Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D9419A8CF2311EF82366658762E951A.roa
File: 9D9419A8CF2311EF82366658762E951A.roa (raw, json)
Hash identifier: fcm3cKYH6vJRJmrPF+XY4025uPBAJKBoe7G4OfjhuAk=
Subject key identifier: D5:05:49:3D:9B:5C:CA:64:AF:18:DD:EE:45:82:A4:F3:03:EF:4B:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0104EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D9419A8CF2311EF82366658762E951A.roa
Signing time: Fri 10 Jan 2025 07:22:15 +0000
ROA not before: Fri 10 Jan 2025 07:22:11 +0000
ROA not after: Fri 14 Feb 2025 07:22:11 +0000
asID: 398993
IP address blocks: 156.231.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66799 (0x104ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 07:22:11 2025 GMT
Not After : Feb 14 07:22:11 2025 GMT
Subject: CN=6780caa7-22c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ef:77:60:60:53:b7:23:83:7c:f6:7a:6b:4c:
a2:c3:cf:50:61:f0:d1:01:21:21:7e:b1:e0:5d:77:
23:7e:52:05:a5:c8:51:00:84:a2:5e:d0:83:d3:90:
7d:ac:8e:c0:54:d4:f2:8f:c6:54:71:36:3f:c3:ed:
6b:f4:10:07:2e:3b:41:96:06:12:1b:45:b8:7f:a2:
2b:86:e9:57:5e:38:60:82:9f:4f:8e:45:88:64:47:
4c:06:be:50:bf:98:4b:88:ae:e8:cb:29:c6:9c:c3:
6e:fa:d1:bc:a4:4c:69:dd:e8:e7:83:2d:dc:0b:4d:
02:c2:11:c1:87:23:09:b0:84:55:3a:71:22:95:e1:
5b:d1:88:e9:de:d7:80:4a:ce:4d:75:1f:8b:23:e5:
95:73:e9:09:d3:d0:38:27:d8:42:a6:20:a7:86:21:
f7:5c:7f:e6:3c:6d:65:c4:3e:b4:e1:3e:af:da:cc:
8b:f9:98:56:af:eb:4e:45:fa:2e:f5:9b:69:d7:02:
23:7b:f6:1f:aa:b6:e5:e3:63:a7:13:f4:14:ea:d2:
a4:eb:bc:33:9b:a8:ef:d3:aa:34:1c:18:6c:c9:73:
a0:9a:bd:4c:f5:78:e8:39:64:2b:ca:51:f9:d4:cb:
43:fa:b2:92:d0:fe:6b:71:b7:13:65:b9:52:2b:f5:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:05:49:3D:9B:5C:CA:64:AF:18:DD:EE:45:82:A4:F3:03:EF:4B:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D9419A8CF2311EF82366658762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.68.0/22
Signature Algorithm: sha256WithRSAEncryption
65:df:b3:85:b5:60:cd:7a:bf:47:21:2d:3c:71:36:12:8c:4f:
2b:6b:fc:46:14:e6:d1:f2:00:52:a9:6a:8f:bf:df:22:a0:9f:
98:f8:41:71:2d:d1:a3:b7:c2:87:50:3f:1a:b4:6f:88:2c:06:
f4:a9:df:18:f8:74:a3:c4:64:09:7e:7e:b8:12:45:10:f8:f3:
16:35:da:38:49:6d:25:8a:7d:e0:ed:1c:d6:d1:7b:29:2e:2b:
57:90:7b:aa:31:89:4d:1b:32:25:6e:b1:b7:2c:86:38:fd:79:
c7:85:04:af:0a:bd:d4:50:22:d8:32:8a:dc:d5:ff:fc:96:58:
d1:3c:6e:45:3e:19:e2:cd:fe:c3:02:84:6a:f7:fc:57:aa:15:
8c:c8:8b:c4:aa:d4:f5:24:d5:bc:f8:56:83:df:f3:90:92:26:
42:3b:b7:e1:2e:34:b9:ed:a0:b8:23:0f:58:e7:33:58:e6:c2:
7f:63:2b:c0:4b:59:63:0d:77:14:22:a6:5f:f5:8a:a7:82:5f:
91:53:63:ad:4a:6c:1d:9c:a5:86:75:a8:d1:ba:dc:72:9a:5d:
5f:98:1d:a4:a0:4d:28:46:ba:90:29:fc:5b:cb:6f:d1:62:b6:
b8:9b:2b:0e:20:2e:0f:94:bc:fb:25:78:11:46:ad:9a:14:bd:
08:23:fd:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQTvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDcyMjExWhcNMjUwMjE0MDcyMjExWjAYMRYw
FAYDVQQDEw02NzgwY2FhNy0yMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy+93YGBTtyODfPZ6a0yiw89QYfDRASEhfrHgXXcjflIFpchRAISiXtCD
05B9rI7AVNTyj8ZUcTY/w+1r9BAHLjtBlgYSG0W4f6IrhulXXjhggp9PjkWIZEdM
Br5Qv5hLiK7oyynGnMNu+tG8pExp3ejngy3cC00CwhHBhyMJsIRVOnEileFb0Yjp
3teASs5NdR+LI+WVc+kJ09A4J9hCpiCnhiH3XH/mPG1lxD604T6v2syL+ZhWr+tO
Rfou9Ztp1wIje/Yfqrbl42OnE/QU6tKk67wzm6jv06o0HBhsyXOgmr1M9XjoOWQr
ylH51MtD+rKS0P5rcbcTZblSK/XqGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNUF
ST2bXMpkrxjd7kWCpPMD70uHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RDk0MTlBOENGMjMxMUVGODIzNjY2NTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOdEMA0GCSqGSIb3DQEBCwUA
A4IBAQBl37OFtWDNer9HIS08cTYSjE8ra/xGFObR8gBSqWqPv98ioJ+Y+EFxLdGj
t8KHUD8atG+ILAb0qd8Y+HSjxGQJfn64EkUQ+PMWNdo4SW0lin3g7RzW0XspLitX
kHuqMYlNGzIlbrG3LIY4/XnHhQSvCr3UUCLYMorc1f/8lljRPG5FPhnizf7DAoRq
9/xXqhWMyIvEqtT1JNW8+FaD3/OQkiZCO7fhLjS57aC4Iw9Y5zNY5sJ/YyvAS1lj
DXcUIqZf9Yqngl+RU2OtSmwdnKWGdajRutxyml1fmB2koE0oRrqQKfxby2/RYra4
mysOIC4PlLz7JXgRRq2aFL0II/0T
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:50 2025 by rpki-client