Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A08C9C8CD6111EFAFA91996762E951A.roa
File: 9A08C9C8CD6111EFAFA91996762E951A.roa (raw, json)
Hash identifier: eQ7QGwjx80+VIy57KbqGGIe5pbyZMKNWAC+24d6XwT8=
Subject key identifier: 30:0C:F8:A1:C5:FF:4B:08:D4:7C:29:FD:23:12:B1:7E:7D:A7:11:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A08C9C8CD6111EFAFA91996762E951A.roa
Signing time: Wed 08 Jan 2025 01:40:55 +0000
ROA not before: Wed 08 Jan 2025 01:40:52 +0000
ROA not after: Sat 13 Dec 2025 01:40:52 +0000
asID: 984
IP address blocks: 156.247.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65335 (0xff37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 01:40:52 2025 GMT
Not After : Dec 13 01:40:52 2025 GMT
Subject: CN=677dd7a7-7c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:f1:e1:25:95:27:c3:e5:ad:16:56:19:7d:
9d:49:7a:eb:ca:5d:28:43:27:5b:5a:aa:9c:d3:fe:
8c:65:11:21:9b:b3:2e:6d:1a:82:b8:f1:a3:fb:ce:
c6:42:55:4c:f0:ea:4f:c1:4d:47:11:f0:73:21:ce:
67:44:6b:e9:9e:e6:9b:2f:da:7e:fe:b6:12:1e:88:
25:45:75:67:1a:3e:0b:5f:16:3b:6a:11:6b:29:b1:
a6:82:ea:dc:10:76:83:9f:2d:9e:0b:2b:cc:05:d7:
c6:c9:80:4a:c0:b1:0e:cb:04:56:4b:4e:04:3a:e6:
07:ec:a4:70:ea:98:8c:2a:68:8d:5a:86:c7:8a:40:
e0:84:f9:a4:02:77:31:da:cd:9e:5c:62:0e:dd:9b:
98:66:0d:1a:ac:8a:37:cd:10:25:54:ff:7d:43:40:
c0:fa:73:c5:89:74:c3:5d:8c:c1:c0:11:13:ef:d9:
2e:de:90:35:52:20:02:2a:60:f3:7a:a2:3c:e4:b5:
4c:82:e8:bc:ce:95:9c:04:28:f9:9a:37:d1:88:bd:
0f:5d:4c:d0:18:74:5f:10:77:59:c0:2f:a6:ce:8e:
da:44:86:71:64:79:9d:d5:15:13:c4:9b:5e:ef:a3:
5b:fb:33:a2:b4:3d:ce:a1:41:79:b6:93:be:f3:54:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:F8:A1:C5:FF:4B:08:D4:7C:29:FD:23:12:B1:7E:7D:A7:11:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A08C9C8CD6111EFAFA91996762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:73:15:b5:42:3b:eb:28:c3:db:1e:d7:65:b8:ca:41:28:f6:
f5:7a:1b:cd:e2:6f:b5:73:16:97:76:76:e9:7a:38:22:f4:67:
48:ee:00:a1:5b:08:c9:20:3e:d6:33:3d:cb:82:1f:79:5d:dc:
54:3c:46:27:42:2a:07:81:de:eb:75:1e:4e:6d:fe:03:57:ee:
cb:af:e3:3c:b9:d5:13:ed:c7:cf:09:84:64:d2:ae:79:72:10:
56:df:08:04:8c:4c:8a:c0:ae:d3:f4:6e:4a:dc:2f:31:9e:6a:
ef:a2:87:ac:2a:78:1d:01:66:f7:0b:81:e8:e3:0e:c8:c0:0d:
d6:39:ad:b2:48:28:e7:75:28:e3:a3:64:85:df:95:f5:4e:0f:
7c:40:ec:9c:d1:09:c1:be:c9:3a:c0:f6:1f:3b:d3:5d:1f:33:
4b:6a:be:f7:9c:c8:27:9d:84:34:4b:fd:2a:32:f4:a2:79:d9:
40:1c:6d:f4:0a:9f:59:b1:ae:4c:1e:c4:c2:d8:db:75:e6:8e:
b2:66:af:45:f3:4f:de:66:fb:51:59:7f:46:85:87:c8:d7:b2:
f4:11:9f:23:1a:e2:dd:0b:47:d5:23:f1:bf:ea:d1:b3:f4:56:
88:51:99:7b:cb:4a:54:e6:13:9e:2e:ff:8b:52:38:94:8a:11:
69:9e:8f:a3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP83MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDE0MDUyWhcNMjUxMjEzMDE0MDUyWjAYMRYw
FAYDVQQDEw02NzdkZDdhNy03YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxRTx4SWVJ8PlrRZWGX2dSXrryl0oQydbWqqc0/6MZREhm7MubRqCuPGj
+87GQlVM8OpPwU1HEfBzIc5nRGvpnuabL9p+/rYSHoglRXVnGj4LXxY7ahFrKbGm
gurcEHaDny2eCyvMBdfGyYBKwLEOywRWS04EOuYH7KRw6piMKmiNWobHikDghPmk
Ancx2s2eXGIO3ZuYZg0arIo3zRAlVP99Q0DA+nPFiXTDXYzBwBET79ku3pA1UiAC
KmDzeqI85LVMgui8zpWcBCj5mjfRiL0PXUzQGHRfEHdZwC+mzo7aRIZxZHmd1RUT
xJte76Nb+zOitD3OoUF5tpO+81Qd4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDAM
+KHF/0sI1Hwp/SMSsX59pxEwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTA4QzlDOENENjExMUVGQUZBOTE5OTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPdkMA0GCSqGSIb3DQEBCwUA
A4IBAQCPcxW1QjvrKMPbHtdluMpBKPb1ehvN4m+1cxaXdnbpejgi9GdI7gChWwjJ
ID7WMz3Lgh95XdxUPEYnQioHgd7rdR5Obf4DV+7Lr+M8udUT7cfPCYRk0q55chBW
3wgEjEyKwK7T9G5K3C8xnmrvooesKngdAWb3C4Ho4w7IwA3WOa2ySCjndSjjo2SF
35X1Tg98QOyc0QnBvsk6wPYfO9NdHzNLar73nMgnnYQ0S/0qMvSiedlAHG30Cp9Z
sa5MHsTC2Nt15o6yZq9F80/eZvtRWX9GhYfI17L0EZ8jGuLdC0fVI/G/6tGz9FaI
UZl7y0pU5hOeLv+LUjiUihFpno+j
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:58 2025 by rpki-client