Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7571F2BB7B11EF8BC77FAB762E951A.roa
File: 8A7571F2BB7B11EF8BC77FAB762E951A.roa (raw, json)
Hash identifier: zTuIl+3g8DWaT13pptEanlpOYN7GbKSe9Xgp82KhvCg=
Subject key identifier: FB:AA:11:69:8F:01:51:94:D3:9F:FB:89:F9:74:60:9E:AD:9F:F0:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E424
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7571F2BB7B11EF8BC77FAB762E951A.roa
Signing time: Mon 16 Dec 2024 07:01:15 +0000
ROA not before: Mon 16 Dec 2024 07:01:11 +0000
ROA not after: Tue 04 Mar 2025 07:01:11 +0000
asID: 136970
IP address blocks: 156.236.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58404 (0xe424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 16 07:01:11 2024 GMT
Not After : Mar 4 07:01:11 2025 GMT
Subject: CN=675fd03b-8447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:46:4c:e8:8b:7a:2f:b8:0e:e9:58:7e:fd:
ed:b7:58:0d:41:38:d3:ce:02:88:1b:88:23:48:6f:
4b:2b:3f:56:67:e5:77:a5:f4:8c:76:d5:c2:28:38:
5c:4a:a7:9f:d6:cf:19:08:68:5f:97:6b:d9:83:f4:
0e:6d:ae:20:38:64:15:e2:50:08:7a:87:40:ba:6c:
a6:3b:fc:79:bf:3f:c5:f7:c9:72:80:a9:61:3b:d2:
b9:41:0a:66:f9:d7:51:22:a6:1b:c6:02:83:0f:66:
3f:13:29:0a:6e:11:d0:1f:37:06:5e:f9:83:d5:4a:
41:8d:81:ad:de:89:13:3a:46:37:3c:f5:a0:87:cd:
c5:0c:2b:b4:0c:a1:b3:ea:b7:5e:b5:53:c9:98:04:
7b:c8:85:a8:36:be:a9:14:df:7d:cc:a5:ea:22:73:
f7:f8:20:32:bd:38:a0:c1:af:b0:78:25:b7:48:9a:
88:72:b3:55:c7:b4:c4:4b:2f:e3:39:1d:0e:e9:0b:
61:60:e5:bf:fb:0f:3e:d8:4c:09:23:aa:cc:fc:93:
ff:e0:d4:d6:64:9a:e2:ce:53:ed:67:50:0b:ea:9d:
53:02:80:cd:bb:98:d7:dd:e2:8e:5f:e3:75:e9:ff:
a4:a0:4f:06:41:b6:4d:b0:78:62:74:13:46:90:95:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:11:69:8F:01:51:94:D3:9F:FB:89:F9:74:60:9E:AD:9F:F0:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A7571F2BB7B11EF8BC77FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:06:41:60:67:d6:6f:d6:c0:39:96:9a:ac:6c:a7:b6:3b:98:
66:f9:e3:0f:ba:87:fe:6d:79:98:db:7d:1d:93:ca:8a:61:8c:
9d:1d:c2:2c:b6:02:73:c9:f5:2d:20:e7:41:ec:4d:15:ce:b2:
13:bf:80:4f:95:11:4f:87:c7:f9:39:14:66:14:fc:5a:7b:b7:
f8:41:c9:ba:07:80:8b:cd:47:7c:b8:36:81:d0:58:bc:b1:53:
b1:33:f6:b7:8b:3a:56:cd:3d:02:f0:cf:df:2d:b8:42:12:eb:
3f:26:b4:93:4f:e5:9d:55:91:5b:d8:d2:32:15:b7:34:84:7a:
b1:6e:2f:02:f7:79:64:46:7b:94:e5:a0:30:8b:a6:8f:b3:54:
f9:d0:04:c1:71:6c:25:f2:34:df:e5:1f:52:f4:5f:bb:e4:57:
4e:24:94:b5:00:2a:9d:34:73:c4:80:c1:3c:19:67:a8:6e:f0:
11:3b:4c:c2:83:2c:67:3f:15:37:17:c2:84:99:d0:e0:99:a7:
52:1c:81:d9:d7:87:96:65:ba:5b:77:57:9c:ea:e3:af:ad:b4:
dd:e2:f3:2c:4a:e7:e3:89:3d:6a:0a:cc:98:30:5f:06:01:a2:
d1:ff:f8:12:28:8f:ea:78:25:75:d4:99:f0:88:24:90:a3:41:
2c:2e:ae:6d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOQkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjE2MDcwMTExWhcNMjUwMzA0MDcwMTExWjAYMRYw
FAYDVQQDEw02NzVmZDAzYi04NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoJJGTOiLei+4DulYfv3tt1gNQTjTzgKIG4gjSG9LKz9WZ+V3pfSMdtXC
KDhcSqef1s8ZCGhfl2vZg/QOba4gOGQV4lAIeodAumymO/x5vz/F98lygKlhO9K5
QQpm+ddRIqYbxgKDD2Y/EykKbhHQHzcGXvmD1UpBjYGt3okTOkY3PPWgh83FDCu0
DKGz6rdetVPJmAR7yIWoNr6pFN99zKXqInP3+CAyvTigwa+weCW3SJqIcrNVx7TE
Sy/jOR0O6QthYOW/+w8+2EwJI6rM/JP/4NTWZJrizlPtZ1AL6p1TAoDNu5jX3eKO
X+N16f+koE8GQbZNsHhidBNGkJUJnwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPuq
EWmPAVGU05/7ifl0YJ6tn/DvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QTc1NzFGMkJCN0IxMUVGOEJDNzdGQUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOxEMA0GCSqGSIb3DQEBCwUA
A4IBAQCNBkFgZ9Zv1sA5lpqsbKe2O5hm+eMPuof+bXmY230dk8qKYYydHcIstgJz
yfUtIOdB7E0VzrITv4BPlRFPh8f5ORRmFPxae7f4Qcm6B4CLzUd8uDaB0Fi8sVOx
M/a3izpWzT0C8M/fLbhCEus/JrSTT+WdVZFb2NIyFbc0hHqxbi8C93lkRnuU5aAw
i6aPs1T50ATBcWwl8jTf5R9S9F+75FdOJJS1ACqdNHPEgME8GWeobvARO0zCgyxn
PxU3F8KEmdDgmadSHIHZ14eWZbpbd1ec6uOvrbTd4vMsSufjiT1qCsyYMF8GAaLR
//gSKI/qeCV11JnwiCSQo0EsLq5t
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:57 2025 by rpki-client