Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71720DAEC95F11EFAC2A4195762E951A.roa
File: 71720DAEC95F11EFAC2A4195762E951A.roa (raw, json)
Hash identifier: p6AiGrC/LFN3NE3M4dgxYWO24lH4hlN7BQqzKTV/zGk=
Subject key identifier: A4:92:2A:EC:DE:EA:F9:13:5F:46:B3:35:34:15:1B:AE:01:F3:6A:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F450
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71720DAEC95F11EFAC2A4195762E951A.roa
Signing time: Thu 02 Jan 2025 23:15:23 +0000
ROA not before: Thu 02 Jan 2025 23:15:19 +0000
ROA not after: Sat 13 Dec 2025 23:15:19 +0000
asID: 984
IP address blocks: 156.226.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62544 (0xf450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 23:15:19 2025 GMT
Not After : Dec 13 23:15:19 2025 GMT
Subject: CN=67771e0b-2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:79:0b:94:32:18:ad:ed:53:c0:80:d8:bc:
aa:a9:05:f9:9e:a7:10:aa:d7:19:d7:ee:26:9b:b8:
4f:90:e7:b7:40:b2:40:4e:d0:9c:6f:21:f0:26:ee:
c2:b0:52:5d:17:6b:7f:fc:77:77:9f:87:bf:66:0c:
e5:77:9f:4b:ec:cc:ed:28:9d:d8:06:e0:7b:09:8b:
61:2e:e0:c8:17:04:49:2c:e4:e4:91:e1:d1:ad:46:
dd:82:e7:4b:78:93:67:68:85:15:cb:b2:c3:a3:45:
42:ae:92:99:27:23:4a:f3:4b:b3:1b:02:83:57:05:
ab:7e:74:70:28:27:bc:38:6b:3b:38:c8:03:bb:ff:
c3:eb:57:3a:04:8c:ed:9b:6d:d9:9d:2a:4d:83:c6:
84:f1:a9:14:e5:f5:39:e2:85:34:6c:40:06:40:37:
0e:e7:8b:9a:c1:7e:44:ca:a9:a3:03:9c:ae:b9:3a:
19:d2:c0:33:d0:de:62:15:69:7c:d8:7f:83:37:f0:
fe:d6:5d:0a:9b:aa:65:20:e9:bc:40:e4:a3:db:46:
5b:bd:91:b6:ba:71:d1:a9:da:77:03:e1:5f:f8:28:
78:36:61:f8:36:ed:4f:06:be:3c:6d:b4:d2:69:3f:
35:8c:3a:dc:f1:b9:97:ae:34:50:27:8d:0c:eb:61:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:2A:EC:DE:EA:F9:13:5F:46:B3:35:34:15:1B:AE:01:F3:6A:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71720DAEC95F11EFAC2A4195762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.218.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8e:a3:00:68:37:02:3f:cb:c1:ab:87:a5:c7:c3:0d:7e:58:
73:f5:5d:d5:55:45:ab:ac:36:60:4e:ff:34:a9:53:cf:a3:b3:
4d:15:d7:c6:2c:cd:aa:76:8d:9a:44:ea:17:41:41:54:a2:11:
60:e6:7e:65:89:a8:25:19:f4:75:24:22:a9:1d:b4:34:90:5d:
92:60:11:d4:ab:1b:44:0b:a3:6d:cc:cd:e2:03:83:fc:97:04:
6e:4a:8f:12:7e:8a:13:16:3a:f3:d6:cf:c0:42:43:77:aa:09:
1e:34:65:1d:e1:dd:c2:85:5e:93:84:f5:7e:08:dc:3b:1f:bd:
38:7d:79:6e:d5:b2:e8:54:b5:5d:75:bd:3a:4b:de:e1:d7:3a:
cc:ed:85:1c:53:c1:e9:76:3f:17:9e:d1:e3:5a:72:a5:fa:fe:
25:c9:dd:3a:94:99:d2:08:a7:2f:73:e4:d3:34:07:01:09:ee:
bf:d0:ad:b9:3a:3b:3f:a3:dd:78:36:c6:5e:7b:88:73:78:c1:
a5:ff:90:83:76:53:db:ba:df:14:50:88:ce:9c:32:77:f4:04:
b4:db:40:cb:4d:7f:32:1a:4d:79:99:1a:6e:d9:f0:95:e7:cb:
13:a7:8c:d6:01:b3:cc:74:11:b5:1d:f2:7b:ab:d3:b3:e9:43:
c4:1c:93:ad
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPRQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjMxNTE5WhcNMjUxMjEzMjMxNTE5WjAYMRYw
FAYDVQQDEw02Nzc3MWUwYi0yYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuXZ5C5QyGK3tU8CA2LyqqQX5nqcQqtcZ1+4mm7hPkOe3QLJATtCcbyHw
Ju7CsFJdF2t//Hd3n4e/Zgzld59L7MztKJ3YBuB7CYthLuDIFwRJLOTkkeHRrUbd
gudLeJNnaIUVy7LDo0VCrpKZJyNK80uzGwKDVwWrfnRwKCe8OGs7OMgDu//D61c6
BIztm23ZnSpNg8aE8akU5fU54oU0bEAGQDcO54uawX5EyqmjA5yuuToZ0sAz0N5i
FWl82H+DN/D+1l0Km6plIOm8QOSj20ZbvZG2unHRqdp3A+Ff+Ch4NmH4Nu1PBr48
bbTSaT81jDrc8bmXrjRQJ40M62G68wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKSS
Kuze6vkTX0azNTQVG64B82rJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MTcyMERBRUM5NUYxMUVGQUMyQTQxOTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOLaMA0GCSqGSIb3DQEBCwUA
A4IBAQA/jqMAaDcCP8vBq4elx8MNflhz9V3VVUWrrDZgTv80qVPPo7NNFdfGLM2q
do2aROoXQUFUohFg5n5liaglGfR1JCKpHbQ0kF2SYBHUqxtEC6NtzM3iA4P8lwRu
So8SfooTFjrz1s/AQkN3qgkeNGUd4d3ChV6ThPV+CNw7H704fXlu1bLoVLVddb06
S97h1zrM7YUcU8Hpdj8XntHjWnKl+v4lyd06lJnSCKcvc+TTNAcBCe6/0K25Ojs/
o914NsZee4hzeMGl/5CDdlPbut8UUIjOnDJ39AS020DLTX8yGk15mRpu2fCV58sT
p4zWAbPMdBG1HfJ7q9Oz6UPEHJOt
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:12 2025 by rpki-client