Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B35D96CCD2A11EF98BED9B3762E951A.roa
File: 9B35D96CCD2A11EF98BED9B3762E951A.roa (raw, json)
Hash identifier: hSfJghgVxRBST7M4fmJS+Q0+f6uz+V9RihaW+WkOb0M=
Subject key identifier: C5:D4:06:11:14:BC:19:52:46:FE:1B:C4:2D:CE:B0:46:9F:E7:EC:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B35D96CCD2A11EF98BED9B3762E951A.roa
Signing time: Tue 07 Jan 2025 19:07:15 +0000
ROA not before: Tue 07 Jan 2025 19:07:11 +0000
ROA not after: Mon 13 Dec 2027 19:07:11 +0000
asID: 17561
IP address blocks: 156.241.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64959 (0xfdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 19:07:11 2025 GMT
Not After : Dec 13 19:07:11 2027 GMT
Subject: CN=677d7b63-cf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:ca:99:e7:e8:84:0b:a5:1f:df:51:ba:14:
01:b6:5d:bc:ed:a7:b5:b6:a9:b1:fa:db:1a:75:8e:
37:58:df:be:5a:b4:84:37:a2:1a:35:fb:48:ff:07:
dd:b8:f4:6f:89:72:ed:cd:38:46:93:86:6b:ad:51:
22:b1:d8:32:52:68:6a:5f:68:81:37:8d:89:48:78:
63:b9:49:e5:00:ca:5b:c8:73:9f:47:87:b9:61:fb:
b7:b6:07:37:eb:af:c4:13:35:f3:41:81:e1:3a:b4:
de:4b:d8:8a:55:29:9e:0d:91:56:18:7d:f7:e2:08:
dc:78:04:66:d8:24:23:7a:1c:6c:0c:f3:a8:f6:bc:
72:64:85:54:f6:a1:96:6a:67:34:8f:b6:f4:ce:86:
4d:26:eb:80:e2:a5:0b:7d:32:02:55:b6:a9:44:68:
24:80:72:2b:14:6b:61:2a:d5:17:46:e6:87:59:b9:
07:e9:86:f6:23:5b:d4:3d:32:30:03:2b:f4:5c:b6:
ee:cb:7d:d8:3b:73:cd:51:fe:39:3a:e0:65:de:dc:
61:ab:20:06:ea:cc:16:1a:9e:ac:cc:8a:53:a2:6e:
d5:9f:e6:55:c4:10:64:f4:63:b5:db:1d:75:85:10:
60:22:c5:00:e1:9e:3c:0b:bd:c2:8f:29:56:00:a7:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D4:06:11:14:BC:19:52:46:FE:1B:C4:2D:CE:B0:46:9F:E7:EC:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B35D96CCD2A11EF98BED9B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:31:ad:7c:b2:30:9d:49:f4:ab:a7:c9:c9:a1:cd:da:65:89:
09:42:f0:64:82:0f:32:b7:a7:2e:65:75:8d:f2:bd:77:a5:42:
90:fd:f8:96:da:2f:99:2a:d8:f5:71:03:2a:6a:22:64:30:e9:
2d:24:6b:ab:79:30:14:7c:6a:c8:27:15:62:8b:85:fc:62:0a:
f9:94:90:60:2a:13:25:6b:63:2a:75:3d:aa:29:f1:06:fd:a8:
78:03:75:f6:1c:ee:0f:48:f7:0a:a1:da:96:41:b7:c6:e3:29:
d7:e8:00:33:9c:86:16:65:03:9e:8c:8a:f2:01:04:67:83:eb:
25:a8:95:06:f4:81:06:62:40:29:a0:df:8c:b3:2e:9c:02:79:
8b:94:b6:1a:93:bd:d3:fd:2a:9f:d4:14:85:1b:24:5d:dc:5a:
da:0f:cd:36:e6:58:b7:a7:aa:b4:82:51:f0:f3:db:7c:8d:82:
dc:9a:d6:1d:21:78:e9:72:89:9b:45:07:37:08:c5:b7:b9:ec:
4d:48:6a:0b:1d:21:30:ad:f5:d6:b2:38:69:b9:42:6e:6c:be:
73:41:8d:18:cb:8c:0d:66:48:09:c7:24:09:d6:f4:2f:4b:dc:
bd:a6:ee:33:5a:63:e8:a9:8e:3a:02:62:e9:27:e4:3b:fd:7a:
a2:ac:70:05
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP2/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTkwNzExWhcNMjcxMjEzMTkwNzExWjAYMRYw
FAYDVQQDEw02NzdkN2I2My1jZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsGrKmefohAulH99RuhQBtl287ae1tqmx+tsadY43WN++WrSEN6IaNftI
/wfduPRviXLtzThGk4ZrrVEisdgyUmhqX2iBN42JSHhjuUnlAMpbyHOfR4e5Yfu3
tgc366/EEzXzQYHhOrTeS9iKVSmeDZFWGH334gjceARm2CQjehxsDPOo9rxyZIVU
9qGWamc0j7b0zoZNJuuA4qULfTICVbapRGgkgHIrFGthKtUXRuaHWbkH6Yb2I1vU
PTIwAyv0XLbuy33YO3PNUf45OuBl3txhqyAG6swWGp6szIpTom7Vn+ZVxBBk9GO1
2x11hRBgIsUA4Z48C73CjylWAKcluQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMXU
BhEUvBlSRv4bxC3OsEaf5+yHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QjM1RDk2Q0NEMkExMUVGOThCRUQ5QjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHrMA0GCSqGSIb3DQEBCwUA
A4IBAQBrMa18sjCdSfSrp8nJoc3aZYkJQvBkgg8yt6cuZXWN8r13pUKQ/fiW2i+Z
Ktj1cQMqaiJkMOktJGureTAUfGrIJxVii4X8Ygr5lJBgKhMla2MqdT2qKfEG/ah4
A3X2HO4PSPcKodqWQbfG4ynX6AAznIYWZQOejIryAQRng+slqJUG9IEGYkApoN+M
sy6cAnmLlLYak73T/Sqf1BSFGyRd3FraD8025li3p6q0glHw89t8jYLcmtYdIXjp
combRQc3CMW3uexNSGoLHSEwrfXWsjhpuUJubL5zQY0Yy4wNZkgJxyQJ1vQvS9y9
pu4zWmPoqY46AmLpJ+Q7/XqirHAF
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:04 2025 by rpki-client