Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5093F816CD2611EF800CF999762E951A.roa
File: 5093F816CD2611EF800CF999762E951A.roa (raw, json)
Hash identifier: Ox3OwV4mS3OwsZe7SAH6xu7yj2SpAp0rSHssc0AL3tk=
Subject key identifier: 5F:26:ED:C7:A7:3F:FB:D3:13:C0:21:16:35:DB:E8:43:51:BB:54:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5093F816CD2611EF800CF999762E951A.roa
Signing time: Tue 07 Jan 2025 18:36:32 +0000
ROA not before: Tue 07 Jan 2025 18:36:28 +0000
ROA not after: Sat 13 Dec 2025 18:36:28 +0000
asID: 984
IP address blocks: 156.241.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64925 (0xfd9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:36:28 2025 GMT
Not After : Dec 13 18:36:28 2025 GMT
Subject: CN=677d742f-72a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:2a:06:0b:86:b3:8d:94:c6:1e:27:84:b2:
ba:81:d6:af:5c:d1:04:50:a2:06:0b:21:97:e1:eb:
15:19:c8:8a:5e:be:ca:a4:48:67:58:95:ee:61:19:
61:a6:bc:5f:96:16:cc:ea:98:53:4c:ec:fb:3a:19:
2d:bd:cd:7e:12:ad:ed:24:97:95:74:4f:77:b9:ef:
12:4b:1c:1a:ff:ed:56:cf:db:e5:f7:3b:51:e7:64:
b5:05:4b:3c:17:b6:53:fe:b3:52:9b:c1:fa:6e:47:
7d:d9:28:d8:bd:43:ae:2a:d9:07:cd:e1:30:24:4f:
02:a9:7e:38:78:e3:d4:a1:d4:91:68:d2:2d:12:67:
d2:fb:df:92:f1:9e:03:c1:3d:70:b2:61:7e:3d:ec:
bd:49:c7:3f:cc:ff:fb:9f:64:f6:5e:3a:55:aa:dc:
87:76:96:5e:23:56:71:ce:a2:76:13:5a:4f:05:6c:
46:c5:e2:dc:9d:7b:ce:6a:ed:60:e3:55:a1:34:9b:
e6:55:1e:71:23:74:ed:9a:96:36:e4:c8:21:ad:b3:
19:c9:b4:8e:cb:b0:66:0a:0c:62:18:f5:9e:a4:2d:
e2:ca:85:b0:65:b8:23:40:4a:33:0d:b5:a7:4f:2b:
07:b0:ab:a9:e1:ca:ba:e7:40:4a:ac:2b:cc:f7:dd:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:ED:C7:A7:3F:FB:D3:13:C0:21:16:35:DB:E8:43:51:BB:54:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5093F816CD2611EF800CF999762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:87:49:8c:8d:18:37:8c:02:08:86:ff:7c:04:70:e9:6f:79:
95:de:93:3b:17:2a:b1:b2:5e:9e:27:b3:c3:57:98:18:b3:5b:
7d:2e:c4:a4:44:53:ac:90:03:0b:37:77:f2:3a:d8:94:67:93:
a6:85:2b:07:b3:e3:c7:84:94:6b:af:90:e7:b5:1c:6c:e9:c0:
ae:b6:e8:ad:d9:50:c8:4d:d9:7e:04:ff:00:4c:38:5c:84:be:
b2:6e:31:a8:ad:b2:fb:4c:f7:00:31:8f:a5:f3:bf:5e:6c:b0:
58:2d:66:d1:33:a9:25:7c:ad:fd:a7:b0:a1:81:6e:da:6f:58:
fe:99:bd:61:24:4c:9a:9e:4f:e4:23:2e:ab:45:cc:7e:78:36:
2c:f7:2e:e5:f2:0b:69:3f:c5:0d:0d:de:f4:bb:f0:27:fc:f4:
ec:68:80:76:4e:e9:31:b7:89:8a:1b:9b:de:3e:6e:00:67:4e:
29:92:ca:9d:bc:51:cb:b6:18:59:2f:bf:63:10:d2:90:4f:58:
a7:1f:30:85:c1:c0:ee:95:05:43:44:e3:7b:8e:98:fe:1b:36:
a2:00:5f:e4:e8:60:db:77:06:ff:2a:90:b3:ab:f2:7f:4f:26:
14:04:5f:9c:a9:6b:7e:51:a3:94:12:1b:1d:a8:78:10:7f:36:
59:61:03:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP2dMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTgzNjI4WhcNMjUxMjEzMTgzNjI4WjAYMRYw
FAYDVQQDEw02NzdkNzQyZi03MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu1kqBguGs42Uxh4nhLK6gdavXNEEUKIGCyGX4esVGciKXr7KpEhnWJXu
YRlhprxflhbM6phTTOz7Ohktvc1+Eq3tJJeVdE93ue8SSxwa/+1Wz9vl9ztR52S1
BUs8F7ZT/rNSm8H6bkd92SjYvUOuKtkHzeEwJE8CqX44eOPUodSRaNItEmfS+9+S
8Z4DwT1wsmF+Pey9Scc/zP/7n2T2XjpVqtyHdpZeI1ZxzqJ2E1pPBWxGxeLcnXvO
au1g41WhNJvmVR5xI3TtmpY25MghrbMZybSOy7BmCgxiGPWepC3iyoWwZbgjQEoz
DbWnTysHsKup4cq650BKrCvM991+rwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF8m
7cenP/vTE8AhFjXb6ENRu1QAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MDkzRjgxNkNEMjYxMUVGODAwQ0Y5OTk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHZMA0GCSqGSIb3DQEBCwUA
A4IBAQCyh0mMjRg3jAIIhv98BHDpb3mV3pM7Fyqxsl6eJ7PDV5gYs1t9LsSkRFOs
kAMLN3fyOtiUZ5OmhSsHs+PHhJRrr5DntRxs6cCutuit2VDITdl+BP8ATDhchL6y
bjGorbL7TPcAMY+l879ebLBYLWbRM6klfK39p7ChgW7ab1j+mb1hJEyank/kIy6r
Rcx+eDYs9y7l8gtpP8UNDd70u/An/PTsaIB2Tukxt4mKG5vePm4AZ04pksqdvFHL
thhZL79jENKQT1inHzCFwcDulQVDRON7jpj+GzaiAF/k6GDbdwb/KpCzq/J/TyYU
BF+cqWt+UaOUEhsdqHgQfzZZYQM7
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:36 2025 by rpki-client