Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/381F8706C33911EFA922EC87762E951A.roa
File: 381F8706C33911EFA922EC87762E951A.roa (raw, json)
Hash identifier: OT1/prtK7p3t7kIW+L10XZBfp+oXwZokwlU3gFGXehM=
Subject key identifier: 11:3A:83:5B:80:84:D3:FD:FF:9D:81:4F:5F:F5:F7:58:0A:7E:FE:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/381F8706C33911EFA922EC87762E951A.roa
Signing time: Thu 26 Dec 2024 03:26:39 +0000
ROA not before: Thu 26 Dec 2024 03:26:35 +0000
ROA not after: Wed 10 Dec 2025 03:26:35 +0000
asID: 984
IP address blocks: 156.244.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60271 (0xeb6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 03:26:35 2024 GMT
Not After : Dec 10 03:26:35 2025 GMT
Subject: CN=676cccef-1d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:2a:15:1f:2f:21:ca:35:2b:dd:66:a3:1d:
ab:e5:a7:2e:8c:a9:38:46:3e:ff:38:85:b8:a3:3c:
b5:dd:be:6f:2c:c7:45:5e:b3:75:29:79:d5:44:be:
06:80:bf:04:4f:db:a3:16:97:df:08:78:9c:6f:43:
ec:03:33:27:2d:64:7d:6f:e8:9f:cf:b5:0c:0e:05:
37:f0:f7:a5:ba:7b:e9:c9:39:02:94:b2:c8:f4:94:
95:0c:29:53:44:ea:b6:82:9a:72:ed:81:b0:ba:d8:
07:74:df:f1:06:70:85:f0:99:40:57:ed:02:c0:51:
da:01:45:62:1b:ac:69:7a:9e:ef:ae:84:6f:21:38:
88:a7:b4:c5:11:31:40:49:76:97:72:6d:42:40:18:
0a:8f:5e:c8:f2:e7:be:97:f8:5d:ea:28:ab:4f:61:
c8:e0:f1:aa:1d:dd:f3:b6:88:ca:6c:a4:8e:96:63:
e1:ce:4b:4b:10:df:6e:7b:bf:e7:a0:c2:60:4b:6f:
63:23:9e:a7:9a:8d:d3:08:02:75:c0:73:5e:c9:de:
0a:e2:37:f1:46:7b:b3:30:a3:69:eb:ae:cb:19:42:
1f:6f:30:33:5a:35:ec:fb:c4:52:6b:88:a2:ec:38:
e9:e2:01:75:f6:5f:17:48:d8:97:4b:0b:b9:38:d3:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:83:5B:80:84:D3:FD:FF:9D:81:4F:5F:F5:F7:58:0A:7E:FE:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/381F8706C33911EFA922EC87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.179.0/24
Signature Algorithm: sha256WithRSAEncryption
76:33:bc:88:49:49:93:ce:b4:27:6c:7b:d7:7a:f6:cd:6b:4b:
2a:72:f1:7f:1f:94:7b:ca:11:f4:39:cf:73:8a:c5:a5:11:d7:
95:2c:12:e9:7a:3c:c2:24:ed:92:23:7c:b9:34:bd:bc:1d:81:
9e:d7:b0:dd:c3:03:9e:7e:bb:7a:39:72:04:73:6b:43:ab:0c:
81:80:2a:96:a5:43:67:8e:07:fc:e0:08:c4:f7:99:44:8c:af:
96:4b:fb:04:d3:be:0c:94:30:c9:16:cc:e0:52:19:87:24:8e:
53:e8:ce:66:ee:d9:27:8a:7f:8e:94:f1:49:1f:5c:60:01:eb:
41:6e:4a:be:b2:66:07:fd:8c:21:2e:83:ac:f0:8a:25:93:ad:
c0:1b:2d:4e:aa:24:76:2e:04:5a:3a:96:02:be:de:43:6f:eb:
29:22:75:ea:05:1d:e4:1b:66:43:1c:14:1d:3b:04:7b:71:1c:
41:04:be:3f:1c:1e:e8:b6:0b:bd:d3:86:5c:ed:61:fe:82:b2:
05:c9:44:93:36:64:a4:a8:27:1c:de:bd:f0:12:e3:8f:e2:a4:
b8:06:ad:d6:bb:40:83:c3:5a:d7:db:52:e9:08:5c:51:44:14:
10:4d:7e:69:b6:69:e4:1e:60:e0:13:60:6e:c0:a9:e6:f6:d5:
1b:1d:bd:42
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOtvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDMyNjM1WhcNMjUxMjEwMDMyNjM1WjAYMRYw
FAYDVQQDEw02NzZjY2NlZi0xZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuVMqFR8vIco1K91mox2r5acujKk4Rj7/OIW4ozy13b5vLMdFXrN1KXnV
RL4GgL8ET9ujFpffCHicb0PsAzMnLWR9b+ifz7UMDgU38PelunvpyTkClLLI9JSV
DClTROq2gppy7YGwutgHdN/xBnCF8JlAV+0CwFHaAUViG6xpep7vroRvITiIp7TF
ETFASXaXcm1CQBgKj17I8ue+l/hd6iirT2HI4PGqHd3ztojKbKSOlmPhzktLEN9u
e7/noMJgS29jI56nmo3TCAJ1wHNeyd4K4jfxRnuzMKNp667LGUIfbzAzWjXs+8RS
a4ii7Djp4gF19l8XSNiXSwu5ONPrGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBE6
g1uAhNP9/52BT1/191gKfv5IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zODFGODcwNkMzMzkxMUVGQTkyMkVDODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPSzMA0GCSqGSIb3DQEBCwUA
A4IBAQB2M7yISUmTzrQnbHvXevbNa0sqcvF/H5R7yhH0Oc9zisWlEdeVLBLpejzC
JO2SI3y5NL28HYGe17DdwwOefrt6OXIEc2tDqwyBgCqWpUNnjgf84AjE95lEjK+W
S/sE074MlDDJFszgUhmHJI5T6M5m7tknin+OlPFJH1xgAetBbkq+smYH/YwhLoOs
8Iolk63AGy1OqiR2LgRaOpYCvt5Db+spInXqBR3kG2ZDHBQdOwR7cRxBBL4/HB7o
tgu904Zc7WH+grIFyUSTNmSkqCcc3r3wEuOP4qS4Bq3Wu0CDw1rX21LpCFxRRBQQ
TX5ptmnkHmDgE2BuwKnm9tUbHb1C
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:45 2025 by rpki-client