Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D57A74CF2511EF83810C65762E951A.roa
File: 82D57A74CF2511EF83810C65762E951A.roa (raw, json)
Hash identifier: KU/tlo7/Dns61iy3V47D7lDYq4uIT9XmD4q/8e3Qf40=
Subject key identifier: 6B:CD:E2:91:09:09:EA:53:16:8C:F6:99:93:8C:E8:5D:9C:B4:93:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D57A74CF2511EF83810C65762E951A.roa
Signing time: Fri 10 Jan 2025 07:35:49 +0000
ROA not before: Fri 10 Jan 2025 07:35:45 +0000
ROA not after: Fri 14 Feb 2025 07:35:45 +0000
asID: 398993
IP address blocks: 156.231.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66809 (0x104f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 07:35:45 2025 GMT
Not After : Feb 14 07:35:45 2025 GMT
Subject: CN=6780cdd5-f48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:c3:01:b4:85:d4:e9:4a:45:e6:68:d7:6f:
41:06:37:95:4a:97:dc:5e:31:02:c7:0c:2e:d7:df:
bb:56:ea:67:fb:61:2a:08:6c:ac:24:27:20:6b:51:
89:09:f3:4a:c5:89:6e:99:dd:62:84:13:ec:01:5a:
15:19:ed:cd:93:ec:61:c1:1d:40:3e:f1:ba:9c:55:
4f:62:b2:c1:de:87:67:1d:52:5a:c7:73:7a:47:22:
b2:ce:e8:46:cd:27:bf:6f:32:35:4d:ea:f2:25:23:
7c:dc:76:86:73:d2:35:d2:d2:34:66:04:d1:3e:d1:
10:ad:1f:f7:41:1a:97:8b:1e:e7:eb:15:74:5b:48:
ed:af:90:9a:44:0c:41:04:32:6c:9b:3d:8c:7c:5e:
7e:3f:24:c6:f9:25:21:ce:23:de:85:52:90:c0:a9:
9e:82:63:0f:1e:3c:e0:09:76:08:2d:23:9f:62:24:
1e:ee:0e:19:9c:97:e8:ca:9e:ee:e3:80:f3:be:63:
41:10:0a:f6:ca:d1:7d:91:e1:b0:9b:fc:40:aa:81:
53:c4:d8:c3:0c:be:94:f9:30:e6:82:48:55:a5:69:
e7:29:9e:a5:54:78:29:3d:01:8e:33:7f:cb:8d:f0:
df:86:4c:34:0e:91:1d:ff:9b:f9:37:bb:ac:68:b7:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:E2:91:09:09:EA:53:16:8C:F6:99:93:8C:E8:5D:9C:B4:93:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D57A74CF2511EF83810C65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.144.0/20
Signature Algorithm: sha256WithRSAEncryption
07:5f:fe:4a:25:1f:7b:f2:70:c6:0c:62:14:43:6f:0f:12:3c:
e0:1c:26:d2:f5:fa:17:48:93:c9:2f:b7:8b:ef:0b:75:0a:ae:
27:b3:d3:5e:2a:95:81:d0:b4:63:d3:68:97:83:3f:45:50:30:
e8:ca:43:b0:cd:c7:86:85:d8:df:8d:29:50:94:70:6b:a9:dc:
03:5d:44:e1:73:b0:db:90:2f:af:ef:c0:69:4f:b8:63:bd:33:
1e:02:2f:21:e1:80:e3:5b:8f:32:78:84:0a:3e:2e:29:17:d2:
f3:25:59:db:4e:b6:9e:d7:f6:3f:90:95:05:6f:a3:02:8e:13:
03:3b:55:2f:7d:3b:a0:d7:95:61:23:e2:26:9c:b1:a6:99:11:
67:3f:da:28:8d:b7:91:27:f9:e4:27:df:57:2c:cc:31:95:df:
e1:80:15:6c:72:ec:0a:9a:1a:6f:f8:d1:5f:5a:11:2f:64:74:
31:02:24:fb:f4:c8:77:7f:8c:24:5e:af:8e:93:da:f2:40:3b:
70:a5:46:fe:2b:33:b8:7d:d0:ca:cd:7b:9e:ad:28:09:cc:e0:
2f:09:bb:36:c9:af:8a:65:7d:30:d6:fc:c6:ed:d8:0b:0b:7a:
33:9a:b1:23:a5:ce:f3:d6:ce:f3:01:60:fd:4b:fd:5f:a9:f7:
80:48:59:22
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQT5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDczNTQ1WhcNMjUwMjE0MDczNTQ1WjAYMRYw
FAYDVQQDEw02NzgwY2RkNS1mNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx/bDAbSF1OlKReZo129BBjeVSpfcXjECxwwu19+7Vupn+2EqCGysJCcg
a1GJCfNKxYlumd1ihBPsAVoVGe3Nk+xhwR1APvG6nFVPYrLB3odnHVJax3N6RyKy
zuhGzSe/bzI1TeryJSN83HaGc9I10tI0ZgTRPtEQrR/3QRqXix7n6xV0W0jtr5Ca
RAxBBDJsmz2MfF5+PyTG+SUhziPehVKQwKmegmMPHjzgCXYILSOfYiQe7g4ZnJfo
yp7u44DzvmNBEAr2ytF9keGwm/xAqoFTxNjDDL6U+TDmgkhVpWnnKZ6lVHgpPQGO
M3/LjfDfhkw0DpEd/5v5N7usaLeOdwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGvN
4pEJCepTFoz2mZOM6F2ctJOAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkQ1N0E3NENGMjUxMUVGODM4MTBDNjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOeQMA0GCSqGSIb3DQEBCwUA
A4IBAQAHX/5KJR978nDGDGIUQ28PEjzgHCbS9foXSJPJL7eL7wt1Cq4ns9NeKpWB
0LRj02iXgz9FUDDoykOwzceGhdjfjSlQlHBrqdwDXUThc7DbkC+v78BpT7hjvTMe
Ai8h4YDjW48yeIQKPi4pF9LzJVnbTrae1/Y/kJUFb6MCjhMDO1UvfTug15VhI+Im
nLGmmRFnP9oojbeRJ/nkJ99XLMwxld/hgBVscuwKmhpv+NFfWhEvZHQxAiT79Mh3
f4wkXq+Ok9ryQDtwpUb+KzO4fdDKzXuerSgJzOAvCbs2ya+KZX0w1vzG7dgLC3oz
mrEjpc7z1s7zAWD9S/1fqfeASFki
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:15 2025 by rpki-client