Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B338FCCCD0911EFA8EBB665762E951A.roa
File: 7B338FCCCD0911EFA8EBB665762E951A.roa (raw, json)
Hash identifier: fgo7GRGS+NMXFByfOEouGcVeUPav1s3tNzkCnEAbfo4=
Subject key identifier: 9E:F3:7D:D1:DE:92:41:EE:96:58:B6:E7:57:BE:EE:C6:D4:F6:0D:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B338FCCCD0911EFA8EBB665762E951A.roa
Signing time: Tue 07 Jan 2025 15:10:08 +0000
ROA not before: Tue 07 Jan 2025 15:10:04 +0000
ROA not after: Mon 13 Dec 2027 15:10:04 +0000
asID: 17561
IP address blocks: 156.239.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64693 (0xfcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:10:04 2025 GMT
Not After : Dec 13 15:10:04 2027 GMT
Subject: CN=677d43d0-baa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:06:5f:e8:ed:c8:96:05:d7:b6:1a:d4:be:
f7:34:71:81:d4:57:7f:78:d7:84:8a:8f:1a:f3:88:
87:37:33:ae:de:c4:e8:51:05:c1:8e:87:ca:fd:94:
77:62:81:2f:d2:87:84:ad:b8:ac:54:c2:2d:33:e9:
43:ce:20:f1:ee:60:a0:5b:50:81:8c:22:b2:b5:3e:
d2:aa:e7:28:7a:5c:4e:eb:71:d8:36:6f:a8:a1:4e:
df:5e:54:49:51:a3:d2:1e:47:cd:f1:a4:56:42:00:
f1:45:f9:d2:48:30:f2:63:1f:ab:f6:ee:6c:f7:e9:
54:de:b4:f6:81:84:0d:8a:ca:6b:45:ce:71:f6:1d:
57:86:2f:bc:6b:f9:62:13:3a:20:bd:07:e4:89:b2:
39:27:c6:88:08:a1:3e:94:0a:10:ad:b8:ff:0e:da:
b9:81:89:2c:ae:2e:8f:c5:8a:ed:4d:33:2b:06:c3:
64:a3:ff:77:a6:79:19:ec:1a:1c:ad:1c:e3:d7:e8:
88:e5:11:24:6b:f9:77:c9:a6:c6:10:15:2e:38:91:
11:fb:f6:89:8f:ee:56:c4:fd:83:69:25:20:38:f7:
2f:f1:e4:72:4d:ab:4e:8f:b3:b9:65:e1:85:e0:f6:
aa:cf:8f:9c:89:3c:90:3c:e1:d6:d0:a8:a3:62:07:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:7D:D1:DE:92:41:EE:96:58:B6:E7:57:BE:EE:C6:D4:F6:0D:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B338FCCCD0911EFA8EBB665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:78:25:2b:d3:48:94:d5:37:bf:af:6b:df:a3:ea:2d:7a:a3:
60:34:54:fd:5e:b7:03:92:47:ad:5e:a5:39:06:82:a4:c5:a4:
f6:64:ef:7e:a8:66:d9:2a:09:83:53:a1:1f:a7:9f:15:8b:19:
45:b7:15:9f:70:b3:4e:34:19:8c:c0:59:01:ad:f9:41:91:52:
d7:77:43:eb:cb:39:7d:ac:31:01:3f:8e:a7:81:84:57:2c:45:
fa:09:10:d3:39:24:83:cf:4e:6f:ac:68:68:cd:f1:4a:e9:56:
ab:48:e6:53:b6:cf:5b:01:5e:ae:bc:e6:00:1a:be:f7:9c:48:
51:b1:6d:98:81:bd:6c:1a:04:01:e0:98:0f:3b:2a:e1:91:12:
72:b8:d1:c9:f7:f4:9c:88:46:ae:7d:8f:d7:d6:70:ed:95:c4:
c3:42:9e:10:36:5f:be:ce:59:12:4d:52:7e:85:e6:63:75:b4:
a9:0a:db:bb:39:8f:19:d2:6f:2a:a4:0a:50:df:da:a3:13:35:
85:05:58:f3:11:b3:08:63:c9:93:2b:d4:b3:7e:73:d8:fd:1c:
4c:06:05:53:db:62:b3:72:5a:a6:c9:10:05:bf:b5:b9:76:e6:
b8:60:dc:ca:9b:1e:32:95:23:d0:9b:a1:21:95:3a:08:ae:b7:
ed:f3:a5:74
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPy1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTUxMDA0WhcNMjcxMjEzMTUxMDA0WjAYMRYw
FAYDVQQDEw02NzdkNDNkMC1iYWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIkGX+jtyJYF17Ya1L73NHGB1Fd/eNeEio8a84iHNzOu3sToUQXBjofK
/ZR3YoEv0oeErbisVMItM+lDziDx7mCgW1CBjCKytT7SqucoelxO63HYNm+ooU7f
XlRJUaPSHkfN8aRWQgDxRfnSSDDyYx+r9u5s9+lU3rT2gYQNisprRc5x9h1Xhi+8
a/liEzogvQfkibI5J8aICKE+lAoQrbj/Dtq5gYksri6PxYrtTTMrBsNko/93pnkZ
7BocrRzj1+iI5REka/l3yabGEBUuOJER+/aJj+5WxP2DaSUgOPcv8eRyTatOj7O5
ZeGF4Paqz4+ciTyQPOHW0KijYgfJHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ7z
fdHekkHulli251e+7sbU9g3nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QjMzOEZDQ0NEMDkxMUVGQThFQkI2NjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO8sMA0GCSqGSIb3DQEBCwUA
A4IBAQALeCUr00iU1Te/r2vfo+oteqNgNFT9XrcDkketXqU5BoKkxaT2ZO9+qGbZ
KgmDU6Efp58VixlFtxWfcLNONBmMwFkBrflBkVLXd0Pryzl9rDEBP46ngYRXLEX6
CRDTOSSDz05vrGhozfFK6VarSOZTts9bAV6uvOYAGr73nEhRsW2Ygb1sGgQB4JgP
OyrhkRJyuNHJ9/SciEaufY/X1nDtlcTDQp4QNl++zlkSTVJ+heZjdbSpCtu7OY8Z
0m8qpApQ39qjEzWFBVjzEbMIY8mTK9SzfnPY/RxMBgVT22KzclqmyRAFv7W5dua4
YNzKmx4ylSPQm6EhlToIrrft86V0
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:13 2025 by rpki-client