Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D1722CCDA811EF872F7765762E951A.roa
File: A0D1722CCDA811EF872F7765762E951A.roa (raw, json)
Hash identifier: HWlqkSpKaDxWY96yWWNOenjePjIKD56sC5kGOw6kRL4=
Subject key identifier: 3B:C0:CC:4E:26:76:71:B1:F8:84:0E:2F:52:E3:69:AD:AF:42:D0:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01013D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D1722CCDA811EF872F7765762E951A.roa
Signing time: Wed 08 Jan 2025 10:09:21 +0000
ROA not before: Wed 08 Jan 2025 10:09:17 +0000
ROA not after: Mon 13 Dec 2027 10:09:17 +0000
asID: 17561
IP address blocks: 156.255.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65853 (0x1013d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:09:17 2025 GMT
Not After : Dec 13 10:09:17 2027 GMT
Subject: CN=677e4ed1-2b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:84:78:d2:7f:5b:7b:8f:2b:79:c0:26:d6:f9:
dd:da:59:fb:a1:58:a1:fe:da:24:76:63:d7:d7:35:
9c:69:59:c4:e7:44:9b:30:1a:6b:d3:98:0b:de:06:
ea:b5:6a:53:2d:da:54:38:b6:81:92:2d:be:f7:c7:
72:5c:8b:05:ee:4d:26:bf:ba:5d:04:24:fe:21:c6:
08:d8:9b:f2:d3:44:f5:dc:a9:ab:50:42:df:4b:dd:
4d:f7:46:a1:60:b2:dc:18:16:88:65:b6:a6:c4:26:
09:cc:fe:cf:71:59:a4:81:96:35:40:85:8d:20:48:
eb:0d:f7:d2:33:9d:9e:d4:15:bd:65:12:b1:ce:c5:
d3:6a:8d:7d:5e:44:81:62:38:68:76:c0:9d:3e:56:
00:62:3f:8b:4d:37:13:cd:89:8f:e4:2d:2e:10:8a:
5e:71:7e:3b:30:a3:01:61:c9:87:09:99:3b:3e:66:
ca:34:f6:ed:c6:d9:29:f1:80:0a:64:94:60:99:ec:
0c:68:ec:92:b5:20:b9:2b:92:85:01:01:4a:38:34:
c5:39:3d:00:25:10:92:4a:24:83:e1:9a:46:b2:b3:
8b:f8:e9:32:a6:3b:e2:0a:98:8e:11:92:f6:59:af:
9c:f2:ee:fc:79:7e:e3:bb:60:d5:f6:e7:35:93:b1:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:CC:4E:26:76:71:B1:F8:84:0E:2F:52:E3:69:AD:AF:42:D0:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D1722CCDA811EF872F7765762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.33.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:da:be:d6:8b:0f:13:85:41:1b:a9:50:0e:60:16:28:7f:46:
a2:34:82:b5:36:21:04:9d:f2:44:e6:47:ab:d5:b9:b3:d5:2a:
14:7a:9b:5f:8f:c0:31:61:ea:29:52:79:7a:cd:20:42:f3:06:
2e:69:08:04:65:ad:5d:55:a6:c8:e9:17:31:92:44:8b:78:18:
fa:5e:a9:80:68:a7:e1:a0:ed:b1:17:77:0d:0b:48:da:e4:72:
9a:37:4e:4a:d2:6a:32:e3:6f:9f:8e:72:95:51:c1:d7:09:1c:
79:22:71:fb:c1:95:67:bd:67:24:03:ab:3e:19:19:da:5a:63:
c9:7f:28:db:16:bd:91:a0:e8:ed:70:c9:06:b6:da:39:30:31:
e6:c0:5a:02:51:e5:52:1c:94:c6:32:c8:da:ca:d0:cb:3e:b5:
a1:ac:c4:fd:76:55:59:44:f3:bd:5e:fc:12:d0:06:0c:8c:85:
31:cd:b0:d2:b0:e1:bf:8e:c8:aa:0c:15:31:11:bd:3f:45:d3:
6b:e7:17:d0:08:6f:0f:6e:d0:15:12:8b:fb:ed:06:34:7b:ac:
f9:af:05:d6:ed:75:69:ee:e9:7d:ab:fb:c7:66:3c:34:9b:0c:
32:2d:59:d9:b7:d9:83:6e:df:68:82:68:f5:f2:2a:fc:ce:2d:
11:58:93:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQE9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MTAwOTE3WhcNMjcxMjEzMTAwOTE3WjAYMRYw
FAYDVQQDEw02NzdlNGVkMS0yYjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnIR40n9be48recAm1vnd2ln7oVih/tokdmPX1zWcaVnE50SbMBpr05gL
3gbqtWpTLdpUOLaBki2+98dyXIsF7k0mv7pdBCT+IcYI2Jvy00T13KmrUELfS91N
90ahYLLcGBaIZbamxCYJzP7PcVmkgZY1QIWNIEjrDffSM52e1BW9ZRKxzsXTao19
XkSBYjhodsCdPlYAYj+LTTcTzYmP5C0uEIpecX47MKMBYcmHCZk7PmbKNPbtxtkp
8YAKZJRgmewMaOyStSC5K5KFAQFKODTFOT0AJRCSSiSD4ZpGsrOL+OkypjviCpiO
EZL2Wa+c8u78eX7ju2DV9uc1k7FbkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDvA
zE4mdnGx+IQOL1Ljaa2vQtBwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMEQxNzIyQ0NEQTgxMUVGODcyRjc3NjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8hMA0GCSqGSIb3DQEBCwUA
A4IBAQAd2r7Wiw8ThUEbqVAOYBYof0aiNIK1NiEEnfJE5ker1bmz1SoUeptfj8Ax
YeopUnl6zSBC8wYuaQgEZa1dVabI6RcxkkSLeBj6XqmAaKfhoO2xF3cNC0ja5HKa
N05K0moy42+fjnKVUcHXCRx5InH7wZVnvWckA6s+GRnaWmPJfyjbFr2RoOjtcMkG
tto5MDHmwFoCUeVSHJTGMsjaytDLPrWhrMT9dlVZRPO9XvwS0AYMjIUxzbDSsOG/
jsiqDBUxEb0/RdNr5xfQCG8PbtAVEov77QY0e6z5rwXW7XVp7ul9q/vHZjw0mwwy
LVnZt9mDbt9ogmj18ir8zi0RWJO3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:40 2025 by rpki-client