Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1E6CACC99111EFB5D25969762E951A.roa
File: 9A1E6CACC99111EFB5D25969762E951A.roa (raw, json)
Hash identifier: h6srvLrZjLe8FtvmW11KRVX22ghlxnHldk0kgxRHvkI=
Subject key identifier: 2E:F4:A9:CA:C5:E3:D6:0E:4E:C2:E6:B7:9A:9A:47:79:2A:C9:7B:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1E6CACC99111EFB5D25969762E951A.roa
Signing time: Fri 03 Jan 2025 05:14:26 +0000
ROA not before: Fri 03 Jan 2025 05:14:22 +0000
ROA not after: Sat 13 Dec 2025 05:14:22 +0000
asID: 984
IP address blocks: 156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62953 (0xf5e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:14:22 2025 GMT
Not After : Dec 13 05:14:22 2025 GMT
Subject: CN=67777232-6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:d8:02:f8:e4:a3:a7:37:01:2b:1c:12:a0:
13:96:74:86:fa:53:69:e5:4f:1f:db:92:c9:fd:d2:
3f:9c:01:06:4a:3f:5b:ad:64:b1:d9:e8:03:54:2a:
16:a8:54:4b:e3:8e:84:c7:7a:95:d0:73:9b:b3:16:
ed:85:36:5f:56:45:8e:ad:f5:ee:0e:0f:b6:2d:18:
15:0a:4e:a8:7d:31:ed:71:dd:af:77:7a:24:ae:83:
a4:50:87:fd:48:cb:95:81:9a:53:a9:40:69:d7:68:
d9:bf:a6:dd:38:ce:ba:a4:65:6a:95:8f:70:95:dc:
3d:df:12:d1:cd:38:b9:cc:db:57:39:d2:00:b5:6b:
38:37:03:2f:fb:30:4b:a0:ed:f5:47:38:ed:f0:58:
cf:2a:3a:a2:54:29:c2:ed:bf:7e:eb:63:0d:ac:d2:
14:1a:44:28:c6:99:09:51:a7:26:ae:0f:73:70:8a:
45:e5:9d:57:ca:cd:9e:5f:65:2e:2b:0e:25:25:f0:
fe:3e:93:2e:93:86:91:00:bc:87:9c:6b:60:8c:6e:
90:56:0e:20:65:1a:a6:c0:55:5b:36:00:1d:60:15:
ee:bd:54:f8:ed:b8:7a:06:cf:28:83:03:75:c3:07:
99:a5:a4:80:63:06:d6:3a:a4:0d:21:96:3b:78:dd:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:A9:CA:C5:E3:D6:0E:4E:C2:E6:B7:9A:9A:47:79:2A:C9:7B:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1E6CACC99111EFB5D25969762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.105.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f8:e0:15:ad:16:80:40:b8:e6:eb:ac:8f:f2:2b:81:c6:2e:
61:de:d6:77:93:56:26:f8:f4:06:ed:6b:6d:d4:08:5a:26:f4:
15:58:77:c9:89:ee:18:cb:50:e4:c3:41:70:38:34:54:d5:7a:
4f:40:c2:06:85:1e:dc:48:52:eb:cf:d1:b4:54:a5:72:6e:17:
21:03:38:2f:39:4b:15:58:92:bc:70:0c:34:d2:15:73:f1:55:
79:3d:bc:a0:d5:7c:7b:52:46:81:dd:b2:c1:3e:8f:b3:b7:ff:
b1:98:94:b1:ce:c4:46:f3:d2:47:8a:35:7a:3e:28:1e:6f:c4:
93:fb:09:41:8e:45:dc:10:84:3d:01:26:e9:a5:cd:b4:6b:05:
13:29:1a:52:72:a5:aa:49:11:ae:1c:2a:d9:81:06:13:a5:58:
ea:82:c1:d6:5b:40:7a:70:c0:02:9b:8d:ff:1b:ec:12:b1:48:
13:ba:a8:29:0a:d0:da:a0:f9:75:1f:8a:b2:1e:c6:12:cf:8b:
c5:d8:68:ac:fc:64:04:8a:17:a1:d0:a2:52:24:af:12:3d:11:
21:17:98:09:60:61:3b:5f:e2:64:ac:dd:5a:88:f1:6d:02:f8:
72:78:c1:5d:e9:8f:d1:9b:a5:f7:7d:b4:f1:05:4a:57:de:9a:
33:37:f7:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPXpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDUxNDIyWhcNMjUxMjEzMDUxNDIyWjAYMRYw
FAYDVQQDEw02Nzc3NzIzMi02OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtavYAvjko6c3ASscEqATlnSG+lNp5U8f25LJ/dI/nAEGSj9brWSx2egD
VCoWqFRL446Ex3qV0HObsxbthTZfVkWOrfXuDg+2LRgVCk6ofTHtcd2vd3okroOk
UIf9SMuVgZpTqUBp12jZv6bdOM66pGVqlY9wldw93xLRzTi5zNtXOdIAtWs4NwMv
+zBLoO31Rzjt8FjPKjqiVCnC7b9+62MNrNIUGkQoxpkJUacmrg9zcIpF5Z1Xys2e
X2UuKw4lJfD+PpMuk4aRALyHnGtgjG6QVg4gZRqmwFVbNgAdYBXuvVT47bh6Bs8o
gwN1wweZpaSAYwbWOqQNIZY7eN24IQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC70
qcrF49YOTsLmt5qaR3kqyXtGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QTFFNkNBQ0M5OTExMUVGQjVEMjU5Njk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlpMA0GCSqGSIb3DQEBCwUA
A4IBAQBR+OAVrRaAQLjm66yP8iuBxi5h3tZ3k1Ym+PQG7Wtt1AhaJvQVWHfJie4Y
y1Dkw0FwODRU1XpPQMIGhR7cSFLrz9G0VKVybhchAzgvOUsVWJK8cAw00hVz8VV5
Pbyg1Xx7UkaB3bLBPo+zt/+xmJSxzsRG89JHijV6Pigeb8ST+wlBjkXcEIQ9ASbp
pc20awUTKRpScqWqSRGuHCrZgQYTpVjqgsHWW0B6cMACm43/G+wSsUgTuqgpCtDa
oPl1H4qyHsYSz4vF2Gis/GQEiheh0KJSJK8SPREhF5gJYGE7X+JkrN1aiPFtAvhy
eMFd6Y/Rm6X3fbTxBUpX3pozN/e6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:51 2025 by rpki-client