Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4558F59ACD2211EFBCDE3981762E951A.roa
File: 4558F59ACD2211EFBCDE3981762E951A.roa (raw, json)
Hash identifier: B3vqiSnuPcFY8bBc7Tjf3K4X3efoKOPr68jK9iZiFiw=
Subject key identifier: 8A:C2:DC:74:0C:23:7F:34:89:60:C1:CB:7B:7A:2D:1D:45:A9:67:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4558F59ACD2211EFBCDE3981762E951A.roa
Signing time: Tue 07 Jan 2025 18:07:35 +0000
ROA not before: Tue 07 Jan 2025 18:07:31 +0000
ROA not after: Sat 13 Dec 2025 18:07:31 +0000
asID: 984
IP address blocks: 156.241.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64893 (0xfd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:07:31 2025 GMT
Not After : Dec 13 18:07:31 2025 GMT
Subject: CN=677d6d67-9926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:9b:5f:1e:99:aa:66:e5:5f:16:f9:7a:1e:
35:a7:99:ff:f1:b3:e1:13:ac:ea:6d:fb:ff:8b:ef:
23:6c:39:6c:e6:6d:d4:a5:6c:58:5e:f7:6c:82:18:
76:75:0e:d2:42:5f:84:ee:a7:23:e9:d9:cc:33:47:
fa:2c:e9:05:59:53:a4:f3:e1:90:c5:b2:d9:58:af:
a5:fd:ac:07:01:fc:98:49:af:fd:e9:72:6d:8f:81:
95:cc:7c:13:b7:17:7b:bf:52:79:f4:e1:c2:2c:20:
34:2e:81:4d:a2:24:31:b1:6e:97:eb:d1:fd:67:cb:
7c:a2:fb:95:31:ff:0d:9b:34:43:df:a7:f8:9f:4b:
45:be:c6:46:69:ab:97:24:fb:78:4c:0c:24:28:72:
4b:f8:a7:b3:7e:2a:f3:43:a0:69:0b:89:9d:79:88:
97:c9:dc:35:ce:d2:81:72:d6:9b:5c:19:72:ab:d5:
ec:51:01:84:fb:ea:94:07:45:33:95:87:af:c9:1a:
1d:9e:93:cf:de:82:de:b3:bf:35:bd:e5:ab:6b:0f:
3f:48:7e:7e:c3:bc:ba:c0:0f:12:fe:73:fe:75:d6:
be:a2:da:01:a7:dc:bf:bf:f8:f4:8b:9d:fc:37:88:
c3:5f:82:38:09:7f:70:39:e9:c0:4e:8a:19:d5:92:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:DC:74:0C:23:7F:34:89:60:C1:CB:7B:7A:2D:1D:45:A9:67:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4558F59ACD2211EFBCDE3981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.201.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cf:88:1c:75:d7:c6:0e:57:fe:56:3e:e1:8d:a1:0b:2e:7a:
76:e8:e0:dd:2b:13:78:ed:65:88:1f:5c:ee:7f:4d:13:97:c2:
84:34:d1:bf:ff:f4:b4:60:e7:ab:2d:85:14:f2:38:4f:82:e8:
53:18:01:fa:79:dc:02:3f:25:28:17:cb:58:8b:74:eb:2b:b9:
5d:78:7d:64:8a:19:ac:74:70:ba:51:e8:fc:ce:a9:88:18:f3:
fa:52:e8:5a:58:aa:87:98:9c:6d:13:1c:57:bb:89:4d:ea:8f:
b6:48:a1:54:ac:1c:3e:da:c4:10:1b:fb:b8:1a:99:4e:5a:01:
57:9c:0b:ed:22:14:09:dd:66:b0:6e:1f:d8:b8:54:7b:e3:de:
b1:10:76:5e:c4:b0:04:9e:d1:5c:20:fe:b7:af:64:6e:8f:40:
94:89:ab:9d:29:96:87:65:88:e7:af:69:49:5f:bf:26:3d:56:
9d:be:6f:0f:76:67:33:c8:bd:f0:eb:8e:59:5c:a7:10:84:59:
9f:c5:be:87:c9:3c:80:74:95:50:0c:cf:5b:08:b9:53:f8:6c:
6a:03:b4:9d:3e:68:cb:1e:d5:d2:a0:08:84:fc:db:e6:c0:65:
a6:ca:39:03:43:e2:f8:ef:b8:6f:4a:28:40:f1:1b:21:23:a0:
34:8e:ca:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP19MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTgwNzMxWhcNMjUxMjEzMTgwNzMxWjAYMRYw
FAYDVQQDEw02NzdkNmQ2Ny05OTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArd2bXx6ZqmblXxb5eh41p5n/8bPhE6zqbfv/i+8jbDls5m3UpWxYXvds
ghh2dQ7SQl+E7qcj6dnMM0f6LOkFWVOk8+GQxbLZWK+l/awHAfyYSa/96XJtj4GV
zHwTtxd7v1J59OHCLCA0LoFNoiQxsW6X69H9Z8t8ovuVMf8NmzRD36f4n0tFvsZG
aauXJPt4TAwkKHJL+KezfirzQ6BpC4mdeYiXydw1ztKBctabXBlyq9XsUQGE++qU
B0UzlYevyRodnpPP3oLes781veWraw8/SH5+w7y6wA8S/nP+dda+otoBp9y/v/j0
i538N4jDX4I4CX9wOenATooZ1ZJmWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIrC
3HQMI380iWDBy3t6LR1FqWdQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTU4RjU5QUNEMjIxMUVGQkNERTM5ODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHJMA0GCSqGSIb3DQEBCwUA
A4IBAQA5z4gcddfGDlf+Vj7hjaELLnp26ODdKxN47WWIH1zuf00Tl8KENNG///S0
YOerLYUU8jhPguhTGAH6edwCPyUoF8tYi3TrK7ldeH1kihmsdHC6Uej8zqmIGPP6
UuhaWKqHmJxtExxXu4lN6o+2SKFUrBw+2sQQG/u4GplOWgFXnAvtIhQJ3Wawbh/Y
uFR7496xEHZexLAEntFcIP63r2Ruj0CUiaudKZaHZYjnr2lJX78mPVadvm8Pdmcz
yL3w645ZXKcQhFmfxb6HyTyAdJVQDM9bCLlT+GxqA7SdPmjLHtXSoAiE/NvmwGWm
yjkDQ+L477hvSihA8RshI6A0jsrp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:57 2025 by rpki-client