Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA0038D4D30611EF938C9074762E951A.roa
File: AA0038D4D30611EF938C9074762E951A.roa (raw, json)
Hash identifier: YH6RrvBzBuGt5pv5w1CxSGN4swFGFLYizaorM/d6mbg=
Subject key identifier: 3D:34:83:01:79:51:60:8D:03:2C:84:E8:46:07:97:CD:ED:32:AC:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010813
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA0038D4D30611EF938C9074762E951A.roa
Signing time: Wed 15 Jan 2025 06:05:05 +0000
ROA not before: Wed 15 Jan 2025 06:05:00 +0000
ROA not after: Sat 03 Jan 2026 06:05:00 +0000
asID: 984
IP address blocks: 156.254.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67603 (0x10813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 06:05:00 2025 GMT
Not After : Jan 3 06:05:00 2026 GMT
Subject: CN=67875011-4de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:bf:3c:f1:b7:ad:9e:e1:af:28:03:1c:34:
34:de:61:e1:d3:6e:aa:46:d7:4b:f1:22:a0:52:22:
f0:a5:8d:6c:23:e4:c2:04:83:da:fe:e7:22:43:71:
f5:fb:f9:2b:18:fe:e5:37:8b:ec:a5:3e:b7:d8:b3:
5c:26:cb:72:ed:51:5e:47:8c:97:b7:75:dd:b5:d7:
e7:0a:f4:40:73:d5:ed:bc:80:09:ab:b4:87:c3:b7:
e0:73:42:95:e9:a6:52:85:c9:9b:c7:62:f4:a2:e0:
34:93:79:66:b2:1b:43:79:c3:33:17:a8:f7:51:72:
7f:5d:4b:b6:dd:88:03:a3:07:67:1c:bc:74:9a:6c:
f8:7a:d4:3f:7d:a6:c7:fd:2a:2b:7d:63:a9:e8:4d:
98:b9:17:3f:c1:97:27:28:43:aa:d4:d8:c7:49:c5:
41:50:7b:c4:05:16:7d:99:72:83:bc:b8:bb:bb:9e:
33:7a:1a:33:f7:7c:14:75:2c:29:e1:a5:36:a2:16:
42:b8:a9:3e:5b:cd:4e:07:28:82:6b:9b:ca:cf:db:
1b:c9:48:48:c3:39:ab:00:72:b2:5d:0e:62:17:e4:
ba:62:67:34:7d:50:49:b2:72:4d:89:7c:cc:4d:66:
02:b6:27:6a:9f:ba:d5:66:7c:f2:0b:b9:7b:85:03:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:83:01:79:51:60:8D:03:2C:84:E8:46:07:97:CD:ED:32:AC:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA0038D4D30611EF938C9074762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.52.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8a:d4:0b:3a:c0:c3:0a:7c:13:59:bd:86:0c:f2:6c:44:1d:
1d:f1:af:77:4c:cf:70:e4:e6:cd:fb:a3:da:22:52:14:40:65:
d7:b0:85:61:f3:cc:1f:4b:89:ed:90:01:0f:d4:6f:e5:cd:a0:
5f:1b:4a:81:1f:00:7d:c5:b8:90:db:be:23:fc:aa:e6:01:75:
c7:9f:61:7d:12:58:50:f7:53:af:cc:78:ee:32:90:4d:30:a0:
94:05:e8:41:5c:1d:33:03:9e:e5:4b:81:da:ba:ea:bd:da:bd:
fb:21:f6:33:d8:c3:a3:63:13:e9:9f:cf:5d:10:f5:58:c8:70:
80:6c:46:62:6f:87:fb:c5:81:86:e6:39:8e:11:b2:53:bf:15:
18:d9:be:66:28:96:c5:d7:73:ac:8b:3a:ce:16:b4:99:84:6a:
7a:9c:70:2f:96:89:45:59:5c:a7:fc:2f:89:41:33:c5:1c:a1:
ee:69:a6:65:1f:17:11:d1:3d:94:f2:52:60:7e:47:ec:11:cb:
ed:fa:5a:40:8d:87:5e:5c:2f:57:c2:b6:97:75:7e:00:49:d6:
3c:7c:10:40:0b:6f:f7:f1:52:83:01:01:a8:bc:25:95:fe:24:
62:e8:11:b6:ea:a3:c8:81:4c:98:a4:3c:89:52:1b:63:59:89:
cf:0d:85:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQgTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDYwNTAwWhcNMjYwMTAzMDYwNTAwWjAYMRYw
FAYDVQQDEw02Nzg3NTAxMS00ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy/q/PPG3rZ7hrygDHDQ03mHh026qRtdL8SKgUiLwpY1sI+TCBIPa/uci
Q3H1+/krGP7lN4vspT632LNcJsty7VFeR4yXt3XdtdfnCvRAc9XtvIAJq7SHw7fg
c0KV6aZShcmbx2L0ouA0k3lmshtDecMzF6j3UXJ/XUu23YgDowdnHLx0mmz4etQ/
fabH/SorfWOp6E2YuRc/wZcnKEOq1NjHScVBUHvEBRZ9mXKDvLi7u54zehoz93wU
dSwp4aU2ohZCuKk+W81OByiCa5vKz9sbyUhIwzmrAHKyXQ5iF+S6Ymc0fVBJsnJN
iXzMTWYCtidqn7rVZnzyC7l7hQPyzwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD00
gwF5UWCNAyyE6EYHl83tMqxoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTAwMzhENEQzMDYxMUVGOTM4QzkwNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP40MA0GCSqGSIb3DQEBCwUA
A4IBAQCFitQLOsDDCnwTWb2GDPJsRB0d8a93TM9w5ObN+6PaIlIUQGXXsIVh88wf
S4ntkAEP1G/lzaBfG0qBHwB9xbiQ274j/KrmAXXHn2F9ElhQ91OvzHjuMpBNMKCU
BehBXB0zA57lS4Hauuq92r37IfYz2MOjYxPpn89dEPVYyHCAbEZib4f7xYGG5jmO
EbJTvxUY2b5mKJbF13OsizrOFrSZhGp6nHAvlolFWVyn/C+JQTPFHKHuaaZlHxcR
0T2U8lJgfkfsEcvt+lpAjYdeXC9XwraXdX4ASdY8fBBAC2/38VKDAQGovCWV/iRi
6BG26qPIgUyYpDyJUhtjWYnPDYU0
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:13 2025 by rpki-client