7:b9:19:12:e2:c3:cc:ba:fa:
d7:38:ad:4d:fb:f3:36:76:87:2f:6f:46:4a:17:e6:
de:a4:62:ee:e4:a8:dc:06:c3:af:d1:18:cc:40:e6:
ab:57:af:22:3a:1f:51:7a:e2:38:9a:c5:f8:22:92:
51:dc:34:04:ca:39:aa:eb:9a:10:48:65:4a:55:db:
d6:68:0c:c4:6b:cc:ed:82:d4:cb:16:ba:97:c7:33:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:8D:48:70:D7:D5:4E:90:CC:87:A8:8C:B0:D4:51:85:B5:DA:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318100A8CD8611EF8121F68D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.33.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0b:4c:a6:e8:8e:32:ad:10:13:0d:21:56:fa:ef:12:04:2d:
39:16:69:65:f0:bd:34:4d:f7:5c:f6:f0:0e:70:5c:c0:05:00:
6d:aa:45:21:af:d0:68:26:09:3c:b2:43:5f:8b:a3:9d:02:59:
4b:af:9d:02:17:31:af:d7:c8:af:54:d4:0b:5e:23:ae:cf:77:
2b:dc:22:dc:cb:f9:c7:4b:ee:2f:49:3a:ac:23:d1:6c:e5:8d:
ad:7c:69:d4:50:d3:f3:f8:06:ab:b1:1e:28:f2:01:36:63:f2:
31:d4:64:9d:32:9a:57:27:19:80:0f:77:73:de:f4:14:07:17:
64:a8:e7:1b:62:09:da:f4:a1:7d:20:6d:2d:62:a1:e1:d9:f6:
c1:43:a2:e7:4e:03:e1:90:b2:6f:ac:1e:1b:8e:28:85:1d:99:
36:7e:ca:49:cd:77:29:0f:a4:13:12:f8:c3:f2:68:40:10:b2:
b6:1d:9e:96:67:c2:ac:74:6f:55:9f:23:9c:47:99:e1:ab:ce:
f5:9c:e5:3c:0d:73:8c:42:d1:0d:71:e0:3d:fc:1b:a8:ad:e9:
1e:7e:41:7f:77:b2:a4:3f:12:b3:24:78:55:10:7a:b7:2a:f1:
de:9b:ff:6e:b4:0f:ce:6d:74:66:c9:bc:fa:a7:38:ad:dc:f0:
18:45:73:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQArMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDYwMjQ3WhcNMjUxMjEzMDYwMjQ3WjAYMRYw
FAYDVQQDEw02NzdlMTUwYi1jMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmvuNhhn+ArmaikZnz122Ki2ybdq7ud36lBHcfcFnGL9VlqGsqZxZYg7H
JBFRRPKxlGrcrr7RL317qFBQrKa0UmVW75P2qxJLanHkbo4o1lc6C8GOvPX3ynHO
mZwmRKSq3ZOSIrihw0lBn8pLVNG1N6aLxIDunJKE70BvbVTMia/tkVkJ9j7aVLlo
H7CR7oG9N+7b/r0RxZy6q6gBF4gLsHD5/6kn80wjT6rHuRkS4sPMuvrXOK1N+/M2
docvb0ZKF+bepGLu5KjcBsOv0RjMQOarV68iOh9ReuI4msX4IpJR3DQEyjmq65oQ
SGVKVdvWaAzEa8ztgtTLFrqXxzOPkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO2C
jUhw19VOkMyHqIyw1FGFtdo5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTgxMDBBOENEODYxMUVGODEyMUY2OEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwhMA0GCSqGSIb3DQEBCwUA
A4IBAQCvC0ym6I4yrRATDSFW+u8SBC05Fmll8L00Tfdc9vAOcFzABQBtqkUhr9Bo
Jgk8skNfi6OdAllLr50CFzGv18ivVNQLXiOuz3cr3CLcy/nHS+4vSTqsI9Fs5Y2t
fGnUUNPz+AarsR4o8gE2Y/Ix1GSdMppXJxmAD3dz3vQUBxdkqOcbYgna9KF9IG0t
YqHh2fbBQ6LnTgPhkLJvrB4bjiiFHZk2fspJzXcpD6QTEvjD8mhAELK2HZ6WZ8Ks
dG9VnyOcR5nhq871nOU8DXOMQtENceA9/BuorekefkF/d7KkPxKzJHhVEHq3KvHe
m/9utA/ObXRmybz6pzit3PAYRXOD
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:55 2025 by rpki-client