Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C4AD7ACDB211EFBC3A8BA4762E951A.roa
File: 79C4AD7ACDB211EFBC3A8BA4762E951A.roa (raw, json)
Hash identifier: yfMjyo69Wca5TRJsP6Z1hjy4fyQ+aFZ4tMcZO59fVvQ=
Subject key identifier: 4B:F0:D8:88:18:B0:42:15:20:E2:11:35:DF:4B:32:AB:6A:A5:EE:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01018B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C4AD7ACDB211EFBC3A8BA4762E951A.roa
Signing time: Wed 08 Jan 2025 11:19:50 +0000
ROA not before: Wed 08 Jan 2025 11:19:46 +0000
ROA not after: Mon 13 Dec 2027 11:19:46 +0000
asID: 17561
IP address blocks: 156.255.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65931 (0x1018b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 11:19:46 2025 GMT
Not After : Dec 13 11:19:46 2027 GMT
Subject: CN=677e5f56-00a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:d1:f4:3e:9f:0b:50:20:a7:6c:58:18:3e:
44:97:53:53:26:25:8a:d9:0f:67:ca:0f:c2:a9:14:
89:ab:2a:25:fd:b4:a2:13:5b:fd:44:fe:48:85:d6:
f5:6c:dc:17:de:dc:82:5c:e1:94:14:86:f9:36:06:
47:5a:2f:de:7e:72:6e:f2:c1:3c:f4:c4:a3:81:bd:
45:fd:9f:70:da:8b:dd:e5:cc:77:68:b0:1b:b8:07:
4b:be:5d:26:56:0a:75:36:1a:08:4b:db:40:67:9c:
a1:70:b1:f0:ad:94:bc:21:67:75:5a:6b:45:7c:18:
bc:bb:c6:bb:50:ae:23:29:97:81:85:f1:3d:48:82:
7f:e7:4c:bf:ac:c2:8f:4a:5c:00:dd:34:f8:60:d2:
f7:56:d9:34:4c:5c:8d:27:4e:ee:de:c6:6e:8d:d0:
4f:da:78:fd:8f:ac:1e:1c:f2:24:84:ae:12:e3:e4:
2c:6b:6a:52:da:53:8f:4b:f8:8b:65:d3:4f:cb:fa:
ec:9f:94:d4:65:a2:86:ce:00:89:de:cf:40:02:c7:
57:c7:3d:dd:da:8b:3a:a9:dd:ce:b3:31:e1:63:42:
01:b9:a7:6b:6d:27:f7:43:65:f3:a8:45:3c:6b:13:
a8:54:e1:d0:27:05:8f:63:aa:b3:dc:f2:db:75:c6:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F0:D8:88:18:B0:42:15:20:E2:11:35:DF:4B:32:AB:6A:A5:EE:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79C4AD7ACDB211EFBC3A8BA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:99:f0:37:f7:e5:0b:60:e8:a8:d9:76:5e:3e:ba:06:3c:2b:
b5:dc:50:6e:9e:72:61:77:38:58:ee:95:76:82:09:1d:8d:c2:
bc:cc:7a:9a:42:27:dd:ee:ce:f7:18:28:de:49:a0:24:10:8c:
6f:2b:ef:b0:55:1f:96:4e:e6:2f:59:36:42:4f:b6:ee:95:03:
2f:9f:65:99:4e:2d:c1:13:4c:8b:fd:ff:97:82:b5:26:42:fa:
a5:b8:4a:6b:8c:ca:0e:67:e1:bd:99:ca:42:31:63:3a:77:d0:
7e:6b:e9:61:2d:bf:d2:c0:c5:6b:37:60:44:83:14:d0:fb:34:
96:a5:da:95:04:86:71:27:3a:6b:bc:d6:fe:8a:da:80:94:d3:
de:e4:65:f5:c8:3c:2f:b0:27:a1:f0:71:15:9b:22:26:b4:32:
dd:38:11:10:ea:53:ea:b6:4a:d8:00:08:e4:92:80:ba:b0:81:
0e:98:c1:2b:a2:68:6b:b5:f8:f4:e0:52:cb:cc:5a:22:f8:ab:
a4:a0:27:c3:bd:26:31:f7:78:a5:ae:76:cf:e4:e2:04:ee:66:
04:90:2a:b9:a6:14:3c:8a:5e:cc:74:59:8d:c8:a2:60:7d:f8:
bf:49:05:77:62:7b:7a:6d:40:aa:d8:33:42:ad:95:93:6c:18:
30:21:65:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQGLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MTExOTQ2WhcNMjcxMjEzMTExOTQ2WjAYMRYw
FAYDVQQDEw02NzdlNWY1Ni0wMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxE7R9D6fC1Agp2xYGD5El1NTJiWK2Q9nyg/CqRSJqyol/bSiE1v9RP5I
hdb1bNwX3tyCXOGUFIb5NgZHWi/efnJu8sE89MSjgb1F/Z9w2ovd5cx3aLAbuAdL
vl0mVgp1NhoIS9tAZ5yhcLHwrZS8IWd1WmtFfBi8u8a7UK4jKZeBhfE9SIJ/50y/
rMKPSlwA3TT4YNL3Vtk0TFyNJ07u3sZujdBP2nj9j6weHPIkhK4S4+Qsa2pS2lOP
S/iLZdNPy/rsn5TUZaKGzgCJ3s9AAsdXxz3d2os6qd3OszHhY0IBuadrbSf3Q2Xz
qEU8axOoVOHQJwWPY6qz3PLbdcbeIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEvw
2IgYsEIVIOIRNd9LMqtqpe5UMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OUM0QUQ3QUNEQjIxMUVGQkMzQThCQTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP9hMA0GCSqGSIb3DQEBCwUA
A4IBAQC3mfA39+ULYOio2XZeProGPCu13FBunnJhdzhY7pV2ggkdjcK8zHqaQifd
7s73GCjeSaAkEIxvK++wVR+WTuYvWTZCT7bulQMvn2WZTi3BE0yL/f+XgrUmQvql
uEprjMoOZ+G9mcpCMWM6d9B+a+lhLb/SwMVrN2BEgxTQ+zSWpdqVBIZxJzprvNb+
itqAlNPe5GX1yDwvsCeh8HEVmyImtDLdOBEQ6lPqtkrYAAjkkoC6sIEOmMEromhr
tfj04FLLzFoi+KukoCfDvSYx93ilrnbP5OIE7mYEkCq5phQ8il7MdFmNyKJgffi/
SQV3Ynt6bUCq2DNCrZWTbBgwIWX0
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:36:15 2025 by rpki-client