Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92982888CEFA11EFB0CDE94F762E951A.roa
File: 92982888CEFA11EFB0CDE94F762E951A.roa (raw, json)
Hash identifier: bJHgJekdmKSYPi9C3TAGrv45kBimGkuTzoKv2xmkUbE=
Subject key identifier: 99:B6:FE:74:DD:23:B3:A3:DA:C2:AD:EA:A9:37:06:F8:81:21:64:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92982888CEFA11EFB0CDE94F762E951A.roa
Signing time: Fri 10 Jan 2025 02:28:27 +0000
ROA not before: Fri 10 Jan 2025 02:28:23 +0000
ROA not after: Fri 14 Feb 2025 02:28:23 +0000
asID: 395793
IP address blocks: 156.243.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66729 (0x104a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:28:23 2025 GMT
Not After : Feb 14 02:28:23 2025 GMT
Subject: CN=678085cb-e357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:7f:4e:04:bd:52:b4:4e:2d:3a:4e:8d:49:
5c:9c:50:41:23:8a:67:51:5b:39:a0:2f:2e:59:70:
b0:d5:f4:31:7a:51:f0:9b:a9:4e:9e:75:e0:c8:ac:
61:ef:30:6c:25:e2:f0:cb:86:b2:c9:bf:ac:6f:92:
96:73:6b:09:e2:ab:0d:ae:8d:92:e0:f5:5b:e9:34:
22:dd:f2:fd:c3:93:67:3a:1b:0a:79:fb:9d:f3:18:
e1:a4:49:00:17:4a:77:be:42:a8:8b:c1:4b:1f:6a:
c8:87:5c:2e:ff:15:df:45:94:93:0b:bb:73:3f:97:
b5:85:19:5f:3a:24:a1:e2:bb:d9:1e:c6:4a:f8:0e:
07:e7:5a:90:b0:4b:85:0a:e6:e0:65:08:d3:68:4b:
0c:f1:26:46:00:49:6c:23:15:a6:88:1a:94:26:3d:
90:7e:62:8f:e8:47:ff:7c:98:17:a5:67:35:5b:da:
d2:e2:94:8c:8f:d0:dc:22:47:d6:5f:38:06:30:99:
81:db:04:a8:5b:ea:e7:7b:ac:94:c4:59:bb:49:13:
38:52:13:14:ac:59:a4:c2:ff:d4:b3:9f:07:93:8d:
bb:ec:b8:6a:c4:3d:e2:59:a5:ed:4d:30:52:d3:98:
1f:c6:df:7c:85:19:65:1d:5d:7c:ba:d6:24:35:43:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:FE:74:DD:23:B3:A3:DA:C2:AD:EA:A9:37:06:F8:81:21:64:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92982888CEFA11EFB0CDE94F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:92:9c:8d:3b:a2:15:c2:f5:ce:29:58:dd:5f:2c:39:8c:32:
e4:41:af:5f:91:b6:6c:df:15:02:a7:46:69:6e:2f:f9:95:56:
88:74:bf:a6:e8:1c:f7:f9:27:c6:8e:85:0e:02:50:6a:f4:2f:
9f:da:a2:ab:a2:f8:01:21:e2:82:5b:38:7d:79:ec:49:da:4d:
6a:e5:ac:0c:ac:f2:f4:48:00:b5:61:21:e5:02:2b:98:e0:93:
e0:d2:95:74:7e:b5:3c:cb:b9:ab:b3:89:b7:be:a3:92:a1:52:
14:0e:15:fd:1c:32:fd:c9:c1:a1:01:d2:cf:19:15:6d:1c:cc:
4a:65:4c:4c:ab:09:3d:15:3b:d0:ad:6e:8c:76:ce:c0:5f:97:
2a:4b:95:7d:0a:20:ce:36:b4:9d:49:c6:47:fb:23:58:54:74:
ad:a0:45:ef:35:28:be:c2:17:f5:4e:4b:e4:e3:ad:fb:51:da:
20:fe:f8:54:63:de:97:1e:0b:26:f3:cc:9d:75:15:00:9e:6f:
44:c9:6a:44:33:c7:20:40:92:0e:c7:f4:f2:b6:63:84:ab:79:
3e:94:8e:4d:61:f1:8b:df:bb:e5:c0:98:e0:4a:74:f0:84:67:
44:60:ba:39:35:fa:dd:2e:bb:81:7e:2e:23:8e:88:10:48:e0:
a3:4d:f8:b1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQSpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDIyODIzWhcNMjUwMjE0MDIyODIzWjAYMRYw
FAYDVQQDEw02NzgwODVjYi1lMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqqF/TgS9UrROLTpOjUlcnFBBI4pnUVs5oC8uWXCw1fQxelHwm6lOnnXg
yKxh7zBsJeLwy4ayyb+sb5KWc2sJ4qsNro2S4PVb6TQi3fL9w5NnOhsKefud8xjh
pEkAF0p3vkKoi8FLH2rIh1wu/xXfRZSTC7tzP5e1hRlfOiSh4rvZHsZK+A4H51qQ
sEuFCubgZQjTaEsM8SZGAElsIxWmiBqUJj2QfmKP6Ef/fJgXpWc1W9rS4pSMj9Dc
IkfWXzgGMJmB2wSoW+rne6yUxFm7SRM4UhMUrFmkwv/Us58Hk4277LhqxD3iWaXt
TTBS05gfxt98hRllHV18utYkNUNVDQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJm2
/nTdI7Oj2sKt6qk3BviBIWQyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85Mjk4Mjg4OENFRkExMUVGQjBDREU5NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPP1MA0GCSqGSIb3DQEBCwUA
A4IBAQCjkpyNO6IVwvXOKVjdXyw5jDLkQa9fkbZs3xUCp0Zpbi/5lVaIdL+m6Bz3
+SfGjoUOAlBq9C+f2qKrovgBIeKCWzh9eexJ2k1q5awMrPL0SAC1YSHlAiuY4JPg
0pV0frU8y7mrs4m3vqOSoVIUDhX9HDL9ycGhAdLPGRVtHMxKZUxMqwk9FTvQrW6M
ds7AX5cqS5V9CiDONrSdScZH+yNYVHStoEXvNSi+whf1Tkvk4637Udog/vhUY96X
Hgsm88yddRUAnm9EyWpEM8cgQJIOx/TytmOEq3k+lI5NYfGL37vlwJjgSnTwhGdE
YLo5NfrdLruBfi4jjogQSOCjTfix
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:34 2025 by rpki-client