Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3340452ECCC911EFBCE05F50762E951A.roa
File: 3340452ECCC911EFBCE05F50762E951A.roa (raw, json)
Hash identifier: s62nKrlF8q6ydXJFnU/TzLp975jd0l7wYLIgN36HD0w=
Subject key identifier: 92:CE:32:E5:F2:6B:6E:FB:A9:C6:FE:AC:E7:0A:3D:C3:6E:74:60:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3340452ECCC911EFBCE05F50762E951A.roa
Signing time: Tue 07 Jan 2025 07:29:59 +0000
ROA not before: Tue 07 Jan 2025 07:29:56 +0000
ROA not after: Sat 13 Dec 2025 07:29:56 +0000
asID: 984
IP address blocks: 156.233.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64106 (0xfa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:29:56 2025 GMT
Not After : Dec 13 07:29:56 2025 GMT
Subject: CN=677cd7f7-00f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:70:c3:8d:8f:25:6e:0d:76:98:0d:76:b0:
fb:a3:ff:8b:4a:e0:4e:02:25:8a:6b:b5:c1:a4:76:
14:58:24:d1:6e:5f:2c:62:41:c8:ac:98:03:fb:1b:
d3:8b:26:ee:ca:01:15:c2:0e:76:0a:c3:34:23:f2:
f1:1c:e1:16:b3:aa:3d:db:5f:1f:67:ff:b1:20:e0:
6c:0a:58:2f:57:62:52:70:b0:df:ef:f5:8d:88:47:
d1:5f:00:3a:a7:d3:0c:83:0f:a9:68:ce:c4:83:c0:
73:70:d9:9c:c7:03:e9:cf:ba:6a:e9:ff:c7:b3:3c:
bc:51:79:5e:eb:42:73:e8:b0:d5:e4:22:43:f4:c9:
5b:5b:e5:e5:ec:f1:46:e0:a8:7d:d9:a9:74:4a:6f:
4f:fb:92:1c:98:75:79:e8:f1:e3:6e:3f:b1:e1:e5:
25:64:16:91:a6:4c:b4:3e:06:8f:89:43:02:9f:da:
0f:69:db:47:77:af:f4:a3:5f:9f:4b:69:15:b8:d4:
5d:52:05:29:db:a2:df:2d:0c:ba:14:fd:df:99:32:
c9:2a:71:e2:d4:83:84:f6:a4:c3:9c:c0:d7:ea:ba:
fd:98:6d:1a:2b:0e:25:e0:de:91:fb:49:6b:ae:7b:
70:a7:34:a0:15:ae:c1:2f:0d:82:3d:c2:47:00:9b:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CE:32:E5:F2:6B:6E:FB:A9:C6:FE:AC:E7:0A:3D:C3:6E:74:60:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3340452ECCC911EFBCE05F50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a7:f0:ae:f6:b7:a7:64:82:f8:fd:71:e8:29:f1:8c:99:dc:
ee:9d:89:a1:e7:87:cf:5a:f9:e6:c6:3f:97:37:6b:22:86:ce:
aa:94:6d:36:3b:7a:00:6c:f3:6d:e8:bf:35:f8:2c:5d:9c:e6:
eb:ba:fa:fc:cf:2a:8e:85:61:80:f9:ca:48:6d:9f:c1:21:32:
12:56:2d:a2:f9:fc:40:69:79:0f:85:e6:1d:87:d0:47:15:69:
c4:1c:2d:a5:ea:42:1f:0e:f3:c7:44:97:35:55:27:a7:ce:c5:
0f:24:b1:6e:cd:4f:8e:89:fc:8a:dc:a7:c7:5d:c8:7a:57:4c:
d0:c3:bf:73:a3:ee:fb:e7:3f:8c:0c:2c:03:65:b9:c8:ea:10:
fb:c0:f2:c2:08:4e:d2:f6:0c:d3:c7:53:b2:f3:76:fd:21:a1:
ba:34:f8:d2:de:6b:30:73:40:4d:a1:7c:b5:89:de:2c:fb:0a:
a7:b7:07:0e:b2:25:de:5c:5e:ad:7e:e1:d5:10:06:d2:76:52:
51:3e:2e:7e:63:fa:8d:ac:16:ae:1e:f7:dc:e7:ac:f8:1f:91:
90:d5:0f:a6:aa:03:6a:fc:ce:68:64:eb:29:e0:53:3b:02:99:
0d:13:e7:fd:37:52:67:bd:9f:fb:d3:5e:01:1d:1d:f6:c1:7e:
a9:94:04:d5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPpqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDcyOTU2WhcNMjUxMjEzMDcyOTU2WjAYMRYw
FAYDVQQDEw02NzdjZDdmNy0wMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtDJww42PJW4NdpgNdrD7o/+LSuBOAiWKa7XBpHYUWCTRbl8sYkHIrJgD
+xvTiybuygEVwg52CsM0I/LxHOEWs6o9218fZ/+xIOBsClgvV2JScLDf7/WNiEfR
XwA6p9MMgw+paM7Eg8BzcNmcxwPpz7pq6f/Hszy8UXle60Jz6LDV5CJD9MlbW+Xl
7PFG4Kh92al0Sm9P+5IcmHV56PHjbj+x4eUlZBaRpky0PgaPiUMCn9oPadtHd6/0
o1+fS2kVuNRdUgUp26LfLQy6FP3fmTLJKnHi1IOE9qTDnMDX6rr9mG0aKw4l4N6R
+0lrrntwpzSgFa7BLw2CPcJHAJv84QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJLO
MuXya277qcb+rOcKPcNudGCyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMzQwNDUyRUNDQzkxMUVGQkNFMDVGNTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlPMA0GCSqGSIb3DQEBCwUA
A4IBAQArp/Cu9renZIL4/XHoKfGMmdzunYmh54fPWvnmxj+XN2sihs6qlG02O3oA
bPNt6L81+CxdnObruvr8zyqOhWGA+cpIbZ/BITISVi2i+fxAaXkPheYdh9BHFWnE
HC2l6kIfDvPHRJc1VSenzsUPJLFuzU+OifyK3KfHXch6V0zQw79zo+775z+MDCwD
ZbnI6hD7wPLCCE7S9gzTx1Oy83b9IaG6NPjS3mswc0BNoXy1id4s+wqntwcOsiXe
XF6tfuHVEAbSdlJRPi5+Y/qNrBauHvfc56z4H5GQ1Q+mqgNq/M5oZOsp4FM7ApkN
E+f9N1JnvZ/7014BHR32wX6plATV
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:13 2025 by rpki-client