Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DB7D6E0CD1D11EF99571263762E951A.roa
File: 7DB7D6E0CD1D11EF99571263762E951A.roa (raw, json)
Hash identifier: kQuueRtXSLVaXO54/D7s0o/Iu+D+zz92yGzj0a7tR/4=
Subject key identifier: C2:92:D7:9B:23:8D:1D:8F:A7:09:70:AB:DB:1F:A5:AC:32:A6:AF:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DB7D6E0CD1D11EF99571263762E951A.roa
Signing time: Tue 07 Jan 2025 17:33:22 +0000
ROA not before: Tue 07 Jan 2025 17:33:18 +0000
ROA not after: Mon 13 Dec 2027 17:33:18 +0000
asID: 17561
IP address blocks: 156.241.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64855 (0xfd57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:33:18 2025 GMT
Not After : Dec 13 17:33:18 2027 GMT
Subject: CN=677d6562-3fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:cf:50:8f:58:4a:cb:fb:f8:7d:41:f3:94:
1e:6c:cd:15:17:0b:96:16:d3:d0:64:06:69:f4:4b:
f8:6b:e3:2b:64:1b:59:19:ac:4c:73:4f:c5:f3:1a:
0c:0f:63:f5:ad:61:7c:8b:c6:de:21:3c:fe:3a:f6:
7e:01:5c:6d:6b:2e:31:9e:14:23:cc:08:57:9d:9d:
0c:80:b3:0c:98:18:8e:ef:5f:e4:46:62:2a:c9:ee:
92:2c:83:30:10:1b:c1:79:ea:7f:6d:27:68:95:a0:
f0:af:e0:de:d7:79:26:05:c4:d9:fd:87:40:0e:ad:
d0:c1:85:4e:10:56:82:2d:94:af:f3:a3:2f:61:2f:
1a:0d:41:3f:be:6a:44:e7:18:f8:d2:da:ad:24:65:
81:ec:2f:fe:97:47:ed:0f:47:3c:ff:ec:c6:7a:42:
69:20:b6:be:09:f5:cb:8c:0e:80:92:63:44:8c:c6:
2c:3e:40:e6:6f:fb:bf:ac:1c:b5:e3:58:4e:ed:9f:
d9:70:f4:1b:d3:b4:6a:d4:cf:e0:dc:0d:70:02:08:
b8:1d:e7:ae:3c:7c:00:a8:01:4a:d7:e3:d9:b6:1a:
be:ab:fe:64:67:bf:d6:e7:fa:ee:d2:17:be:40:e3:
5b:f1:5d:f2:ba:54:f1:e5:e1:b1:cd:2a:38:53:98:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:92:D7:9B:23:8D:1D:8F:A7:09:70:AB:DB:1F:A5:AC:32:A6:AF:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DB7D6E0CD1D11EF99571263762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4f:68:4e:49:04:e6:a1:d5:0e:5a:e7:82:14:e4:34:07:88:
03:6f:80:32:d9:a1:a5:c6:6e:d5:93:58:3c:31:4e:8f:64:a7:
05:8c:0c:66:c6:59:4f:01:22:85:2b:03:9a:b9:c0:25:17:3b:
c5:a2:6a:f2:3b:e5:44:2f:bd:3c:c4:84:18:94:0b:45:7a:e1:
3e:9e:23:7b:79:37:e2:20:18:a9:0b:90:13:c5:93:a1:b1:ac:
2f:25:9e:19:66:14:d8:13:ec:4c:0d:ce:9e:c5:23:3c:e9:0d:
2b:db:01:4f:b0:c4:1f:ac:fb:76:81:6b:2e:16:e2:f5:bb:ae:
9d:5f:5d:b5:a5:36:fc:97:f4:b1:c1:03:fc:b9:f8:59:f8:1e:
c1:32:65:c3:cf:34:e5:fc:75:6b:da:31:61:8b:65:86:16:a4:
a6:16:ac:85:42:ac:21:7b:02:60:62:aa:44:62:a2:57:ff:59:
32:06:0d:a8:48:35:ef:a8:24:24:7f:f7:1e:e0:50:a0:b7:d8:
30:ab:0c:eb:c4:a0:b5:06:1f:42:69:6c:dd:bc:f4:6c:c0:1d:
3f:a0:b0:22:8c:45:f8:f8:50:1a:40:73:e1:9e:b5:a4:35:79:
b0:d8:40:97:a4:a5:d3:03:d6:f8:74:ef:fc:7f:bb:2c:5b:ee:
cb:ad:6d:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP1XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTczMzE4WhcNMjcxMjEzMTczMzE4WjAYMRYw
FAYDVQQDEw02NzdkNjU2Mi0zZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5H7PUI9YSsv7+H1B85QebM0VFwuWFtPQZAZp9Ev4a+MrZBtZGaxMc0/F
8xoMD2P1rWF8i8beITz+OvZ+AVxtay4xnhQjzAhXnZ0MgLMMmBiO71/kRmIqye6S
LIMwEBvBeep/bSdolaDwr+De13kmBcTZ/YdADq3QwYVOEFaCLZSv86MvYS8aDUE/
vmpE5xj40tqtJGWB7C/+l0ftD0c8/+zGekJpILa+CfXLjA6AkmNEjMYsPkDmb/u/
rBy141hO7Z/ZcPQb07Rq1M/g3A1wAgi4HeeuPHwAqAFK1+PZthq+q/5kZ7/W5/ru
0he+QONb8V3yulTx5eGxzSo4U5jlCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMKS
15sjjR2Ppwlwq9sfpawypq/HMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83REI3RDZFMENEMUQxMUVGOTk1NzEyNjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPE0MA0GCSqGSIb3DQEBCwUA
A4IBAQCdT2hOSQTmodUOWueCFOQ0B4gDb4Ay2aGlxm7Vk1g8MU6PZKcFjAxmxllP
ASKFKwOaucAlFzvFomryO+VEL708xIQYlAtFeuE+niN7eTfiIBipC5ATxZOhsawv
JZ4ZZhTYE+xMDc6exSM86Q0r2wFPsMQfrPt2gWsuFuL1u66dX121pTb8l/SxwQP8
ufhZ+B7BMmXDzzTl/HVr2jFhi2WGFqSmFqyFQqwhewJgYqpEYqJX/1kyBg2oSDXv
qCQkf/ce4FCgt9gwqwzrxKC1Bh9CaWzdvPRswB0/oLAijEX4+FAaQHPhnrWkNXmw
2ECXpKXTA9b4dO/8f7ssW+7LrW0Q
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:02 2025 by rpki-client