Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F0A473EC99511EFADDC4281762E951A.roa
File: 7F0A473EC99511EFADDC4281762E951A.roa (raw, json)
Hash identifier: TtKBgR+cMtRqaUJRxIfcn/OyExFDxNOmYO2NdVjhs6Y=
Subject key identifier: 0E:26:59:CF:EE:CB:63:E2:E0:E3:7D:A5:93:69:A3:C5:03:46:DA:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F60D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F0A473EC99511EFADDC4281762E951A.roa
Signing time: Fri 03 Jan 2025 05:42:19 +0000
ROA not before: Fri 03 Jan 2025 05:42:15 +0000
ROA not after: Sat 13 Dec 2025 05:42:15 +0000
asID: 984
IP address blocks: 156.233.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62989 (0xf60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:42:15 2025 GMT
Not After : Dec 13 05:42:15 2025 GMT
Subject: CN=677778bb-96cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:34:c2:87:a2:83:bc:f6:46:1b:79:69:25:
3a:48:c5:e6:8f:b0:a1:37:7d:72:81:a3:84:e3:46:
6f:d5:23:21:4d:0e:46:4c:76:5e:e8:80:0d:20:a3:
9a:44:d8:d4:02:6e:74:55:32:51:a8:b6:31:eb:1c:
cc:34:66:e0:e6:a1:d3:86:e3:bb:02:b8:d1:0d:46:
b0:76:76:f2:96:62:47:85:8a:5b:0d:73:a0:71:04:
97:ff:e1:e4:24:12:5b:4b:0c:16:38:68:fa:4f:27:
c1:d2:f2:dd:85:ed:a8:72:16:cb:55:f6:f5:1f:c4:
fd:44:dd:28:3f:7b:64:60:be:40:a6:b9:82:3f:5a:
e1:a8:bd:56:d1:f7:2c:cc:f0:64:a1:ca:33:0c:ec:
d3:96:32:0a:43:3c:17:77:45:9d:f0:12:5e:06:4a:
71:09:23:d0:12:05:ed:f3:e9:e9:37:95:eb:f2:1f:
f7:ea:a7:25:aa:c6:82:64:f9:9b:8d:1c:ac:c7:ec:
db:6c:17:af:82:3f:34:99:d7:36:3f:e3:a6:26:53:
cd:4e:bc:3d:fe:5c:2b:a0:c1:64:27:84:43:68:58:
7c:77:b1:2d:ac:b3:56:c1:fc:a5:ea:92:22:74:5a:
d6:28:6c:a7:d4:95:1d:14:4d:3b:0a:d5:9e:e7:3c:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:59:CF:EE:CB:63:E2:E0:E3:7D:A5:93:69:A3:C5:03:46:DA:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F0A473EC99511EFADDC4281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.139.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3e:41:32:b4:79:04:e7:91:51:5d:99:85:cf:58:9f:a9:d1:
07:82:19:88:6c:0b:d6:56:61:04:84:dd:ff:54:fe:9f:8e:fa:
88:cd:6c:de:bc:96:d3:2c:0e:12:a2:50:5b:4a:f1:15:f3:38:
e2:65:40:fc:df:6b:47:8f:9b:00:8b:99:85:68:54:c2:68:43:
41:79:34:10:52:ff:31:49:9e:a7:b9:1b:48:03:4d:f0:a4:a2:
85:9b:36:0b:22:18:67:84:ee:57:79:73:86:29:a1:c2:72:d1:
7f:41:50:7a:fa:2a:cb:ee:5f:5c:04:de:b7:16:6a:c8:51:70:
3e:12:ed:60:4b:0f:54:89:54:03:44:39:82:37:74:23:90:de:
cc:fc:0d:a2:77:78:56:6b:98:91:90:11:88:5a:78:01:ba:b1:
d1:18:3a:ec:2e:30:fc:88:c8:f4:82:00:0c:e6:6b:5d:86:97:
ea:bd:85:9a:e8:68:ce:22:ab:ab:63:7c:41:8c:c3:70:a7:92:
02:e0:25:49:cd:08:15:9a:56:84:5c:49:37:d0:fb:15:59:8b:
63:e4:7a:c1:77:2e:40:43:c4:76:aa:d5:ca:30:35:5c:93:03:
b4:75:5a:74:46:31:78:04:c3:89:f2:c9:51:ca:e3:92:65:0b:
0d:4d:27:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPYNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDU0MjE1WhcNMjUxMjEzMDU0MjE1WjAYMRYw
FAYDVQQDEw02Nzc3NzhiYi05NmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt0c0woeig7z2Rht5aSU6SMXmj7ChN31ygaOE40Zv1SMhTQ5GTHZe6IAN
IKOaRNjUAm50VTJRqLYx6xzMNGbg5qHThuO7ArjRDUawdnbylmJHhYpbDXOgcQSX
/+HkJBJbSwwWOGj6TyfB0vLdhe2ochbLVfb1H8T9RN0oP3tkYL5AprmCP1rhqL1W
0fcszPBkocozDOzTljIKQzwXd0Wd8BJeBkpxCSPQEgXt8+npN5Xr8h/36qclqsaC
ZPmbjRysx+zbbBevgj80mdc2P+OmJlPNTrw9/lwroMFkJ4RDaFh8d7EtrLNWwfyl
6pIidFrWKGyn1JUdFE07CtWe5zw6lQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA4m
Wc/uy2Pi4ON9pZNpo8UDRtq5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RjBBNDczRUM5OTUxMUVGQUREQzQyODE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOmLMA0GCSqGSIb3DQEBCwUA
A4IBAQBoPkEytHkE55FRXZmFz1ifqdEHghmIbAvWVmEEhN3/VP6fjvqIzWzevJbT
LA4SolBbSvEV8zjiZUD832tHj5sAi5mFaFTCaENBeTQQUv8xSZ6nuRtIA03wpKKF
mzYLIhhnhO5XeXOGKaHCctF/QVB6+irL7l9cBN63FmrIUXA+Eu1gSw9UiVQDRDmC
N3QjkN7M/A2id3hWa5iRkBGIWngBurHRGDrsLjD8iMj0ggAM5mtdhpfqvYWa6GjO
IqurY3xBjMNwp5IC4CVJzQgVmlaEXEk30PsVWYtj5HrBdy5AQ8R2qtXKMDVckwO0
dVp0RjF4BMOJ8slRyuOSZQsNTSfs
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:29 2025 by rpki-client