Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DB4786CD1311EF8918EBA2762E951A.roa
File: 57DB4786CD1311EF8918EBA2762E951A.roa (raw, json)
Hash identifier: ZH1c7O6bfRo1+/OKb0qbhwV4idS9p1efqwGrYYIiWhw=
Subject key identifier: 1B:E0:46:CE:DA:91:33:B3:C5:BD:7F:EA:89:D0:8D:2B:24:A1:1C:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DB4786CD1311EF8918EBA2762E951A.roa
Signing time: Tue 07 Jan 2025 16:20:43 +0000
ROA not before: Tue 07 Jan 2025 16:20:40 +0000
ROA not after: Mon 13 Dec 2027 16:20:40 +0000
asID: 17561
IP address blocks: 156.240.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64773 (0xfd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 16:20:40 2025 GMT
Not After : Dec 13 16:20:40 2027 GMT
Subject: CN=677d545b-dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:62:81:ee:8e:89:14:f7:90:81:e7:77:80:4b:
98:bf:00:62:b4:2f:b9:cf:d4:31:c1:42:c5:e7:ed:
2e:06:9e:03:11:f1:45:36:8d:fa:64:ec:0a:de:08:
89:5d:4e:e4:6e:e7:d1:1c:84:f9:d9:d4:48:f5:cb:
9c:5d:cd:95:95:d0:8a:59:05:b1:09:60:cb:52:bf:
44:87:4b:7b:16:5f:6e:89:f8:49:77:93:62:f0:8e:
a7:df:9e:95:14:5c:15:ae:9c:c5:33:3a:2a:cf:0c:
48:06:e6:4d:ca:d4:ce:75:3e:73:b3:e3:ee:dc:2d:
b6:0b:78:4b:30:1e:d0:c7:8a:c4:98:84:77:23:26:
ad:d4:33:50:65:3c:ca:c8:47:f8:66:df:0d:d2:cf:
23:ef:c4:fd:64:f4:10:a5:79:1c:6b:18:08:83:58:
3e:fb:0d:f1:9a:7b:fa:fc:01:1b:ae:86:d8:02:ff:
7a:0f:ea:d8:79:20:96:ab:53:48:34:ef:d9:75:98:
02:77:07:d2:e7:fa:d3:2b:de:81:c1:9d:5c:45:c1:
5c:eb:a0:d3:28:cd:a4:21:c0:ae:ba:18:65:5c:c9:
93:31:7b:18:be:66:02:27:17:b7:ce:d9:c0:fe:df:
d5:59:7b:e0:af:a3:a8:37:12:6a:29:73:49:18:99:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:46:CE:DA:91:33:B3:C5:BD:7F:EA:89:D0:8D:2B:24:A1:1C:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DB4786CD1311EF8918EBA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.103.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8d:76:50:69:e4:dc:d4:a0:34:fb:67:61:98:15:12:89:ec:
64:31:5f:fc:29:bb:ba:4e:cf:7e:ec:28:fa:96:a9:2b:9c:b6:
15:2e:9b:85:99:6a:fa:03:60:4a:01:0b:1e:b0:3d:82:8f:ea:
57:17:c8:17:0e:79:a2:55:65:69:d8:87:17:54:18:ee:a7:56:
2b:f8:af:7a:0b:d4:e7:0b:37:b5:aa:bd:be:c5:87:c1:99:85:
dd:1b:a0:63:a5:4c:7d:31:94:c8:13:27:94:52:8e:a4:64:8b:
be:7c:17:ca:20:d5:f2:34:28:a8:1f:c1:97:32:a8:7d:d4:05:
44:51:5d:3f:66:37:00:e7:3d:ea:e1:19:63:d7:f8:71:6a:0a:
6c:31:df:d6:ff:e5:4a:53:15:ce:c3:b7:e0:b7:0a:6e:fb:16:
dd:c0:fe:b6:79:52:40:3e:a1:89:ea:49:70:f0:a4:93:74:f0:
70:b1:9e:4f:69:28:d9:84:36:50:f4:ce:cc:69:26:ea:00:9a:
06:da:b7:e2:74:fb:63:37:38:3c:19:9c:40:17:cf:00:46:90:
10:e7:e9:c6:1e:77:0b:19:a1:42:59:ac:a2:9f:09:89:50:31:
9d:28:fd:ce:23:18:39:9d:d1:c2:34:02:a8:a8:32:37:ee:c9:
dc:bd:1d:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP0FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTYyMDQwWhcNMjcxMjEzMTYyMDQwWjAYMRYw
FAYDVQQDEw02NzdkNTQ1Yi1kZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvmKB7o6JFPeQged3gEuYvwBitC+5z9QxwULF5+0uBp4DEfFFNo36ZOwK
3giJXU7kbufRHIT52dRI9cucXc2VldCKWQWxCWDLUr9Eh0t7Fl9uifhJd5Ni8I6n
356VFFwVrpzFMzoqzwxIBuZNytTOdT5zs+Pu3C22C3hLMB7Qx4rEmIR3Iyat1DNQ
ZTzKyEf4Zt8N0s8j78T9ZPQQpXkcaxgIg1g++w3xmnv6/AEbrobYAv96D+rYeSCW
q1NINO/ZdZgCdwfS5/rTK96BwZ1cRcFc66DTKM2kIcCuuhhlXMmTMXsYvmYCJxe3
ztnA/t/VWXvgr6OoNxJqKXNJGJnBXwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBvg
Rs7akTOzxb1/6onQjSskoRwpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81N0RCNDc4NkNEMTMxMUVGODkxOEVCQTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPBnMA0GCSqGSIb3DQEBCwUA
A4IBAQAdjXZQaeTc1KA0+2dhmBUSiexkMV/8Kbu6Ts9+7Cj6lqkrnLYVLpuFmWr6
A2BKAQsesD2Cj+pXF8gXDnmiVWVp2IcXVBjup1Yr+K96C9TnCze1qr2+xYfBmYXd
G6BjpUx9MZTIEyeUUo6kZIu+fBfKINXyNCioH8GXMqh91AVEUV0/ZjcA5z3q4Rlj
1/hxagpsMd/W/+VKUxXOw7fgtwpu+xbdwP62eVJAPqGJ6klw8KSTdPBwsZ5PaSjZ
hDZQ9M7MaSbqAJoG2rfidPtjNzg8GZxAF88ARpAQ5+nGHncLGaFCWayinwmJUDGd
KP3OIxg5ndHCNAKoqDI37sncvR30
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:52 2025 by rpki-client