Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A03102025EF311EFACBC34A2762E951A.roa
File: A03102025EF311EFACBC34A2762E951A.roa (raw, json)
Hash identifier: MoSedxXYKbO6mYm0DD/l6Z/Naxl4J2vdkFQ03IXls4g=
Subject key identifier: A7:BD:1C:B5:73:E2:82:7A:1D:81:4B:24:39:8D:59:94:63:11:A1:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A03102025EF311EFACBC34A2762E951A.roa
Signing time: Tue 20 Aug 2024 12:56:33 +0000
ROA not before: Tue 20 Aug 2024 12:56:28 +0000
ROA not after: Tue 27 May 2025 12:56:28 +0000
asID: 399077
IP address blocks: 156.251.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43524 (0xaa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:56:28 2024 GMT
Not After : May 27 12:56:28 2025 GMT
Subject: CN=66c49281-dab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:c9:2b:ec:f0:48:34:d5:c5:bf:72:ad:92:
31:3f:d5:aa:7a:da:72:7a:6c:d6:3b:fa:bd:ec:d1:
37:76:d4:3b:e4:bc:9c:ff:31:9c:bf:9d:ef:8d:a4:
90:1e:8b:b1:c1:bd:b4:dd:76:e1:c3:a6:18:b0:cf:
f9:5b:39:b2:da:4f:16:48:6b:f5:11:0e:da:d9:11:
c6:04:7f:e8:0c:52:3e:78:40:61:fe:8d:18:8a:10:
2a:d4:b1:cf:fe:66:73:23:7f:4a:01:6f:d7:ac:73:
a0:27:be:e8:07:bb:5e:ae:86:08:fb:03:c9:8d:fa:
fb:60:6a:34:48:8b:d6:45:84:f4:7d:d8:f0:dc:30:
49:c9:bb:27:4c:7e:fb:4e:0e:61:65:48:45:a2:54:
20:72:41:8b:46:ba:57:df:1f:9f:fb:e5:bb:36:90:
58:44:4f:48:c1:79:c7:31:d8:75:dc:61:53:43:f2:
f1:f1:0a:cb:3c:52:7c:12:18:02:fb:ad:60:f5:b5:
a5:7b:c9:8d:c4:46:ac:60:9a:4d:88:1a:71:d6:ed:
cd:12:45:de:9f:de:65:b0:46:88:e3:94:39:b5:e5:
e9:ef:90:08:be:ab:d1:78:72:8d:4c:7b:d8:ff:ac:
bd:84:9d:cd:d8:f7:12:3b:7a:f5:b4:ae:64:eb:a7:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:1C:B5:73:E2:82:7A:1D:81:4B:24:39:8D:59:94:63:11:A1:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A03102025EF311EFACBC34A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:78:20:7e:78:3f:44:1e:b9:25:ad:a6:0e:94:2b:29:81:2c:
e5:20:76:85:12:bd:ea:98:8a:62:ba:77:de:9c:de:6f:7f:bd:
44:db:ef:7b:6c:62:5e:7a:4c:45:9c:fa:47:c7:16:9f:05:ff:
fb:79:64:2d:11:a3:a0:36:c0:2c:e5:7a:a7:0e:28:67:09:55:
0a:43:7e:d3:0f:db:7a:98:ad:c5:57:23:17:bd:ef:4c:ae:8f:
cd:f0:36:6d:34:28:c6:3e:7c:94:8b:80:ca:88:94:ea:24:1c:
ff:98:58:79:0f:44:ae:15:50:25:cb:f5:92:6d:1d:62:23:c9:
ae:b5:86:0f:50:04:c0:d6:33:ac:3e:9f:32:4a:af:92:cb:f1:
65:47:2f:3e:26:d8:37:8b:7e:66:b7:d6:46:b8:4e:62:ad:1c:
1a:56:c7:28:d3:3b:6a:7b:31:7c:6f:f1:d3:42:98:4f:43:ce:
f0:67:ad:81:dc:cb:f0:5e:fd:3b:94:6f:c7:1e:d9:bf:c8:b3:
07:08:02:cb:e0:a4:94:82:9b:0b:c1:6f:75:71:57:07:f1:db:
d3:e5:2a:3e:f8:80:19:58:99:ee:49:f0:f2:3a:74:76:a7:dc:
aa:29:4b:28:29:10:ec:d9:53:7f:c8:96:a1:ea:0f:a6:6f:f0:
4d:d8:d9:e2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKoEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTI1NjI4WhcNMjUwNTI3MTI1NjI4WjAYMRYw
FAYDVQQDEw02NmM0OTI4MS1kYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4F7JK+zwSDTVxb9yrZIxP9WqetpyemzWO/q97NE3dtQ75Lyc/zGcv53v
jaSQHouxwb203Xbhw6YYsM/5Wzmy2k8WSGv1EQ7a2RHGBH/oDFI+eEBh/o0YihAq
1LHP/mZzI39KAW/XrHOgJ77oB7teroYI+wPJjfr7YGo0SIvWRYT0fdjw3DBJybsn
TH77Tg5hZUhFolQgckGLRrpX3x+f++W7NpBYRE9IwXnHMdh13GFTQ/Lx8QrLPFJ8
EhgC+61g9bWle8mNxEasYJpNiBpx1u3NEkXen95lsEaI45Q5teXp75AIvqvReHKN
THvY/6y9hJ3N2PcSO3r1tK5k66cguQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKe9
HLVz4oJ6HYFLJDmNWZRjEaGVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMDMxMDIwMjVFRjMxMUVGQUNCQzM0QTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPsNMA0GCSqGSIb3DQEBCwUA
A4IBAQCyeCB+eD9EHrklraYOlCspgSzlIHaFEr3qmIpiunfenN5vf71E2+97bGJe
ekxFnPpHxxafBf/7eWQtEaOgNsAs5XqnDihnCVUKQ37TD9t6mK3FVyMXve9Mro/N
8DZtNCjGPnyUi4DKiJTqJBz/mFh5D0SuFVAly/WSbR1iI8mutYYPUATA1jOsPp8y
Sq+Sy/FlRy8+Jtg3i35mt9ZGuE5irRwaVsco0ztqezF8b/HTQphPQ87wZ62B3Mvw
Xv07lG/HHtm/yLMHCALL4KSUgpsLwW91cVcH8dvT5So++IAZWJnuSfDyOnR2p9yq
KUsoKRDs2VN/yJah6g+mb/BN2Nni
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:42 2024 by rpki-client on console-ams.rpki-client.org