Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/419C74D2CCD611EFBD5636A2762E951A.roa
File: 419C74D2CCD611EFBD5636A2762E951A.roa (raw, json)
Hash identifier: BWf/zY3omUvTgjtWa++NZQuqgAt+STl/k2I4CcOWyug=
Subject key identifier: E2:5A:8C:16:98:98:01:BD:EA:82:48:F5:F7:FC:81:8A:00:6F:03:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/419C74D2CCD611EFBD5636A2762E951A.roa
Signing time: Tue 07 Jan 2025 09:03:27 +0000
ROA not before: Tue 07 Jan 2025 09:03:23 +0000
ROA not after: Sat 13 Dec 2025 09:03:23 +0000
asID: 984
IP address blocks: 156.233.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64263 (0xfb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:03:23 2025 GMT
Not After : Dec 13 09:03:23 2025 GMT
Subject: CN=677ceddf-f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:b5:ce:c7:f6:7b:16:47:07:0b:53:3d:88:
bb:09:88:df:3e:04:d2:c2:2e:ad:61:1a:5f:8d:d1:
1d:c1:94:51:ce:8b:65:34:95:e4:a7:1d:f9:d4:fd:
56:70:b8:85:62:89:2d:3c:e9:bc:0a:25:b6:7b:d0:
b8:03:73:66:21:3b:45:c5:41:18:72:92:81:ba:81:
ab:40:4b:7b:2b:74:59:bb:ca:de:e5:5d:da:30:9f:
d4:f7:ea:a5:7b:58:95:2c:21:24:9d:df:47:63:56:
d6:74:a8:1a:bf:31:1a:12:77:05:20:d4:b6:6f:27:
f6:cb:3c:c8:f5:51:f3:ab:c1:e1:a5:5e:4a:64:a1:
a0:f9:af:db:fd:8b:74:7e:0c:4b:e7:1e:0d:9e:03:
b6:c5:4b:4b:a5:d5:96:1b:ec:bc:37:42:80:a4:a7:
83:9d:f0:1d:19:b4:1f:10:94:9d:69:b7:f0:b8:9d:
84:b7:95:f9:e1:33:6a:26:a5:07:f9:47:7e:67:87:
34:04:4b:21:58:22:c4:d0:95:6d:6f:58:35:2a:56:
fc:4a:5c:20:54:d7:9e:45:5c:99:1b:9e:34:be:57:
70:0a:f4:57:e4:b7:dc:06:f8:a2:6e:5b:7d:fd:db:
2e:9f:60:7d:35:b2:4a:60:3a:f5:d6:cd:bd:6a:fd:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:8C:16:98:98:01:BD:EA:82:48:F5:F7:FC:81:8A:00:6F:03:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/419C74D2CCD611EFBD5636A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.176.0/24
Signature Algorithm: sha256WithRSAEncryption
12:63:a2:71:e9:9d:94:c9:0d:59:ae:a8:f9:da:b8:22:a4:bf:
17:22:9e:1b:ec:f0:73:82:76:b8:1f:ea:73:76:3a:59:c6:50:
ea:17:d5:f5:56:47:a9:7b:fc:2e:87:2b:51:fd:87:3a:96:8c:
36:8a:cb:76:86:e4:1c:99:3b:60:b0:00:df:5b:44:04:72:4d:
24:03:ca:8a:f3:bc:06:0a:57:a5:5d:45:fc:be:af:f9:71:1c:
a3:e8:b9:e8:19:b4:7c:1b:ab:7f:a3:fe:5b:bd:d3:75:88:9d:
62:8f:77:aa:37:25:26:eb:81:a0:81:05:f7:78:37:bb:28:8e:
58:f9:e2:fb:9c:06:42:c4:7b:44:f3:71:4a:78:25:53:a8:65:
26:e6:d1:88:67:49:b5:c5:7e:3f:71:eb:0d:64:9e:ef:d7:e9:
c5:ee:d7:90:37:2b:38:70:3f:19:34:ba:ea:7e:e8:23:f0:25:
56:7e:83:1e:e5:51:a2:27:40:e4:97:6e:0c:f2:ee:b4:cc:87:
53:24:ea:42:b7:4f:1c:49:cb:d2:5c:49:b0:a3:0d:44:14:30:
f1:7b:c9:fc:45:a1:8e:18:19:f7:49:a8:42:7e:0c:c5:93:2a:
ae:3b:db:7f:57:39:64:e4:7a:72:ab:f6:24:71:39:2a:cd:f4:
49:ff:19:db
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPsHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDkwMzIzWhcNMjUxMjEzMDkwMzIzWjAYMRYw
FAYDVQQDEw02NzdjZWRkZi1mMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuq21zsf2exZHBwtTPYi7CYjfPgTSwi6tYRpfjdEdwZRRzotlNJXkpx35
1P1WcLiFYoktPOm8CiW2e9C4A3NmITtFxUEYcpKBuoGrQEt7K3RZu8re5V3aMJ/U
9+qle1iVLCEknd9HY1bWdKgavzEaEncFINS2byf2yzzI9VHzq8HhpV5KZKGg+a/b
/Yt0fgxL5x4NngO2xUtLpdWWG+y8N0KApKeDnfAdGbQfEJSdabfwuJ2Et5X54TNq
JqUH+Ud+Z4c0BEshWCLE0JVtb1g1Klb8SlwgVNeeRVyZG540vldwCvRX5LfcBvii
blt9/dsun2B9NbJKYDr11s29av2gZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOJa
jBaYmAG96oJI9ff8gYoAbwNSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MTlDNzREMkNDRDYxMUVGQkQ1NjM2QTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOmwMA0GCSqGSIb3DQEBCwUA
A4IBAQASY6Jx6Z2UyQ1Zrqj52rgipL8XIp4b7PBzgna4H+pzdjpZxlDqF9X1Vkep
e/wuhytR/Yc6low2ist2huQcmTtgsADfW0QEck0kA8qK87wGClelXUX8vq/5cRyj
6LnoGbR8G6t/o/5bvdN1iJ1ij3eqNyUm64GggQX3eDe7KI5Y+eL7nAZCxHtE83FK
eCVTqGUm5tGIZ0m1xX4/cesNZJ7v1+nF7teQNys4cD8ZNLrqfugj8CVWfoMe5VGi
J0Dkl24M8u60zIdTJOpCt08cScvSXEmwow1EFDDxe8n8RaGOGBn3SahCfgzFkyqu
O9t/Vzlk5Hpyq/YkcTkqzfRJ/xnb
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:14 2025 by rpki-client