Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA090822CD3611EF953E9D80762E951A.roa
File: AA090822CD3611EF953E9D80762E951A.roa (raw, json)
Hash identifier: LFR6x7+O0IZ0KMetWuKZ0Oep9k+w9yLbcTQulkEKx6Y=
Subject key identifier: 03:97:ED:03:F0:02:BD:0C:0C:63:A7:B3:10:A1:92:ED:FA:47:AF:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA090822CD3611EF953E9D80762E951A.roa
Signing time: Tue 07 Jan 2025 20:33:34 +0000
ROA not before: Tue 07 Jan 2025 20:33:30 +0000
ROA not after: Mon 13 Dec 2027 20:33:30 +0000
asID: 17561
IP address blocks: 156.243.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65055 (0xfe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 20:33:30 2025 GMT
Not After : Dec 13 20:33:30 2027 GMT
Subject: CN=677d8f9e-23be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:b3:3e:1a:5a:de:46:fd:d2:1a:d6:db:a8:
b9:25:f3:7d:b2:94:c4:26:56:6e:05:df:c9:00:56:
4d:a5:36:73:b0:40:d4:77:53:19:df:11:ca:91:b2:
cf:f5:8c:bf:80:69:08:6c:17:df:34:4c:4e:b0:46:
a0:14:62:6e:8e:c6:ed:e7:3d:a0:6f:fc:33:2c:16:
d6:32:6f:1e:07:4f:0d:a0:c6:05:98:7f:9c:8e:d9:
3e:c2:99:8e:fb:04:a8:b3:a6:92:6b:17:fe:a5:3c:
0c:c7:60:9b:ee:ea:62:c3:86:e3:87:16:83:21:5f:
52:cc:81:23:48:12:fa:d5:65:07:3f:8a:24:fa:67:
13:c1:9b:09:84:44:6f:b3:2f:8d:4a:8b:e9:99:f4:
c4:7d:b9:2a:3e:8f:8c:0b:79:54:3e:92:d7:9b:48:
3c:e4:42:55:c0:1a:d9:8a:ac:3a:86:0a:63:2d:a5:
a1:04:b7:a0:88:12:19:1d:2b:8e:4a:18:8f:6c:ba:
8d:62:f4:57:62:14:f5:e5:c1:54:05:7a:a1:c1:38:
ee:48:29:bb:96:d0:c5:50:e7:b5:86:d5:13:f8:12:
07:eb:f6:be:af:a7:3d:5d:49:1e:68:04:a2:02:b2:
5c:0a:3b:74:44:e6:12:37:43:0b:35:b5:66:94:b6:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:97:ED:03:F0:02:BD:0C:0C:63:A7:B3:10:A1:92:ED:FA:47:AF:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA090822CD3611EF953E9D80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:af:4f:7a:6e:87:83:3d:d8:94:94:f3:98:1f:d7:71:02:49:
18:81:db:fa:0e:d1:e1:9c:1f:dd:e4:6e:ad:eb:d7:8b:86:02:
07:de:c5:13:86:e5:98:9f:91:6e:60:00:92:b9:f1:59:0a:75:
3d:92:00:53:33:01:23:c1:ff:90:74:b1:31:cc:ea:ec:f6:9c:
90:04:52:21:53:9b:a6:35:58:5d:29:36:4d:63:19:f9:9a:89:
92:ae:c1:01:1b:9e:38:cf:67:7d:5c:bb:5f:59:d9:37:e0:97:
cc:a1:23:ae:16:5b:e6:bc:99:b6:ed:e4:b4:25:d6:e7:be:ae:
32:ed:45:a2:1e:8c:09:da:79:e6:ab:ed:fa:5b:69:4f:a8:c8:
be:80:12:43:59:e6:fc:3f:a6:66:59:ae:69:ac:df:8d:10:6e:
a7:e6:52:48:1c:c1:0a:8d:49:05:6a:45:68:a1:23:56:d9:eb:
50:be:d8:96:fd:49:0d:16:dc:82:55:96:43:8c:7f:2a:ab:f5:
cd:c4:53:d4:cb:49:df:8c:46:0c:a9:d2:63:3d:46:49:a7:9e:
29:48:b4:ed:8b:cd:2f:97:cd:fc:34:13:fb:fe:e4:23:7e:eb:
11:7e:87:60:e5:72:1a:a7:e6:8d:ee:46:3f:bf:4a:bf:05:c1:
01:9e:df:df
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP4fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjAzMzMwWhcNMjcxMjEzMjAzMzMwWjAYMRYw
FAYDVQQDEw02NzdkOGY5ZS0yM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx1qzPhpa3kb90hrW26i5JfN9spTEJlZuBd/JAFZNpTZzsEDUd1MZ3xHK
kbLP9Yy/gGkIbBffNExOsEagFGJujsbt5z2gb/wzLBbWMm8eB08NoMYFmH+cjtk+
wpmO+wSos6aSaxf+pTwMx2Cb7upiw4bjhxaDIV9SzIEjSBL61WUHP4ok+mcTwZsJ
hERvsy+NSovpmfTEfbkqPo+MC3lUPpLXm0g85EJVwBrZiqw6hgpjLaWhBLegiBIZ
HSuOShiPbLqNYvRXYhT15cFUBXqhwTjuSCm7ltDFUOe1htUT+BIH6/a+r6c9XUke
aASiArJcCjt0ROYSN0MLNbVmlLbrWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAOX
7QPwAr0MDGOnsxChku36R69TMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTA5MDgyMkNEMzYxMUVGOTUzRTlEODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPM4MA0GCSqGSIb3DQEBCwUA
A4IBAQCLr096boeDPdiUlPOYH9dxAkkYgdv6DtHhnB/d5G6t69eLhgIH3sUThuWY
n5FuYACSufFZCnU9kgBTMwEjwf+QdLExzOrs9pyQBFIhU5umNVhdKTZNYxn5momS
rsEBG544z2d9XLtfWdk34JfMoSOuFlvmvJm27eS0Jdbnvq4y7UWiHowJ2nnmq+36
W2lPqMi+gBJDWeb8P6ZmWa5prN+NEG6n5lJIHMEKjUkFakVooSNW2etQvtiW/UkN
FtyCVZZDjH8qq/XNxFPUy0nfjEYMqdJjPUZJp54pSLTti80vl838NBP7/uQjfusR
fodg5XIap+aN7kY/v0q/BcEBnt/f
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:00 2025 by rpki-client