Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B6F7CA8CD6D11EFB4CB0C6E762E951A.roa
File: 7B6F7CA8CD6D11EFB4CB0C6E762E951A.roa (raw, json)
Hash identifier: e9BfeLpRA4Q1/zqJpU2kqDKZGGRl4Cyn0JmZFfRDN9o=
Subject key identifier: 74:FE:6E:ED:58:5C:50:F7:BB:F2:36:E8:20:BF:B3:91:BB:31:BB:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B6F7CA8CD6D11EFB4CB0C6E762E951A.roa
Signing time: Wed 08 Jan 2025 03:05:58 +0000
ROA not before: Wed 08 Jan 2025 03:05:54 +0000
ROA not after: Mon 13 Dec 2027 03:05:54 +0000
asID: 17561
IP address blocks: 156.248.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65391 (0xff6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 03:05:54 2025 GMT
Not After : Dec 13 03:05:54 2027 GMT
Subject: CN=677deb96-be1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:92:31:27:5d:7d:3e:5b:2a:6f:37:34:f8:
66:48:32:a0:7d:e6:e0:f8:f3:13:be:37:21:e0:aa:
42:36:48:a4:08:17:9b:95:ca:c1:73:96:3b:69:26:
27:88:66:78:1e:44:a6:d0:c8:18:ce:d9:7f:28:d2:
fa:2e:58:e8:86:6b:08:67:9f:67:f2:9e:87:a9:a8:
e5:65:68:e6:23:54:59:77:b6:b4:03:28:f4:41:f4:
85:46:7b:75:6b:ae:d7:aa:85:d3:2c:37:f3:77:2b:
d8:a7:d4:a7:56:f9:bc:70:d2:1c:db:36:cc:61:42:
be:4b:c0:a3:e4:99:94:35:89:1a:20:14:87:09:c8:
89:bb:fc:1d:c0:01:28:94:b6:e5:98:0c:60:62:3d:
9e:6b:03:ef:f6:ea:67:fc:f7:7c:46:73:c2:b1:51:
c9:6f:c5:f1:84:79:93:3a:7c:bd:39:2b:7a:32:0d:
10:00:43:74:8b:5a:c7:74:bf:5e:4a:cd:64:54:c1:
c9:ed:d2:71:b8:f1:16:e8:4a:ab:04:f3:c0:e2:a5:
bb:b3:52:e5:d4:c5:aa:ab:4b:3f:11:94:05:59:a2:
d9:57:8d:eb:09:a9:0d:41:c7:d1:5a:23:55:30:ff:
f2:2f:02:df:5c:8d:2f:17:5e:9e:dc:94:82:08:91:
4e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:6E:ED:58:5C:50:F7:BB:F2:36:E8:20:BF:B3:91:BB:31:BB:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B6F7CA8CD6D11EFB4CB0C6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5b:26:74:b4:a2:df:39:05:04:90:a3:0f:68:86:1e:c5:fb:
c2:7f:e3:f0:05:63:d0:18:df:25:25:59:89:52:16:5c:db:0d:
ec:fb:60:f4:fb:38:71:00:ed:7b:a6:be:5c:9d:b1:18:ae:1e:
e1:fb:bd:a8:32:e4:ce:50:b6:38:d4:b5:5b:b3:d8:42:5a:72:
7c:3c:82:0d:f5:51:bf:05:52:70:20:e0:e9:4e:5a:29:ee:61:
af:d0:25:3d:55:b8:60:6e:1c:47:2d:7e:ee:3b:5a:77:42:e5:
d3:63:6c:9d:08:bb:cc:13:b7:c0:9f:72:96:0a:68:98:5c:09:
f2:3d:43:05:8f:d4:71:41:67:89:d7:18:18:bc:24:18:d4:17:
61:b4:62:7d:c2:c9:af:f5:46:76:7e:75:ad:64:87:a5:ca:ff:
d9:ff:0b:f7:b7:f9:59:34:08:cf:11:11:28:49:dd:c8:24:d1:
f8:c3:2f:1b:1e:db:ab:d1:8f:49:b8:02:6c:ec:77:8b:fa:22:
2c:f2:ac:96:07:66:0a:db:3a:0f:4d:bb:21:c5:44:9a:b7:ca:
86:11:80:b6:fb:78:0c:d4:51:d4:f7:1a:bf:6f:c2:7c:cc:5e:
cf:1d:c4:b7:df:7a:12:cf:3f:cd:1d:ef:6f:6e:4e:8e:14:77:
06:1a:af:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP9vMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDMwNTU0WhcNMjcxMjEzMDMwNTU0WjAYMRYw
FAYDVQQDEw02NzdkZWI5Ni1iZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAymiSMSddfT5bKm83NPhmSDKgfebg+PMTvjch4KpCNkikCBeblcrBc5Y7
aSYniGZ4HkSm0MgYztl/KNL6LljohmsIZ59n8p6HqajlZWjmI1RZd7a0Ayj0QfSF
Rnt1a67XqoXTLDfzdyvYp9SnVvm8cNIc2zbMYUK+S8Cj5JmUNYkaIBSHCciJu/wd
wAEolLblmAxgYj2eawPv9upn/Pd8RnPCsVHJb8XxhHmTOny9OSt6Mg0QAEN0i1rH
dL9eSs1kVMHJ7dJxuPEW6EqrBPPA4qW7s1Ll1MWqq0s/EZQFWaLZV43rCakNQcfR
WiNVMP/yLwLfXI0vF16e3JSCCJFO7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHT+
bu1YXFD3u/I26CC/s5G7MbswMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QjZGN0NBOENENkQxMUVGQjRDQjBDNkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPgRMA0GCSqGSIb3DQEBCwUA
A4IBAQAuWyZ0tKLfOQUEkKMPaIYexfvCf+PwBWPQGN8lJVmJUhZc2w3s+2D0+zhx
AO17pr5cnbEYrh7h+72oMuTOULY41LVbs9hCWnJ8PIIN9VG/BVJwIODpTlop7mGv
0CU9VbhgbhxHLX7uO1p3QuXTY2ydCLvME7fAn3KWCmiYXAnyPUMFj9RxQWeJ1xgY
vCQY1BdhtGJ9wsmv9UZ2fnWtZIelyv/Z/wv3t/lZNAjPEREoSd3IJNH4wy8bHtur
0Y9JuAJs7HeL+iIs8qyWB2YK2zoPTbshxUSat8qGEYC2+3gM1FHU9xq/b8J8zF7P
HcS333oSzz/NHe9vbk6OFHcGGq93
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:40 2025 by rpki-client