Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/663488C2CDA111EF94540BB8762E951A.roa
File: 663488C2CDA111EF94540BB8762E951A.roa (raw, json)
Hash identifier: WYtwRPw6SsnWEflFugJwpeby9ZMvFi5XAhgSw2ihgQQ=
Subject key identifier: D5:03:A7:18:E6:1C:61:2C:34:35:F8:47:33:C5:FD:D8:17:C4:7E:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/663488C2CDA111EF94540BB8762E951A.roa
Signing time: Wed 08 Jan 2025 09:17:36 +0000
ROA not before: Wed 08 Jan 2025 09:17:32 +0000
ROA not after: Mon 13 Dec 2027 09:17:32 +0000
asID: 17561
IP address blocks: 156.253.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65761 (0x100e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:17:32 2025 GMT
Not After : Dec 13 09:17:32 2027 GMT
Subject: CN=677e42b0-bce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:2f:6e:19:61:b4:32:8b:2e:7b:7c:14:00:
aa:08:08:ba:d8:ec:e1:14:83:60:6e:c0:dd:dd:38:
7e:7a:98:23:69:c9:fe:ee:c6:89:f0:60:6a:5d:33:
fc:bb:ca:11:d5:3e:15:9c:8f:37:36:b3:cc:04:6e:
83:98:13:29:dd:11:b1:7a:4c:e4:67:48:24:b0:1c:
bd:7b:98:38:ae:37:97:15:99:2d:e1:f6:2a:20:1b:
a8:e7:06:ee:a6:c9:42:c0:83:b5:9c:b2:30:c9:c0:
88:57:48:c8:4d:b1:86:82:c2:46:6a:1c:ef:de:44:
6c:8a:5b:59:73:d3:da:e0:84:3d:f1:0e:42:e8:75:
c2:17:1c:bd:e9:79:9f:60:3e:d6:10:11:7f:82:5c:
bd:47:c9:e7:0d:34:25:76:bb:9e:cf:f8:f3:54:89:
5c:a6:8e:7b:1d:15:16:f4:ca:7a:bd:b9:be:b6:a0:
a2:53:b7:94:8f:5d:df:ca:61:ee:3a:6d:f5:ce:0c:
98:a7:cc:d3:cd:c8:33:34:7c:2e:1e:6c:7b:cf:d8:
bf:91:57:60:e3:1f:0e:ec:d2:1e:c5:16:93:f1:b4:
52:56:6d:0c:74:74:a1:03:ae:b8:b6:2d:4d:ad:dc:
6c:55:17:05:02:1a:1c:5d:6f:85:d2:a0:80:7d:13:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:A7:18:E6:1C:61:2C:34:35:F8:47:33:C5:FD:D8:17:C4:7E:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/663488C2CDA111EF94540BB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.42.0/24
Signature Algorithm: sha256WithRSAEncryption
12:36:8d:ab:f0:10:21:8c:6d:fb:e7:69:ad:57:e9:de:c4:8e:
97:5f:b3:30:65:91:93:d0:59:b3:77:af:6d:a3:db:12:73:94:
f6:47:8d:d2:4f:0b:4e:6d:ab:4c:51:d8:f5:47:9a:5f:63:13:
0c:f8:1d:5d:67:4b:6a:be:79:0c:f2:ee:7c:39:b6:a5:5e:5f:
13:fd:df:49:b3:14:30:0b:ed:1c:30:c8:77:1f:57:63:a5:d7:
15:bd:8e:48:e0:29:d8:b6:3c:07:93:68:78:d7:54:89:9a:c7:
3b:c9:c4:aa:97:62:ff:a5:c6:5d:4a:ba:b1:45:02:07:d4:1b:
04:16:d1:63:06:0d:ea:65:43:03:59:c6:3d:50:29:8d:44:55:
90:8a:fc:cd:d4:0a:c6:66:da:fa:d4:75:3b:4c:92:3e:98:12:
37:b8:3b:81:ff:2f:d7:b5:7b:30:47:a5:16:3c:1d:32:71:ab:
82:8a:2b:18:73:02:9a:b6:8c:41:28:90:04:3e:8b:10:82:a3:
4e:b2:63:6b:72:93:8a:fe:d8:24:7d:57:5f:12:16:ec:ec:92:
89:53:d8:c0:fb:dc:e0:c7:17:71:39:68:32:4c:62:1b:44:92:
93:b8:d7:f8:d2:f2:52:fe:e6:5c:1a:16:ed:33:d1:cf:94:c9:
2f:a6:0c:2b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQDhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDkxNzMyWhcNMjcxMjEzMDkxNzMyWjAYMRYw
FAYDVQQDEw02NzdlNDJiMC1iY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsvgvbhlhtDKLLnt8FACqCAi62OzhFINgbsDd3Th+epgjacn+7saJ8GBq
XTP8u8oR1T4VnI83NrPMBG6DmBMp3RGxekzkZ0gksBy9e5g4rjeXFZkt4fYqIBuo
5wbupslCwIO1nLIwycCIV0jITbGGgsJGahzv3kRsiltZc9Pa4IQ98Q5C6HXCFxy9
6XmfYD7WEBF/gly9R8nnDTQldruez/jzVIlcpo57HRUW9Mp6vbm+tqCiU7eUj13f
ymHuOm31zgyYp8zTzcgzNHwuHmx7z9i/kVdg4x8O7NIexRaT8bRSVm0MdHShA664
ti1NrdxsVRcFAhocXW+F0qCAfRNw2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNUD
pxjmHGEsNDX4RzPF/dgXxH7XMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NjM0ODhDMkNEQTExMUVGOTQ1NDBCQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP0qMA0GCSqGSIb3DQEBCwUA
A4IBAQASNo2r8BAhjG3752mtV+nexI6XX7MwZZGT0Fmzd69to9sSc5T2R43STwtO
batMUdj1R5pfYxMM+B1dZ0tqvnkM8u58ObalXl8T/d9JsxQwC+0cMMh3H1djpdcV
vY5I4CnYtjwHk2h411SJmsc7ycSql2L/pcZdSrqxRQIH1BsEFtFjBg3qZUMDWcY9
UCmNRFWQivzN1ArGZtr61HU7TJI+mBI3uDuB/y/XtXswR6UWPB0ycauCiisYcwKa
toxBKJAEPosQgqNOsmNrcpOK/tgkfVdfEhbs7JKJU9jA+9zgxxdxOWgyTGIbRJKT
uNf40vJS/uZcGhbtM9HPlMkvpgwr
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:11 2025 by rpki-client