Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADFA8FE6D2F411EFA44BE582762E951A.roa
File: ADFA8FE6D2F411EFA44BE582762E951A.roa (raw, json)
Hash identifier: WN75ygRt28htLqg5qZQTvyqo6sO53e1cQD1Ffjx2y6g=
Subject key identifier: 06:72:2B:2C:76:50:3A:E8:88:90:7E:D9:B5:D5:AC:37:E5:7A:D4:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADFA8FE6D2F411EFA44BE582762E951A.roa
Signing time: Wed 15 Jan 2025 03:56:20 +0000
ROA not before: Wed 15 Jan 2025 03:56:17 +0000
ROA not after: Sat 03 Jan 2026 03:56:17 +0000
asID: 984
IP address blocks: 156.249.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67481 (0x10799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:56:17 2025 GMT
Not After : Jan 3 03:56:17 2026 GMT
Subject: CN=678731e4-f774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:84:73:7e:5b:28:02:03:ce:24:08:1a:9c:
e4:71:d4:be:bd:b4:2c:9c:05:c3:fa:3b:50:ad:67:
02:62:d7:39:b2:40:2f:d7:79:8e:04:50:9b:7e:9f:
6c:23:37:6b:cf:87:85:37:80:1f:57:50:7c:4e:50:
3a:8a:14:e4:d6:3a:60:70:c9:db:3a:0c:63:e6:31:
34:06:1d:38:4e:0b:74:6b:9c:0c:1f:34:9b:ba:91:
df:98:f3:50:c4:64:df:03:74:8d:aa:c0:35:e2:6a:
fc:d0:42:3c:91:9a:06:20:f5:d0:4f:76:6b:78:15:
00:9e:14:94:f1:be:ac:cb:33:c0:03:9a:d1:2e:cd:
6d:24:b1:33:c6:a8:24:87:dc:c6:30:db:53:ea:ee:
1c:15:f4:72:11:cd:bc:ec:57:96:7f:5b:fe:e6:a1:
d8:c8:d2:14:96:53:2a:22:81:bd:5a:06:d9:5d:c1:
5c:8a:de:48:4a:8a:ba:59:c1:e5:4e:4e:7d:07:64:
8a:1d:1e:bf:97:c2:c1:f0:ea:0b:e6:65:d4:40:d1:
41:f2:75:73:ca:f1:98:85:7c:d3:e4:e1:3a:fa:dc:
fa:27:21:1b:12:fb:73:0a:0f:a8:0b:b0:6d:ee:85:
48:7a:35:b1:45:3d:6c:f2:10:92:d2:1d:f3:d5:a8:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:2B:2C:76:50:3A:E8:88:90:7E:D9:B5:D5:AC:37:E5:7A:D4:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADFA8FE6D2F411EFA44BE582762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:40:78:ee:04:02:3f:9a:36:0b:53:a3:1c:f8:d2:ef:e8:bd:
93:13:44:10:25:13:54:3a:8d:80:cb:64:37:08:55:4f:33:ec:
44:a5:35:2f:b8:28:83:42:bb:a8:b9:50:12:0a:fe:37:c2:01:
42:b0:dd:0a:cf:f5:17:bc:26:8c:c9:fb:27:07:05:af:be:64:
97:a6:21:ce:f6:b7:6f:91:33:54:ea:26:b2:35:48:03:b3:d5:
8e:57:d0:15:ca:00:19:c0:f5:ad:bc:00:e5:a7:2b:5c:52:ad:
bd:3d:fa:46:78:ee:47:14:de:f1:2b:80:9d:6a:a4:65:5b:b4:
d9:4d:1a:f2:85:65:ce:56:60:87:27:4b:9e:ed:bb:11:8f:0d:
ab:fa:79:c3:ee:9f:5b:87:d6:95:73:40:86:dc:2e:b9:e6:37:
78:fc:c8:53:03:f2:e6:72:92:37:89:a3:89:78:8c:d7:de:51:
ec:79:7d:de:71:8a:f6:15:2c:8c:ee:09:bf:cc:81:fb:15:cc:
d8:df:92:e4:c7:30:5b:95:01:20:89:bd:70:04:c9:b8:18:83:
34:89:5b:1d:3e:f8:d3:45:18:97:0e:c2:5b:82:2d:59:e6:ee:
c8:23:6b:6c:b0:15:41:5b:58:9a:15:61:e5:b7:d5:2a:4a:e0:
d3:d8:35:54
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQeZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDM1NjE3WhcNMjYwMTAzMDM1NjE3WjAYMRYw
FAYDVQQDEw02Nzg3MzFlNC1mNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArFCEc35bKAIDziQIGpzkcdS+vbQsnAXD+jtQrWcCYtc5skAv13mOBFCb
fp9sIzdrz4eFN4AfV1B8TlA6ihTk1jpgcMnbOgxj5jE0Bh04Tgt0a5wMHzSbupHf
mPNQxGTfA3SNqsA14mr80EI8kZoGIPXQT3ZreBUAnhSU8b6syzPAA5rRLs1tJLEz
xqgkh9zGMNtT6u4cFfRyEc287FeWf1v+5qHYyNIUllMqIoG9WgbZXcFcit5ISoq6
WcHlTk59B2SKHR6/l8LB8OoL5mXUQNFB8nVzyvGYhXzT5OE6+tz6JyEbEvtzCg+o
C7Bt7oVIejWxRT1s8hCS0h3z1ahEGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAZy
Kyx2UDroiJB+2bXVrDfletQHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BREZBOEZFNkQyRjQxMUVGQTQ0QkU1ODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlyMA0GCSqGSIb3DQEBCwUA
A4IBAQCtQHjuBAI/mjYLU6Mc+NLv6L2TE0QQJRNUOo2Ay2Q3CFVPM+xEpTUvuCiD
QruouVASCv43wgFCsN0Kz/UXvCaMyfsnBwWvvmSXpiHO9rdvkTNU6iayNUgDs9WO
V9AVygAZwPWtvADlpytcUq29PfpGeO5HFN7xK4CdaqRlW7TZTRryhWXOVmCHJ0ue
7bsRjw2r+nnD7p9bh9aVc0CG3C655jd4/MhTA/LmcpI3iaOJeIzX3lHseX3ecYr2
FSyM7gm/zIH7FczY35LkxzBblQEgib1wBMm4GIM0iVsdPvjTRRiXDsJbgi1Z5u7I
I2tssBVBW1iaFWHlt9UqSuDT2DVU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:42 2025 by rpki-client