Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738DA79CCCBB11EF8F810378762E951A.roa
File: 738DA79CCCBB11EF8F810378762E951A.roa (raw, json)
Hash identifier: GAGaMNoIOuQC7JsqNhEDiw1h3mYTyZFpxUyMM++XHVA=
Subject key identifier: B9:8D:B8:25:66:FD:67:C4:D8:FE:C5:D2:EE:4F:29:0F:B4:33:95:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738DA79CCCBB11EF8F810378762E951A.roa
Signing time: Tue 07 Jan 2025 05:51:34 +0000
ROA not before: Tue 07 Jan 2025 05:51:31 +0000
ROA not after: Sat 13 Dec 2025 05:51:31 +0000
asID: 984
IP address blocks: 156.233.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64016 (0xfa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 05:51:31 2025 GMT
Not After : Dec 13 05:51:31 2025 GMT
Subject: CN=677cc0e6-8aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:a7:46:a9:cd:3d:51:e7:1d:11:c2:fe:16:
e2:32:dd:5a:5d:f4:a9:a4:1c:d8:20:a7:b3:cd:3a:
66:9d:27:d1:24:79:03:03:3c:70:91:67:c7:69:35:
b2:97:cb:a3:39:7b:64:33:39:b9:5e:c2:7b:13:35:
84:bb:b0:07:d2:c1:58:aa:ba:5e:ab:7f:a6:c6:81:
e5:a8:b4:f8:4f:cf:81:a8:a2:06:45:c9:78:18:12:
8e:6e:05:3b:0f:1c:03:60:c3:6e:a9:9f:78:ab:72:
39:1e:fb:63:6f:2e:a0:df:1f:e9:ff:14:b2:13:38:
16:06:dc:94:ad:ab:9a:e7:05:72:a3:fa:36:70:38:
e1:d2:42:c9:cf:d5:cf:c8:68:54:0c:8f:69:fd:f1:
24:07:7e:17:5c:c5:ef:a8:cb:c6:45:e9:5e:13:05:
68:c3:4c:d8:ae:e6:63:3f:71:75:09:63:c9:48:28:
e4:17:9c:c5:50:4c:78:ba:8e:56:1b:a5:63:69:72:
4a:8e:04:5d:f4:d8:d9:17:66:38:f2:c9:b2:ff:5c:
d9:ed:95:85:e6:d3:5b:58:ff:91:47:e5:72:46:f0:
6e:03:7b:72:d7:17:d8:7f:ac:0e:64:30:92:2f:cb:
0c:a7:31:3e:72:d3:e8:e3:af:02:2b:80:e9:fc:97:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8D:B8:25:66:FD:67:C4:D8:FE:C5:D2:EE:4F:29:0F:B4:33:95:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738DA79CCCBB11EF8F810378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c9:b4:b9:ca:fe:c1:63:5e:e7:ba:48:7c:fe:69:0e:b1:45:
78:76:87:a4:41:13:48:44:1d:25:44:30:42:0f:0a:9c:2e:94:
77:0d:4c:e8:81:c2:e0:e2:05:d1:70:63:2f:08:e2:1c:ed:a5:
c7:b0:2d:e4:0e:b7:c5:f3:84:c6:f9:09:49:72:37:f3:88:56:
62:9e:f7:48:b4:96:7f:96:25:a9:e3:2e:ef:0f:b4:53:63:2a:
c5:db:08:25:e9:a5:fe:f0:9c:a3:a6:12:b0:bf:d3:5e:7e:38:
ae:08:3b:06:6a:90:2b:6f:7f:91:39:a4:46:a1:ed:29:3e:a0:
d4:48:d4:93:fa:74:4a:23:7b:fc:cf:6a:2a:7e:d1:39:fe:39:
dc:34:e3:6b:48:f2:d4:ec:56:ad:8f:10:8c:14:25:d3:bc:09:
00:31:27:f9:f4:af:1f:ae:06:a5:83:18:05:1e:c7:18:92:bd:
f4:db:e1:a4:0f:90:c8:dc:97:9b:6c:4a:ca:38:66:a4:66:1a:
00:bd:ec:6d:12:cc:69:f9:15:fc:ff:f9:52:f0:de:c4:96:37:
4d:64:ad:3c:c5:2c:ac:34:ab:2e:fb:83:61:b1:ee:f2:0d:94:
ff:51:9b:fc:65:de:ab:d2:a5:bb:ef:1a:b3:91:f7:07:42:11:
61:8c:d6:e9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPoQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDU1MTMxWhcNMjUxMjEzMDU1MTMxWjAYMRYw
FAYDVQQDEw02NzdjYzBlNi04YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3oinRqnNPVHnHRHC/hbiMt1aXfSppBzYIKezzTpmnSfRJHkDAzxwkWfH
aTWyl8ujOXtkMzm5XsJ7EzWEu7AH0sFYqrpeq3+mxoHlqLT4T8+BqKIGRcl4GBKO
bgU7DxwDYMNuqZ94q3I5Hvtjby6g3x/p/xSyEzgWBtyUraua5wVyo/o2cDjh0kLJ
z9XPyGhUDI9p/fEkB34XXMXvqMvGReleEwVow0zYruZjP3F1CWPJSCjkF5zFUEx4
uo5WG6VjaXJKjgRd9NjZF2Y48smy/1zZ7ZWF5tNbWP+RR+VyRvBuA3ty1xfYf6wO
ZDCSL8sMpzE+ctPo468CK4Dp/Jd+xQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLmN
uCVm/WfE2P7F0u5PKQ+0M5VUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MzhEQTc5Q0NDQkIxMUVGOEY4MTAzNzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkSMA0GCSqGSIb3DQEBCwUA
A4IBAQAvybS5yv7BY17nukh8/mkOsUV4doekQRNIRB0lRDBCDwqcLpR3DUzogcLg
4gXRcGMvCOIc7aXHsC3kDrfF84TG+QlJcjfziFZinvdItJZ/liWp4y7vD7RTYyrF
2wgl6aX+8JyjphKwv9NefjiuCDsGapArb3+ROaRGoe0pPqDUSNST+nRKI3v8z2oq
ftE5/jncNONrSPLU7FatjxCMFCXTvAkAMSf59K8frgalgxgFHscYkr302+GkD5DI
3JebbErKOGakZhoAvextEsxp+RX8//lS8N7EljdNZK08xSysNKsu+4Nhse7yDZT/
UZv8Zd6r0qW77xqzkfcHQhFhjNbp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:36 2025 by rpki-client