Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2C93E4CCEA11EF9B3E7DA2762E951A.roa
File: 7B2C93E4CCEA11EF9B3E7DA2762E951A.roa (raw, json)
Hash identifier: qv109VuDJHfuAJYPbV6PxIyplU69xsxRZNOyks/e55I=
Subject key identifier: B7:37:F7:BF:AC:18:B4:BF:B8:2D:54:BF:97:5A:88:9E:A2:4E:10:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2C93E4CCEA11EF9B3E7DA2762E951A.roa
Signing time: Tue 07 Jan 2025 11:28:13 +0000
ROA not before: Tue 07 Jan 2025 11:28:10 +0000
ROA not after: Sat 13 Dec 2025 11:28:10 +0000
asID: 984
IP address blocks: 156.236.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64501 (0xfbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:28:10 2025 GMT
Not After : Dec 13 11:28:10 2025 GMT
Subject: CN=677d0fcd-245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:fc:44:99:71:9e:9d:01:fe:c8:99:b4:cc:
ae:d6:c4:98:a3:98:63:dd:34:39:d5:b4:5c:8e:3c:
81:99:09:fe:54:ae:9d:56:55:48:9f:1c:0c:4a:dc:
22:0e:b3:53:3a:c2:9e:8d:42:63:a7:92:9a:be:47:
07:f4:6f:70:58:de:d1:be:de:eb:d5:76:48:9e:45:
da:74:55:77:c4:38:3b:9a:98:9d:02:13:11:44:79:
ce:f1:1d:e9:d5:7c:4b:b3:99:6e:9f:0d:06:2c:1e:
9d:fd:35:12:54:20:f8:40:fe:7d:81:4e:bc:8e:a5:
e5:ac:30:1a:bc:a1:ab:81:bb:2e:af:94:e0:9b:fa:
6b:ea:bb:30:f5:aa:ef:69:c9:f6:1e:38:c5:5e:3c:
b0:2f:65:8d:cd:f3:64:67:df:fe:b6:1f:db:3c:8c:
1e:76:61:d3:29:97:c5:60:e2:ef:d9:73:9d:8d:f4:
c3:f9:14:f5:8e:49:db:05:de:bf:74:f1:07:01:c7:
2f:1b:65:f5:7e:79:68:e2:50:1a:7d:3a:f7:cc:dc:
20:4c:e1:02:ac:89:d8:f4:ca:2b:14:df:bf:f6:b2:
8c:60:ba:05:4d:ed:6c:83:ba:35:1f:66:5d:d8:a7:
e0:5b:17:58:47:49:15:f4:de:d0:df:21:e1:2e:c3:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:37:F7:BF:AC:18:B4:BF:B8:2D:54:BF:97:5A:88:9E:A2:4E:10:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2C93E4CCEA11EF9B3E7DA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.5.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e3:92:ab:bf:7f:04:c4:f1:e3:a9:dc:ca:ff:8d:98:b3:5f:
06:de:e5:84:17:02:0d:6c:88:33:64:99:91:f2:4a:ff:97:7c:
1f:22:17:70:68:75:46:62:c4:49:30:ba:44:13:49:8e:63:ee:
11:0d:1f:2a:96:a8:e9:c5:14:30:cb:43:aa:3b:f0:25:3d:4f:
13:3a:71:53:66:e5:44:fd:14:58:fe:62:3e:5f:1f:40:9b:4f:
42:9c:dd:b2:71:5b:e9:d4:60:b2:97:61:94:56:0b:0a:58:83:
90:5b:08:15:a2:37:19:f4:04:ce:c9:46:84:ef:f8:49:2d:93:
56:ef:6c:3a:80:0e:dd:b2:ab:c8:f0:c9:73:55:c2:78:44:e6:
c5:fa:c2:e0:04:c5:83:4d:36:55:04:b3:b5:d5:63:0d:1f:1b:
78:c9:44:34:59:a8:16:1d:51:da:7c:89:ce:ef:67:8e:98:d4:
08:55:c3:6e:5d:6b:a8:fc:b1:aa:7d:ea:99:10:a5:3b:da:5c:
77:50:78:87:20:30:53:57:58:da:b8:39:17:d7:b5:d0:52:0f:
a5:3c:18:62:dd:84:27:d4:c9:08:32:b2:40:69:3a:f1:38:25:
19:f2:94:22:18:c9:0c:e4:bb:0e:5c:19:9a:b7:fd:fe:44:37:
02:ba:7c:20
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPv1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTEyODEwWhcNMjUxMjEzMTEyODEwWjAYMRYw
FAYDVQQDEw02NzdkMGZjZC0yNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5Vj8RJlxnp0B/siZtMyu1sSYo5hj3TQ51bRcjjyBmQn+VK6dVlVInxwM
StwiDrNTOsKejUJjp5KavkcH9G9wWN7Rvt7r1XZInkXadFV3xDg7mpidAhMRRHnO
8R3p1XxLs5lunw0GLB6d/TUSVCD4QP59gU68jqXlrDAavKGrgbsur5Tgm/pr6rsw
9arvacn2HjjFXjywL2WNzfNkZ9/+th/bPIwedmHTKZfFYOLv2XOdjfTD+RT1jknb
Bd6/dPEHAccvG2X1fnlo4lAafTr3zNwgTOECrInY9MorFN+/9rKMYLoFTe1sg7o1
H2Zd2KfgWxdYR0kV9N7Q3yHhLsPh6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLc3
97+sGLS/uC1Uv5daiJ6iThA6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QjJDOTNFNENDRUExMUVGOUIzRTdEQTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwFMA0GCSqGSIb3DQEBCwUA
A4IBAQAQ45Krv38ExPHjqdzK/42Ys18G3uWEFwINbIgzZJmR8kr/l3wfIhdwaHVG
YsRJMLpEE0mOY+4RDR8qlqjpxRQwy0OqO/AlPU8TOnFTZuVE/RRY/mI+Xx9Am09C
nN2ycVvp1GCyl2GUVgsKWIOQWwgVojcZ9ATOyUaE7/hJLZNW72w6gA7dsqvI8Mlz
VcJ4RObF+sLgBMWDTTZVBLO11WMNHxt4yUQ0WagWHVHafInO72eOmNQIVcNuXWuo
/LGqfeqZEKU72lx3UHiHIDBTV1jauDkX17XQUg+lPBhi3YQn1MkIMrJAaTrxOCUZ
8pQiGMkM5LsOXBmat/3+RDcCunwg
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:45 2025 by rpki-client