Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F0EF4E8C33311EF99F94460762E951A.roa
File: 4F0EF4E8C33311EF99F94460762E951A.roa (raw, json)
Hash identifier: LFAxz152PyQtvDyZgRmoAqj6sKG9lhsiy9DscM2ZoGI=
Subject key identifier: B0:CC:DD:C3:69:A9:4E:12:FA:D2:27:14:C0:FC:40:AB:3C:86:BA:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F0EF4E8C33311EF99F94460762E951A.roa
Signing time: Thu 26 Dec 2024 02:44:21 +0000
ROA not before: Thu 26 Dec 2024 02:44:17 +0000
ROA not after: Fri 10 Dec 2027 02:44:17 +0000
asID: 17561
IP address blocks: 156.244.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60201 (0xeb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:44:17 2024 GMT
Not After : Dec 10 02:44:17 2027 GMT
Subject: CN=676cc305-8700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:91:fe:9e:41:97:b5:b6:f2:5a:d8:f2:cd:
b3:4c:72:ef:a5:c7:d3:87:f4:64:5e:52:31:ed:7d:
e4:a9:af:43:6b:d3:41:64:11:dc:63:0c:46:e6:5f:
37:40:5f:ab:bd:62:5f:57:49:3f:32:2d:b8:f1:c1:
0d:bf:4e:e7:b4:48:87:ec:39:15:ea:5d:0c:89:19:
be:7f:37:d1:24:60:b0:60:66:78:00:14:e0:cc:fe:
49:35:44:70:ef:76:a2:4b:c0:ef:4b:67:5f:cb:c5:
2f:45:13:70:1f:66:1a:b6:b8:00:26:d3:37:17:86:
cb:e6:77:07:8c:7e:77:21:4b:b7:33:43:be:c9:63:
ef:8d:7f:2c:dc:7c:e1:c7:f7:cb:bd:58:39:d0:a4:
14:9f:20:ee:31:b3:59:4a:9d:75:d2:8a:98:49:cc:
ae:46:b1:2a:6f:2b:0d:12:ef:88:c5:a4:45:0d:5d:
67:09:8f:30:3b:e0:44:af:a6:b0:78:7d:75:3d:bf:
aa:ce:2f:55:ef:21:55:19:a8:97:a9:f5:98:21:78:
9b:03:6c:3a:2a:d5:2e:d9:fa:8c:f2:40:16:50:9a:
78:3d:61:c3:3f:ce:69:9c:c6:d3:17:7a:71:9a:d9:
f9:3b:d3:07:63:eb:21:2a:d7:f5:49:c1:24:a6:8b:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CC:DD:C3:69:A9:4E:12:FA:D2:27:14:C0:FC:40:AB:3C:86:BA:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F0EF4E8C33311EF99F94460762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.144.0/24
Signature Algorithm: sha256WithRSAEncryption
43:09:82:28:80:3f:c9:9c:b3:3a:35:4b:4d:a5:8e:0b:2b:bf:
b4:54:82:cb:4d:8c:16:8a:55:76:0c:43:76:a7:91:6e:d8:24:
97:b7:37:c6:6a:6a:4e:88:91:ad:2a:63:47:8b:96:58:59:d9:
c9:17:4d:9a:1c:07:ce:3c:a2:22:58:b8:69:67:d4:20:82:81:
9f:7b:c1:bb:c4:02:a7:3d:19:21:8f:25:6e:b1:be:f8:25:29:
af:7a:73:35:c6:ac:12:5c:c9:02:30:4c:d8:e9:62:2f:ae:ad:
41:93:94:8a:7e:48:a3:3f:de:60:0e:7f:6b:90:b1:37:b1:4d:
6e:f5:69:bf:99:0d:e2:75:05:37:9b:dc:ec:c3:eb:5a:d9:64:
68:f5:42:03:50:5e:73:e5:e8:d8:92:4d:61:58:b0:cc:b8:ac:
60:76:30:5b:5e:44:f1:01:87:c8:87:97:66:b8:2d:c4:43:3a:
91:1e:8e:7d:50:12:de:ff:7d:40:00:d6:47:12:d8:8e:94:98:
df:8b:82:33:d0:e7:d7:67:1c:35:32:7d:14:45:bb:45:31:8a:
83:e1:f5:94:b8:07:18:3f:d6:23:e8:39:59:ca:90:f1:48:fc:
b3:3b:3b:c1:89:29:07:00:47:ae:4a:67:db:ef:b7:27:a5:f4:
31:21:f5:5e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOspMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDI0NDE3WhcNMjcxMjEwMDI0NDE3WjAYMRYw
FAYDVQQDEw02NzZjYzMwNS04NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0u2R/p5Bl7W28lrY8s2zTHLvpcfTh/RkXlIx7X3kqa9Da9NBZBHcYwxG
5l83QF+rvWJfV0k/Mi248cENv07ntEiH7DkV6l0MiRm+fzfRJGCwYGZ4ABTgzP5J
NURw73aiS8DvS2dfy8UvRRNwH2YatrgAJtM3F4bL5ncHjH53IUu3M0O+yWPvjX8s
3Hzhx/fLvVg50KQUnyDuMbNZSp110oqYScyuRrEqbysNEu+IxaRFDV1nCY8wO+BE
r6aweH11Pb+qzi9V7yFVGaiXqfWYIXibA2w6KtUu2fqM8kAWUJp4PWHDP85pnMbT
F3pxmtn5O9MHY+shKtf1ScEkpouKqQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLDM
3cNpqU4S+tInFMD8QKs8hroRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RjBFRjRFOEMzMzMxMUVGOTlGOTQ0NjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPSQMA0GCSqGSIb3DQEBCwUA
A4IBAQBDCYIogD/JnLM6NUtNpY4LK7+0VILLTYwWilV2DEN2p5Fu2CSXtzfGampO
iJGtKmNHi5ZYWdnJF02aHAfOPKIiWLhpZ9QggoGfe8G7xAKnPRkhjyVusb74JSmv
enM1xqwSXMkCMEzY6WIvrq1Bk5SKfkijP95gDn9rkLE3sU1u9Wm/mQ3idQU3m9zs
w+ta2WRo9UIDUF5z5ejYkk1hWLDMuKxgdjBbXkTxAYfIh5dmuC3EQzqRHo59UBLe
/31AANZHEtiOlJjfi4Iz0OfXZxw1Mn0URbtFMYqD4fWUuAcYP9Yj6DlZypDxSPyz
OzvBiSkHAEeuSmfb77cnpfQxIfVe
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:57 2025 by rpki-client