Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474F4D4AC33111EFA07FC452762E951A.roa
File: 474F4D4AC33111EFA07FC452762E951A.roa (raw, json)
Hash identifier: elVdPD2JzJHe87mUYR0/s8VDN2kNu1cY5OBZ45s84xM=
Subject key identifier: C3:6E:B7:36:4C:BE:0E:B3:F5:0C:63:6F:29:45:D4:91:48:0D:40:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474F4D4AC33111EFA07FC452762E951A.roa
Signing time: Thu 26 Dec 2024 02:29:49 +0000
ROA not before: Thu 26 Dec 2024 02:29:45 +0000
ROA not after: Wed 10 Dec 2025 02:29:45 +0000
asID: 984
IP address blocks: 156.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60177 (0xeb11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:29:45 2024 GMT
Not After : Dec 10 02:29:45 2025 GMT
Subject: CN=676cbf9d-c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:d6:ee:5f:03:16:dd:59:ac:ca:f1:50:d2:
56:a7:65:2a:3b:d4:e5:c3:46:9f:61:0d:42:df:18:
b0:16:47:63:ec:9c:62:40:27:b4:9d:09:75:a1:29:
16:e5:dd:a3:b9:3a:34:3a:ed:29:be:86:e8:9d:2e:
26:ab:06:ac:ef:9c:e2:ec:8a:47:f9:e2:72:54:5d:
23:9b:48:9e:db:7c:af:0a:62:7d:83:6c:2b:8c:34:
a9:68:b5:33:d7:74:b7:65:82:9d:38:c5:83:27:10:
7a:b1:7a:b2:20:75:6b:c4:69:fb:ba:c0:bb:24:a9:
3c:ac:a7:a2:55:6e:13:87:a9:00:bf:a0:96:2a:ec:
45:5e:76:21:ce:63:36:87:dc:85:34:c5:b2:20:71:
72:cf:78:03:e5:dd:da:2c:8a:3a:3b:1e:61:11:7c:
ec:f2:d5:8d:bc:c5:f8:41:f9:ea:e9:77:03:3e:09:
21:2c:25:21:83:df:fa:3b:dc:a6:2e:12:12:f1:7a:
01:42:79:0e:71:50:62:1c:78:75:50:e4:e4:1a:8f:
d8:30:1e:21:bc:2e:4a:15:50:86:7a:ea:20:ae:81:
27:c7:d6:bb:b4:2c:19:58:29:06:37:ed:c8:31:c9:
03:90:3c:45:78:cb:bb:17:78:ae:a7:da:23:49:e2:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6E:B7:36:4C:BE:0E:B3:F5:0C:63:6F:29:45:D4:91:48:0D:40:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/474F4D4AC33111EFA07FC452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cf:78:80:f3:0e:5b:99:3a:02:e3:da:f2:c9:12:40:a7:c3:
f3:16:c8:82:94:42:5e:87:dd:66:d8:f5:8e:17:aa:e4:74:3a:
8e:35:3e:41:6a:cf:e8:df:3c:fe:cb:23:06:93:cb:52:24:7c:
a2:db:61:89:64:23:9e:94:38:05:35:eb:33:0b:a8:34:8b:b8:
51:b0:ff:94:e5:d4:72:6e:80:cd:52:e1:9d:fe:79:f1:3c:9a:
a7:a9:21:f4:c8:9f:8c:dd:1a:ee:8c:63:1b:57:c2:6f:04:52:
f5:b7:a7:bb:f8:e9:30:97:ad:b0:29:8c:60:35:5c:9e:54:5a:
27:0a:bc:7e:ff:ef:71:31:27:08:95:10:c3:9c:3e:0d:98:72:
ef:9c:59:a3:61:56:81:34:44:b6:5a:4a:e1:a7:e7:23:6b:59:
92:34:a0:f8:18:11:fa:01:b9:7a:be:5e:0d:cd:48:76:28:40:
98:6f:63:ee:2c:c6:23:96:6b:bc:f0:22:0b:3b:b6:1d:12:99:
21:c7:70:8b:32:01:4a:db:e0:27:c2:8c:65:12:06:f3:65:4d:
d8:7d:9b:e8:b3:76:78:25:80:dc:92:14:4c:8d:e6:5c:55:32:
05:f6:27:59:e1:bf:7e:6a:af:28:89:a1:ce:d6:84:87:3d:76:
ea:f1:92:ee
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOsRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDIyOTQ1WhcNMjUxMjEwMDIyOTQ1WjAYMRYw
FAYDVQQDEw02NzZjYmY5ZC1jNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn/bW7l8DFt1ZrMrxUNJWp2UqO9Tlw0afYQ1C3xiwFkdj7JxiQCe0nQl1
oSkW5d2juTo0Ou0pvobonS4mqwas75zi7IpH+eJyVF0jm0ie23yvCmJ9g2wrjDSp
aLUz13S3ZYKdOMWDJxB6sXqyIHVrxGn7usC7JKk8rKeiVW4Th6kAv6CWKuxFXnYh
zmM2h9yFNMWyIHFyz3gD5d3aLIo6Ox5hEXzs8tWNvMX4Qfnq6XcDPgkhLCUhg9/6
O9ymLhIS8XoBQnkOcVBiHHh1UOTkGo/YMB4hvC5KFVCGeuogroEnx9a7tCwZWCkG
N+3IMckDkDxFeMu7F3iup9ojSeJMYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMNu
tzZMvg6z9QxjbylF1JFIDUD4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NzRGNEQ0QUMzMzExMUVGQTA3RkM0NTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPP/MA0GCSqGSIb3DQEBCwUA
A4IBAQBDz3iA8w5bmToC49ryyRJAp8PzFsiClEJeh91m2PWOF6rkdDqONT5Bas/o
3zz+yyMGk8tSJHyi22GJZCOelDgFNeszC6g0i7hRsP+U5dRyboDNUuGd/nnxPJqn
qSH0yJ+M3RrujGMbV8JvBFL1t6e7+Okwl62wKYxgNVyeVFonCrx+/+9xMScIlRDD
nD4NmHLvnFmjYVaBNES2Wkrhp+cja1mSNKD4GBH6Abl6vl4NzUh2KECYb2PuLMYj
lmu88CILO7YdEpkhx3CLMgFK2+AnwoxlEgbzZU3YfZvos3Z4JYDckhRMjeZcVTIF
9idZ4b9+aq8oiaHO1oSHPXbq8ZLu
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:30 2025 by rpki-client