Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F26944CD7911EF8840CCBB762E951A.roa
File: 72F26944CD7911EF8840CCBB762E951A.roa (raw, json)
Hash identifier: /QvKM7O8Y+jQZPwSo8pa4e+F0Zl3pVw44vPHE+72uhM=
Subject key identifier: E5:D6:F5:84:BA:B4:08:E5:9D:A7:57:A9:6B:60:2D:0B:4E:56:FE:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FFCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F26944CD7911EF8840CCBB762E951A.roa
Signing time: Wed 08 Jan 2025 04:31:38 +0000
ROA not before: Wed 08 Jan 2025 04:31:34 +0000
ROA not after: Mon 13 Dec 2027 04:31:34 +0000
asID: 17561
IP address blocks: 156.250.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65483 (0xffcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 04:31:34 2025 GMT
Not After : Dec 13 04:31:34 2027 GMT
Subject: CN=677dffa9-ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:f3:e7:c8:16:bd:3c:b1:9f:3b:93:e0:71:
fe:f6:26:67:66:cd:a0:5b:55:54:9b:d7:f2:1f:43:
df:36:89:e7:b2:e5:d4:7a:a5:7a:5e:02:32:12:d7:
dd:c5:91:5c:71:d0:ab:fb:41:17:cd:70:9e:f4:1c:
28:d7:09:8e:19:1b:0e:5b:60:86:6d:ad:13:c0:41:
af:14:ee:41:65:21:f2:ac:51:4a:b9:c6:83:c3:15:
d2:0a:7c:8f:30:f3:b3:9d:60:d6:02:5b:2f:52:e8:
75:ab:bf:33:bd:cc:fc:de:d7:99:5f:d6:57:df:e7:
eb:52:d2:37:dc:63:b9:89:af:9f:ab:92:38:c8:2d:
2f:a8:95:0f:2a:c2:6d:c1:e5:47:5b:ae:8b:f0:92:
4e:f9:1f:b3:0c:5e:d4:43:ba:64:f7:f4:83:ab:bc:
64:09:e9:b4:ac:80:c5:11:98:b4:2f:86:85:80:1f:
14:42:f6:55:28:ca:37:e4:c3:c0:99:ce:95:77:65:
ed:91:cf:6b:8d:b6:2f:27:61:e4:52:63:54:8a:02:
c0:b7:7e:b5:44:5b:e9:38:67:bb:b8:42:a6:8c:76:
0a:67:33:73:b1:27:5b:44:86:d6:80:e4:95:72:1a:
b8:97:e3:b3:08:f1:23:96:25:35:26:9e:34:6d:cb:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D6:F5:84:BA:B4:08:E5:9D:A7:57:A9:6B:60:2D:0B:4E:56:FE:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F26944CD7911EF8840CCBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.42.0/24
Signature Algorithm: sha256WithRSAEncryption
09:83:69:bc:82:3c:2c:b8:df:43:11:86:4a:98:be:49:67:45:
a3:e4:56:0e:84:99:03:a8:8c:a5:42:39:43:26:f1:f7:26:03:
5c:07:66:78:97:7b:51:c3:fc:0c:a8:a8:db:e1:03:91:a2:0c:
b3:cb:17:69:45:1c:fd:c6:bc:a9:4c:76:d2:95:fa:ab:a3:30:
17:dd:c4:c5:e3:dc:b4:66:31:7b:7d:16:1c:63:73:76:ca:72:
7c:fb:a9:d8:39:f0:c1:f5:7d:cf:46:4a:33:e6:a7:5c:19:94:
70:21:02:08:2a:4a:9d:d4:a2:22:30:1b:2c:28:4b:73:12:af:
8e:d0:d8:b4:48:a8:6a:dd:4f:89:cd:b7:aa:06:d9:c6:7a:5a:
b9:97:2d:f3:53:fd:6b:82:dc:d9:77:80:fc:af:a8:6c:60:d3:
17:5a:7c:fe:42:e0:84:03:a5:39:09:1a:0c:45:93:45:a2:b4:
ab:c1:56:f4:62:ac:97:d9:6b:c0:f3:06:60:17:11:59:03:5f:
5b:9c:69:97:9d:a3:ed:cc:78:f6:29:82:63:28:7e:32:f7:5f:
0d:7e:53:e7:04:35:eb:b3:d8:1c:0c:fb:ff:c6:f6:dd:4b:13:
8e:6d:7a:b3:f6:7f:01:1e:f2:31:4a:99:ce:79:b5:f0:49:eb:
57:d3:3c:56
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP/LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDQzMTM0WhcNMjcxMjEzMDQzMTM0WjAYMRYw
FAYDVQQDEw02NzdkZmZhOS1hZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLnz58gWvTyxnzuT4HH+9iZnZs2gW1VUm9fyH0PfNonnsuXUeqV6XgIy
EtfdxZFccdCr+0EXzXCe9Bwo1wmOGRsOW2CGba0TwEGvFO5BZSHyrFFKucaDwxXS
CnyPMPOznWDWAlsvUuh1q78zvcz83teZX9ZX3+frUtI33GO5ia+fq5I4yC0vqJUP
KsJtweVHW66L8JJO+R+zDF7UQ7pk9/SDq7xkCem0rIDFEZi0L4aFgB8UQvZVKMo3
5MPAmc6Vd2Xtkc9rjbYvJ2HkUmNUigLAt361RFvpOGe7uEKmjHYKZzNzsSdbRIbW
gOSVchq4l+OzCPEjliU1Jp40bcuEnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOXW
9YS6tAjlnadXqWtgLQtOVv4qMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MkYyNjk0NENENzkxMUVGODg0MENDQkI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPoqMA0GCSqGSIb3DQEBCwUA
A4IBAQAJg2m8gjwsuN9DEYZKmL5JZ0Wj5FYOhJkDqIylQjlDJvH3JgNcB2Z4l3tR
w/wMqKjb4QORogyzyxdpRRz9xrypTHbSlfqrozAX3cTF49y0ZjF7fRYcY3N2ynJ8
+6nYOfDB9X3PRkoz5qdcGZRwIQIIKkqd1KIiMBssKEtzEq+O0Ni0SKhq3U+Jzbeq
BtnGelq5ly3zU/1rgtzZd4D8r6hsYNMXWnz+QuCEA6U5CRoMRZNForSrwVb0YqyX
2WvA8wZgFxFZA19bnGmXnaPtzHj2KYJjKH4y918NflPnBDXrs9gcDPv/xvbdSxOO
bXqz9n8BHvIxSpnOebXwSetX0zxW
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:57 2025 by rpki-client