Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/340AFB18CD9E11EF947E53A2762E951A.roa
File: 340AFB18CD9E11EF947E53A2762E951A.roa (raw, json)
Hash identifier: P0TFHG/lJ39C1W6iMX3QZODhhCOXc4v+4adchzJ81JM=
Subject key identifier: BA:D4:85:A4:74:96:EB:14:89:FB:6A:A8:C9:2B:4B:81:DF:77:3D:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/340AFB18CD9E11EF947E53A2762E951A.roa
Signing time: Wed 08 Jan 2025 08:54:43 +0000
ROA not before: Wed 08 Jan 2025 08:54:40 +0000
ROA not after: Tue 16 Dec 2025 08:54:40 +0000
asID: 984
IP address blocks: 156.249.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65706 (0x100aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 08:54:40 2025 GMT
Not After : Dec 16 08:54:40 2025 GMT
Subject: CN=677e3d53-c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:08:b0:44:4a:33:49:91:d2:b5:7f:34:51:
d6:95:f5:09:08:a4:37:9e:97:09:27:eb:16:4c:ff:
8f:a1:a3:27:f0:88:14:23:66:63:6e:cf:a4:5d:ef:
cb:d1:e4:1e:ef:26:71:75:ff:00:6f:5a:a5:37:1d:
ab:ac:6d:d7:35:bb:2b:52:3e:1d:af:7e:eb:4e:68:
bf:7d:33:7b:0d:fa:e7:e6:6e:44:09:ba:eb:69:36:
c9:d9:9f:7f:7b:b6:27:fa:81:83:98:bd:ba:25:78:
60:24:a5:e1:d2:0a:0f:78:fb:dc:be:3b:8b:4a:c1:
f5:75:94:65:69:ee:d1:98:10:dd:62:50:2b:7a:79:
79:2f:51:2e:4b:0f:4a:31:85:a7:0d:95:ff:95:d8:
50:18:90:ef:e2:c2:ba:50:23:de:19:7c:ac:06:51:
dd:46:4b:bb:b1:ca:17:04:2b:28:6b:69:52:59:d9:
da:22:e4:1f:95:cf:a9:fa:91:ab:29:94:88:cc:fc:
54:f6:d7:c8:07:37:a6:9e:8d:67:10:3d:50:30:e4:
5a:0e:3a:27:09:ec:01:6c:fe:49:fa:1d:63:1b:ed:
19:70:16:52:e4:37:4a:85:64:a6:f8:72:c2:3e:24:
e2:16:d5:31:c5:03:1f:96:2f:e5:92:86:1f:fb:cf:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:85:A4:74:96:EB:14:89:FB:6A:A8:C9:2B:4B:81:DF:77:3D:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/340AFB18CD9E11EF947E53A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.99.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d1:05:30:4c:28:d8:88:ad:b2:34:b2:a9:fe:04:4b:b6:9a:
53:ce:f9:24:82:39:89:c5:fb:82:49:4f:39:ec:06:a0:ff:c1:
15:ad:a3:a1:3d:80:b0:b6:f5:25:26:86:9e:fa:be:48:d5:b0:
76:62:45:cf:02:b5:ad:b4:31:ae:28:0a:4b:8b:44:27:3e:9f:
70:b7:7f:6a:38:40:af:7c:5f:43:a4:4c:0d:3b:6a:f0:29:f5:
7b:24:6a:2d:c9:14:96:f4:13:6a:ea:8b:ac:2c:6d:d8:ed:ba:
1d:eb:c2:e4:a6:f7:fc:79:f0:6a:c0:eb:75:83:50:9a:cb:91:
49:46:81:d2:7b:29:c1:1b:9d:b4:5a:a9:fb:d9:0d:85:d0:03:
ea:6e:bd:21:75:1c:33:a9:5d:02:b5:21:80:b9:cb:37:89:de:
75:04:05:28:1c:41:8a:06:df:99:cd:04:f7:86:4e:93:8f:16:
64:68:2b:27:34:24:7a:70:49:71:99:fb:b1:34:5b:fd:7d:c0:
b2:fb:9c:4b:9b:39:81:52:17:f5:c1:cc:24:a2:4c:a7:0f:42:
30:4f:2b:b4:b8:6c:5b:61:26:e8:17:3a:ee:c6:c0:c6:d6:ac:
44:db:87:a6:4c:a4:0e:a1:2f:0f:3d:e9:ae:c9:f2:22:8e:62:
29:88:90:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQCqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDg1NDQwWhcNMjUxMjE2MDg1NDQwWjAYMRYw
FAYDVQQDEw02NzdlM2Q1My1jNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtscIsERKM0mR0rV/NFHWlfUJCKQ3npcJJ+sWTP+PoaMn8IgUI2Zjbs+k
Xe/L0eQe7yZxdf8Ab1qlNx2rrG3XNbsrUj4dr37rTmi/fTN7Dfrn5m5ECbrraTbJ
2Z9/e7Yn+oGDmL26JXhgJKXh0goPePvcvjuLSsH1dZRlae7RmBDdYlArenl5L1Eu
Sw9KMYWnDZX/ldhQGJDv4sK6UCPeGXysBlHdRku7scoXBCsoa2lSWdnaIuQflc+p
+pGrKZSIzPxU9tfIBzemno1nED1QMORaDjonCewBbP5J+h1jG+0ZcBZS5DdKhWSm
+HLCPiTiFtUxxQMfli/lkoYf+8/fFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLrU
haR0lusUiftqqMkrS4Hfdz0XMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNDBBRkIxOENEOUUxMUVGOTQ3RTUzQTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPljMA0GCSqGSIb3DQEBCwUA
A4IBAQBu0QUwTCjYiK2yNLKp/gRLtppTzvkkgjmJxfuCSU857Aag/8EVraOhPYCw
tvUlJoae+r5I1bB2YkXPArWttDGuKApLi0QnPp9wt39qOECvfF9DpEwNO2rwKfV7
JGotyRSW9BNq6ousLG3Y7bod68Lkpvf8efBqwOt1g1Cay5FJRoHSeynBG520Wqn7
2Q2F0APqbr0hdRwzqV0CtSGAucs3id51BAUoHEGKBt+ZzQT3hk6TjxZkaCsnNCR6
cElxmfuxNFv9fcCy+5xLmzmBUhf1wcwkokynD0IwTyu0uGxbYSboFzruxsDG1qxE
24emTKQOoS8PPemuyfIijmIpiJBA
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:01 2025 by rpki-client