Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1CC71ECD1511EF85BF61AE762E951A.roa
File: 4D1CC71ECD1511EF85BF61AE762E951A.roa (raw, json)
Hash identifier: it1UYiIxL/lHejpEDMHiUID5KkvJ8gWpl9fvxhNAMLo=
Subject key identifier: A6:D6:39:56:DB:4D:7E:88:84:FF:55:7F:4D:04:5A:F2:18:36:E6:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1CC71ECD1511EF85BF61AE762E951A.roa
Signing time: Tue 07 Jan 2025 16:34:44 +0000
ROA not before: Tue 07 Jan 2025 16:34:41 +0000
ROA not after: Mon 13 Dec 2027 16:34:41 +0000
asID: 17561
IP address blocks: 156.241.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64789 (0xfd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:34:41 2025 GMT
Not After : Dec 13 16:34:41 2027 GMT
Subject: CN=677d57a4-a690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:cc:85:3a:b5:41:21:89:cf:4a:70:a4:a2:
b6:ed:33:7d:86:c2:66:c0:bb:ed:08:e5:e8:19:fb:
ad:42:41:62:a0:8f:2d:cf:13:ec:a1:32:ac:9c:08:
62:ef:28:b7:44:22:9b:2f:9d:88:52:55:91:a7:0e:
ba:bb:30:25:7f:3b:0c:d6:8d:63:33:2a:3f:45:38:
b9:a0:dd:49:a9:5c:30:06:1f:0d:b7:0e:68:84:63:
d9:bc:08:c5:77:86:9b:9a:2e:42:15:2e:8e:ea:48:
5f:73:20:d7:95:a1:3a:47:f3:45:40:2a:fc:28:e4:
59:f9:98:50:e7:d3:27:56:c4:e8:6f:d8:95:52:d2:
82:91:92:b7:f0:1f:c3:37:00:39:8f:67:64:8f:f6:
a0:1e:6a:fe:77:47:69:e7:2a:9d:ee:8d:93:79:d1:
c1:ea:b3:bc:09:4b:ec:8b:b2:4d:86:94:cf:3c:50:
97:8e:53:7a:df:55:95:7b:6e:bf:37:40:ac:e1:b0:
d7:d8:91:bd:47:9e:2f:e8:f0:ed:2f:a5:1d:45:0a:
1a:15:6f:97:82:86:24:eb:3f:f0:37:c6:f6:96:1c:
06:b8:39:58:5f:5f:86:72:9b:72:ab:ee:fb:78:70:
9a:f0:41:81:53:0f:0a:e9:d9:de:ed:89:42:74:10:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D6:39:56:DB:4D:7E:88:84:FF:55:7F:4D:04:5A:F2:18:36:E6:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1CC71ECD1511EF85BF61AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a4:74:e9:a5:1e:bb:bd:81:26:1f:29:35:04:02:36:6f:ce:
01:6c:67:7f:f2:bc:45:7d:29:78:14:34:25:06:98:7f:fc:7e:
d7:45:83:a8:79:01:73:93:ab:a1:27:c9:83:13:a2:f3:e8:ef:
89:86:51:73:e3:d0:09:85:6a:87:e8:e9:2b:7c:ff:0d:c8:59:
2e:9d:c3:1c:f4:ff:14:7a:02:42:51:4d:4c:c3:60:ca:5a:b5:
86:df:16:39:65:46:d5:d7:6e:6e:5c:91:35:06:69:64:a0:26:
07:7b:73:12:6f:73:8b:1c:dd:9f:c4:fd:2b:ce:bb:9b:09:65:
09:d4:04:74:20:76:00:ba:d6:c2:04:a9:b3:e3:dc:7c:86:74:
86:6b:dc:fc:29:e2:24:40:03:c3:09:61:cd:0a:07:b5:f7:79:
56:54:69:c5:f6:78:59:3a:3b:29:fd:9e:95:dd:12:a9:28:c0:
68:76:03:fd:d8:ef:ec:59:e1:59:aa:df:fe:62:1b:a5:ba:e0:
24:80:3d:0b:50:26:de:68:e7:9c:c1:69:6f:54:44:df:d8:e3:
3c:ed:62:b0:6d:4d:e1:bc:e2:fe:da:48:3e:0e:c8:25:34:ac:
e1:fb:74:e1:bc:db:f5:58:01:1f:52:9a:da:58:13:13:bc:47:
83:23:bb:69
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP0VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTYzNDQxWhcNMjcxMjEzMTYzNDQxWjAYMRYw
FAYDVQQDEw02NzdkNTdhNC1hNjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0tXMhTq1QSGJz0pwpKK27TN9hsJmwLvtCOXoGfutQkFioI8tzxPsoTKs
nAhi7yi3RCKbL52IUlWRpw66uzAlfzsM1o1jMyo/RTi5oN1JqVwwBh8Ntw5ohGPZ
vAjFd4abmi5CFS6O6khfcyDXlaE6R/NFQCr8KORZ+ZhQ59MnVsTob9iVUtKCkZK3
8B/DNwA5j2dkj/agHmr+d0dp5yqd7o2TedHB6rO8CUvsi7JNhpTPPFCXjlN631WV
e26/N0Cs4bDX2JG9R54v6PDtL6UdRQoaFW+XgoYk6z/wN8b2lhwGuDlYX1+Gcpty
q+77eHCa8EGBUw8K6dne7YlCdBBEEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKbW
OVbbTX6IhP9Vf00EWvIYNuYMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RDFDQzcxRUNEMTUxMUVGODVCRjYxQUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPEOMA0GCSqGSIb3DQEBCwUA
A4IBAQChpHTppR67vYEmHyk1BAI2b84BbGd/8rxFfSl4FDQlBph//H7XRYOoeQFz
k6uhJ8mDE6Lz6O+JhlFz49AJhWqH6OkrfP8NyFkuncMc9P8UegJCUU1Mw2DKWrWG
3xY5ZUbV125uXJE1BmlkoCYHe3MSb3OLHN2fxP0rzrubCWUJ1AR0IHYAutbCBKmz
49x8hnSGa9z8KeIkQAPDCWHNCge193lWVGnF9nhZOjsp/Z6V3RKpKMBodgP92O/s
WeFZqt/+YhuluuAkgD0LUCbeaOecwWlvVETf2OM87WKwbU3hvOL+2kg+DsglNKzh
+3ThvNv1WAEfUpraWBMTvEeDI7tp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:21 2025 by rpki-client