Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC21538CCE611EFBB789789762E951A.roa
File: 8CC21538CCE611EFBB789789762E951A.roa (raw, json)
Hash identifier: nKXklQuq0A7w6hNm6bsl/WlHL2eHoorM2fTvqTdvDSI=
Subject key identifier: 73:94:EF:20:68:31:4F:97:8C:2A:37:66:E5:6A:CC:67:7A:CA:7B:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC21538CCE611EFBB789789762E951A.roa
Signing time: Tue 07 Jan 2025 11:00:05 +0000
ROA not before: Tue 07 Jan 2025 11:00:01 +0000
ROA not after: Sat 13 Dec 2025 11:00:01 +0000
asID: 984
IP address blocks: 156.235.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64467 (0xfbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 11:00:01 2025 GMT
Not After : Dec 13 11:00:01 2025 GMT
Subject: CN=677d0935-5cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:78:d8:49:12:a4:40:01:5c:99:e1:7c:20:
59:dc:29:74:7a:1e:52:96:15:38:51:a1:e3:4c:d2:
2e:3d:06:eb:df:86:cd:c4:d0:52:87:8d:e5:9b:97:
96:6c:c7:76:b7:37:d4:13:c4:bc:00:93:54:93:38:
79:19:3c:b8:59:51:84:fb:38:2f:ae:8b:ef:52:a0:
70:8e:ae:ec:d9:73:5e:e4:90:11:21:a4:6f:7a:2f:
29:d6:fb:2b:5e:0f:6e:22:b5:46:65:e9:72:56:46:
83:c2:68:0a:0e:0b:db:65:34:33:7a:51:8f:52:1d:
7f:ac:71:e5:d7:78:f6:a4:77:76:27:f3:ef:f2:c4:
74:2e:e6:c8:14:c3:d7:cb:bd:b0:d9:da:4d:56:03:
0b:29:d4:d4:cb:ef:50:fa:38:02:9f:9f:c4:cd:59:
95:4d:d4:e1:9e:b8:87:af:3f:d0:6f:bd:c7:95:b5:
0e:6a:f2:9e:03:77:22:44:cb:bd:9f:7e:2f:1f:7d:
57:ec:47:1a:4b:8b:43:5e:f7:d5:9c:1a:13:e7:be:
2f:68:70:a9:ef:9d:f1:b1:c0:a3:8d:64:aa:8d:a3:
9c:7e:85:c9:c5:2d:6a:5c:44:75:1e:a9:d1:c2:2d:
4f:94:7d:2d:36:01:d0:12:c8:9c:d5:a8:0d:8d:d1:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:94:EF:20:68:31:4F:97:8C:2A:37:66:E5:6A:CC:67:7A:CA:7B:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CC21538CCE611EFBB789789762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:01:1c:07:4d:2c:68:59:fe:15:79:1b:6c:a3:eb:9d:c1:9a:
ad:d2:61:01:b8:cd:a8:78:01:a3:6d:39:94:1b:fd:53:13:f6:
e4:50:76:d0:af:d8:8b:f2:cb:0c:eb:e9:39:82:f9:2b:5d:40:
fb:97:f0:80:cc:ec:33:3a:e5:a1:94:ab:95:1d:04:d6:9e:cd:
59:94:79:be:fe:94:f9:98:af:bf:8b:7b:41:d7:33:6f:7c:e5:
aa:90:c3:a4:43:44:7e:c3:04:ea:4d:d7:68:b0:a5:1f:68:e2:
ab:77:65:4e:75:89:8e:d6:5e:a3:6f:1a:de:f5:7e:c8:0d:84:
43:b5:31:d3:28:7b:8c:bd:22:b4:ff:51:cc:d2:40:32:cc:a2:
fa:cc:43:77:3b:96:ff:50:77:42:7a:26:5f:0e:e4:2b:f6:f1:
c2:fd:f9:10:5d:1b:1a:55:5c:2b:5b:b8:fb:3c:00:22:27:e9:
49:fb:e9:de:b1:9a:aa:f7:8e:48:fa:38:ea:6e:5f:f9:db:21:
06:00:90:54:a9:1e:31:87:9b:0f:e6:58:07:ca:08:e5:3c:01:
21:e6:34:45:fe:70:a5:b1:e8:dd:bf:70:7c:89:5f:fa:df:29:
b7:a3:fc:b2:81:4b:1e:06:14:c2:11:10:6e:8c:8d:be:4b:38:
15:5f:6b:39
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPvTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTEwMDAxWhcNMjUxMjEzMTEwMDAxWjAYMRYw
FAYDVQQDEw02NzdkMDkzNS01Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx2p42EkSpEABXJnhfCBZ3Cl0eh5SlhU4UaHjTNIuPQbr34bNxNBSh43l
m5eWbMd2tzfUE8S8AJNUkzh5GTy4WVGE+zgvrovvUqBwjq7s2XNe5JARIaRvei8p
1vsrXg9uIrVGZelyVkaDwmgKDgvbZTQzelGPUh1/rHHl13j2pHd2J/Pv8sR0LubI
FMPXy72w2dpNVgMLKdTUy+9Q+jgCn5/EzVmVTdThnriHrz/Qb73HlbUOavKeA3ci
RMu9n34vH31X7EcaS4tDXvfVnBoT574vaHCp753xscCjjWSqjaOcfoXJxS1qXER1
HqnRwi1PlH0tNgHQEsic1agNjdFU4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHOU
7yBoMU+XjCo3ZuVqzGd6ynubMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Q0MyMTUzOENDRTYxMUVGQkI3ODk3ODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOsxMA0GCSqGSIb3DQEBCwUA
A4IBAQCkARwHTSxoWf4VeRtso+udwZqt0mEBuM2oeAGjbTmUG/1TE/bkUHbQr9iL
8ssM6+k5gvkrXUD7l/CAzOwzOuWhlKuVHQTWns1ZlHm+/pT5mK+/i3tB1zNvfOWq
kMOkQ0R+wwTqTddosKUfaOKrd2VOdYmO1l6jbxre9X7IDYRDtTHTKHuMvSK0/1HM
0kAyzKL6zEN3O5b/UHdCeiZfDuQr9vHC/fkQXRsaVVwrW7j7PAAiJ+lJ++nesZqq
945I+jjqbl/52yEGAJBUqR4xh5sP5lgHygjlPAEh5jRF/nClsejdv3B8iV/63ym3
o/yygUseBhTCERBujI2+SzgVX2s5
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:08 2025 by rpki-client