Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C9FAFAECD5C11EFB597CA6D762E951A.roa
File: 3C9FAFAECD5C11EFB597CA6D762E951A.roa (raw, json)
Hash identifier: rcc93moDU0cGjzpN1jQnGTbe0HsVxQL3PmyMCY2fCpI=
Subject key identifier: 1A:BA:8B:8B:E5:F2:D4:43:8E:4C:CD:85:2A:C5:2C:E8:17:37:B7:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C9FAFAECD5C11EFB597CA6D762E951A.roa
Signing time: Wed 08 Jan 2025 01:02:31 +0000
ROA not before: Wed 08 Jan 2025 01:02:27 +0000
ROA not after: Sat 13 Dec 2025 01:02:27 +0000
asID: 984
IP address blocks: 156.247.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65299 (0xff13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:02:27 2025 GMT
Not After : Dec 13 01:02:27 2025 GMT
Subject: CN=677dcea7-79ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:f0:64:0c:1d:45:92:eb:f8:a3:ea:7a:85:
86:25:27:07:23:9a:e0:d6:2a:09:73:4c:b6:27:8e:
dc:86:80:d3:f6:9c:1c:03:ff:ca:f0:17:cb:9a:7b:
11:09:5b:bc:a5:a1:49:13:47:f6:cf:e9:ec:c3:dc:
e5:7b:22:fe:bc:f6:35:1d:2d:f7:72:38:5e:91:75:
8d:ae:48:c4:45:57:44:05:e8:96:fb:ea:85:ad:8d:
a5:4b:26:22:e5:91:be:35:61:8f:5f:94:ea:5f:f1:
85:88:67:0f:5b:82:9a:47:3a:2d:91:55:b0:46:da:
7e:ff:7c:a0:a0:bf:38:19:7a:5c:16:5f:01:63:96:
ca:cc:0b:60:7e:cd:ce:8c:6b:71:d8:ac:04:21:e6:
d2:39:26:22:89:63:7c:c1:46:28:89:9d:71:b9:8b:
75:88:53:46:80:c1:5d:56:a6:7d:7b:bc:b5:58:ec:
6f:1f:d5:06:a7:8f:24:52:49:66:60:9d:d6:03:a1:
e1:37:05:e3:8b:1a:e4:66:99:60:b5:d6:bc:1e:d2:
44:5c:49:d3:fa:d9:71:85:40:69:0b:41:db:cf:86:
01:9b:89:5a:a5:c5:e7:50:1b:bb:20:9b:b1:9f:be:
f9:c3:87:82:57:41:3f:4a:7e:fa:41:b6:1f:d3:4a:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:8B:8B:E5:F2:D4:43:8E:4C:CD:85:2A:C5:2C:E8:17:37:B7:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C9FAFAECD5C11EFB597CA6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cb:94:00:3d:a8:cf:b1:81:95:b4:52:7c:bb:a8:79:64:e7:
37:d7:12:59:22:c5:0c:d8:30:8e:b1:f8:c2:74:ef:d3:1c:fd:
5e:70:dc:49:53:cf:ef:b3:5c:dc:b5:e0:83:91:70:3f:03:f2:
6e:01:d4:31:74:21:cf:84:f5:d7:4b:df:da:fa:61:aa:2e:03:
a1:d6:7e:85:41:78:1b:dc:19:59:51:bc:6d:ef:14:c9:24:f3:
59:d5:38:a6:ce:41:ae:86:e1:97:3c:1c:2d:7e:c2:aa:4f:50:
bb:3a:67:2f:36:9e:b6:9d:2e:76:66:b3:13:fe:cd:69:62:9c:
18:54:92:98:7d:1e:cb:d4:70:99:a4:c8:01:b0:44:f6:34:fa:
f8:01:c3:5f:e3:ed:11:67:b6:c0:9c:bc:2f:f4:57:c5:4a:db:
cd:ca:93:bd:24:ad:c4:f6:5a:3e:1c:5e:4a:11:d7:d5:cb:1f:
95:f6:84:cf:a2:74:06:4c:22:19:c6:2a:5e:0e:d4:94:32:33:
c3:81:d5:88:b5:93:93:15:f6:e9:88:0f:d8:25:19:e1:c6:2d:
c3:07:85:47:6b:34:da:14:68:3a:6d:b3:ad:61:cd:56:f3:30:
58:27:39:70:87:4e:76:ee:98:5a:85:d5:13:c6:b3:3d:07:07:
27:21:07:1e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP8TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDEwMjI3WhcNMjUxMjEzMDEwMjI3WjAYMRYw
FAYDVQQDEw02NzdkY2VhNy03OWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwrjwZAwdRZLr+KPqeoWGJScHI5rg1ioJc0y2J47choDT9pwcA//K8BfL
mnsRCVu8paFJE0f2z+nsw9zleyL+vPY1HS33cjhekXWNrkjERVdEBeiW++qFrY2l
SyYi5ZG+NWGPX5TqX/GFiGcPW4KaRzotkVWwRtp+/3ygoL84GXpcFl8BY5bKzAtg
fs3OjGtx2KwEIebSOSYiiWN8wUYoiZ1xuYt1iFNGgMFdVqZ9e7y1WOxvH9UGp48k
UklmYJ3WA6HhNwXjixrkZplgtda8HtJEXEnT+tlxhUBpC0Hbz4YBm4lapcXnUBu7
IJuxn775w4eCV0E/Sn76QbYf00pErQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBq6
i4vl8tRDjkzNhSrFLOgXN7eIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQzlGQUZBRUNENUMxMUVGQjU5N0NBNkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPdSMA0GCSqGSIb3DQEBCwUA
A4IBAQANy5QAPajPsYGVtFJ8u6h5ZOc31xJZIsUM2DCOsfjCdO/THP1ecNxJU8/v
s1zcteCDkXA/A/JuAdQxdCHPhPXXS9/a+mGqLgOh1n6FQXgb3BlZUbxt7xTJJPNZ
1TimzkGuhuGXPBwtfsKqT1C7OmcvNp62nS52ZrMT/s1pYpwYVJKYfR7L1HCZpMgB
sET2NPr4AcNf4+0RZ7bAnLwv9FfFStvNypO9JK3E9lo+HF5KEdfVyx+V9oTPonQG
TCIZxipeDtSUMjPDgdWItZOTFfbpiA/YJRnhxi3DB4VHazTaFGg6bbOtYc1W8zBY
Jzlwh0527phahdUTxrM9BwcnIQce
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:48 2025 by rpki-client