Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445876ECCCCE11EFA35E3D6F762E951A.roa
File: 445876ECCCCE11EFA35E3D6F762E951A.roa (raw, json)
Hash identifier: 2fzbK+jKD3M6Uya769CEfeQh2tvLxpkw2z6uKlGzH8U=
Subject key identifier: 35:39:C7:80:9E:15:CB:85:A7:84:34:7C:13:42:E5:C5:B4:A3:88:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445876ECCCCE11EFA35E3D6F762E951A.roa
Signing time: Tue 07 Jan 2025 08:06:15 +0000
ROA not before: Tue 07 Jan 2025 08:06:12 +0000
ROA not after: Sun 23 Mar 2025 08:06:12 +0000
asID: 142286
IP address blocks: 156.253.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64154 (0xfa9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:06:12 2025 GMT
Not After : Mar 23 08:06:12 2025 GMT
Subject: CN=677ce077-6709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:a7:d8:41:b7:e2:6f:ba:e6:9d:00:7f:07:
42:8d:84:ce:ea:43:eb:8e:1b:7e:b9:c1:e0:35:76:
b6:88:8c:02:14:04:ba:9d:ed:c1:da:10:20:bc:d7:
19:e7:70:62:c8:3d:b9:5e:f1:78:06:f8:0a:20:93:
6b:87:44:ac:f7:13:45:70:3c:c7:09:dc:3d:9a:b2:
51:f9:ac:df:76:21:66:74:6c:c2:eb:32:cc:2d:81:
a4:b0:ff:af:f2:db:69:85:d2:a4:e1:a8:5a:a5:df:
20:b2:66:cc:e8:b1:10:fb:90:90:98:7f:a1:cb:80:
84:b4:aa:5c:18:2e:ee:8d:1c:eb:6b:eb:6d:42:87:
39:ad:4f:d4:8e:6f:04:07:86:21:e4:4b:00:d5:1e:
8e:47:13:92:f9:93:a1:2c:5f:c4:a6:23:78:ee:4c:
2a:f7:7a:51:be:b9:99:23:bb:3b:d6:cb:d3:5f:0d:
81:d5:09:2a:5b:39:e0:ff:46:df:4e:c5:3f:d7:da:
b5:39:30:56:91:32:1f:39:ce:83:20:a9:71:5c:dd:
34:33:be:a3:1b:35:b3:98:8f:29:78:c6:a8:d3:35:
1a:01:02:da:d8:16:d1:80:53:b0:1f:d1:09:0a:a6:
09:2b:ab:38:8e:ae:38:77:95:39:e8:69:a7:c8:c4:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:C7:80:9E:15:CB:85:A7:84:34:7C:13:42:E5:C5:B4:A3:88:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/445876ECCCCE11EFA35E3D6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
Signature Algorithm: sha256WithRSAEncryption
36:00:8b:6f:e7:1a:8d:42:6a:ed:5a:60:31:65:6e:15:5f:b9:
30:52:59:09:5a:8a:4c:2d:6b:e3:b3:27:90:73:b2:87:b3:ab:
88:35:c8:75:f8:11:5f:62:cc:fa:be:d0:cc:c2:07:ad:59:5d:
df:7e:14:ce:2a:85:bf:7b:e9:95:5c:29:48:37:69:5e:b8:96:
49:c9:d6:c8:41:62:c5:f9:b7:20:f2:a7:63:d4:95:d7:d6:45:
d4:97:0b:75:03:f8:13:ff:e6:ed:d7:bc:80:81:23:fb:52:cb:
cf:28:b6:50:30:d0:69:9c:ff:47:2e:20:e6:9a:f1:6f:a4:83:
bc:d3:4d:02:7c:02:a3:2f:0e:2f:4a:80:0c:1d:55:f0:8c:b0:
33:fa:20:dc:3f:7c:67:fa:77:4c:ee:6f:af:f9:ab:e1:e9:c8:
8f:ae:ed:fd:c8:ef:3e:2f:fc:a1:24:a0:97:cd:39:cf:59:e7:
86:c9:5f:dc:8f:29:2c:ba:3c:c9:06:10:df:15:c5:bc:2a:6a:
c5:ad:8b:07:55:63:13:ee:9b:89:99:b3:d1:64:f8:57:e5:37:
a3:e9:f3:b8:68:4d:88:7c:24:77:c6:de:01:56:8f:11:ae:7f:
f4:3b:eb:c4:16:c9:72:9c:6d:67:01:11:7d:01:5b:6e:bf:0b:
01:ac:a4:16
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPqaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDgwNjEyWhcNMjUwMzIzMDgwNjEyWjAYMRYw
FAYDVQQDEw02NzdjZTA3Ny02NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtpSn2EG34m+65p0AfwdCjYTO6kPrjht+ucHgNXa2iIwCFAS6ne3B2hAg
vNcZ53BiyD25XvF4BvgKIJNrh0Ss9xNFcDzHCdw9mrJR+azfdiFmdGzC6zLMLYGk
sP+v8ttphdKk4ahapd8gsmbM6LEQ+5CQmH+hy4CEtKpcGC7ujRzra+ttQoc5rU/U
jm8EB4Yh5EsA1R6ORxOS+ZOhLF/EpiN47kwq93pRvrmZI7s71svTXw2B1QkqWzng
/0bfTsU/19q1OTBWkTIfOc6DIKlxXN00M76jGzWzmI8peMao0zUaAQLa2BbRgFOw
H9EJCqYJK6s4jq44d5U56GmnyMRr+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDU5
x4CeFcuFp4Q0fBNC5cW0o4hUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDU4NzZFQ0NDQ0UxMUVGQTM1RTNENkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnP1AMA0GCSqGSIb3DQEBCwUA
A4IBAQA2AItv5xqNQmrtWmAxZW4VX7kwUlkJWopMLWvjsyeQc7KHs6uINch1+BFf
Ysz6vtDMwgetWV3ffhTOKoW/e+mVXClIN2leuJZJydbIQWLF+bcg8qdj1JXX1kXU
lwt1A/gT/+bt17yAgSP7UsvPKLZQMNBpnP9HLiDmmvFvpIO8000CfAKjLw4vSoAM
HVXwjLAz+iDcP3xn+ndM7m+v+avh6ciPru39yO8+L/yhJKCXzTnPWeeGyV/cjyks
ujzJBhDfFcW8KmrFrYsHVWMT7puJmbPRZPhX5Tej6fO4aE2IfCR3xt4BVo8Rrn/0
O+vEFslynG1nARF9AVtuvwsBrKQW
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:00 2025 by rpki-client