Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B16F81AECD8111EFB3100271762E951A.roa
File: B16F81AECD8111EFB3100271762E951A.roa (raw, json)
Hash identifier: v4xGeAOz56NTsQpGpk6S8/6kTlcJTe/I2KB10aeNoJ4=
Subject key identifier: 76:04:11:99:E5:AF:71:70:74:BF:7F:FA:91:74:90:9F:DF:BC:77:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010009
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B16F81AECD8111EFB3100271762E951A.roa
Signing time: Wed 08 Jan 2025 05:30:38 +0000
ROA not before: Wed 08 Jan 2025 05:30:35 +0000
ROA not after: Mon 13 Dec 2027 05:30:35 +0000
asID: 17561
IP address blocks: 156.252.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65545 (0x10009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 05:30:35 2025 GMT
Not After : Dec 13 05:30:35 2027 GMT
Subject: CN=677e0d7e-8d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:07:3c:bf:e5:b6:58:44:2a:f0:d7:db:83:
34:92:ce:91:8d:9d:25:a2:38:ee:99:17:f5:18:f6:
f0:62:04:9a:ca:a5:4e:76:f4:b2:8f:80:7d:4e:61:
5d:49:b9:53:1d:57:54:63:0e:35:87:0f:34:0d:6c:
06:df:47:3c:fe:5b:0e:b5:23:dd:d1:d5:49:01:07:
53:0f:a5:81:42:7f:ad:b0:8b:35:eb:c2:b4:b6:0b:
90:ea:da:78:c0:32:bc:c4:46:37:2b:d7:fe:14:db:
d5:44:c3:96:2b:be:ea:15:10:43:31:9d:66:01:c2:
bd:8f:f4:ba:bb:8f:e0:f0:6b:4c:ec:5b:de:17:3a:
e6:33:b6:14:e0:c4:51:25:fa:e4:42:fe:0f:1a:14:
0c:0f:79:b8:8a:55:1d:7a:1e:46:19:b9:d1:fa:02:
e5:6d:6f:89:04:8a:fe:16:11:c7:70:02:72:f7:a7:
cf:dd:35:17:a9:72:1f:de:2a:72:81:6b:fc:1b:cd:
46:ab:3c:84:cb:ac:48:d8:38:08:4f:07:d3:a3:29:
31:94:d4:b9:f4:b3:89:ff:f5:f8:80:2d:59:44:60:
a4:44:b6:59:94:d4:c3:39:6b:6a:cc:89:77:14:3c:
c6:15:13:94:f0:98:78:d0:28:2a:25:78:d9:21:c9:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:11:99:E5:AF:71:70:74:BF:7F:FA:91:74:90:9F:DF:BC:77:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B16F81AECD8111EFB3100271762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:eb:6e:3e:57:f1:42:6f:22:fa:65:a7:cb:17:5d:a9:de:34:
26:08:70:15:08:09:ef:63:1e:59:de:ae:d0:7e:8d:ec:87:fd:
a0:a0:5f:7d:f3:df:27:0c:eb:6a:4f:eb:be:ed:10:78:7e:49:
b8:65:39:d1:8d:c2:7c:b2:2f:c2:59:27:f1:90:e5:7b:cd:96:
8f:27:07:ee:75:5a:8c:1f:02:27:a9:39:2c:e2:c4:48:20:83:
70:ec:03:e6:e0:ed:cc:d4:b9:fc:f2:7f:8c:1f:7d:52:6b:ec:
b4:c3:e1:88:86:ab:91:06:36:29:ff:31:1b:fc:39:33:f2:ef:
51:83:25:54:65:e7:40:3b:73:50:43:48:33:ca:43:b0:d0:9d:
94:c8:77:6b:f9:f4:50:31:18:73:99:4c:1f:2b:c1:3d:44:b6:
c5:c8:f8:67:04:d0:d1:7e:25:34:f1:c6:5c:6a:20:ad:d1:be:
41:0e:4c:84:28:0f:99:c2:b1:e8:04:d6:25:b0:11:7d:ba:11:
5f:13:b9:c7:4f:4d:02:45:d3:b8:69:2d:bc:ca:92:f7:8a:75:
ab:44:e7:70:29:21:db:a4:79:70:f2:53:18:6b:36:1c:f4:18:
a9:ec:fe:0c:4c:5e:f8:43:bd:80:44:1b:e6:20:df:7c:b0:08:
6c:a2:8b:a8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQAJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDUzMDM1WhcNMjcxMjEzMDUzMDM1WjAYMRYw
FAYDVQQDEw02NzdlMGQ3ZS04ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmFEHPL/ltlhEKvDX24M0ks6RjZ0lojjumRf1GPbwYgSayqVOdvSyj4B9
TmFdSblTHVdUYw41hw80DWwG30c8/lsOtSPd0dVJAQdTD6WBQn+tsIs168K0tguQ
6tp4wDK8xEY3K9f+FNvVRMOWK77qFRBDMZ1mAcK9j/S6u4/g8GtM7FveFzrmM7YU
4MRRJfrkQv4PGhQMD3m4ilUdeh5GGbnR+gLlbW+JBIr+FhHHcAJy96fP3TUXqXIf
3ipygWv8G81GqzyEy6xI2DgITwfToykxlNS59LOJ//X4gC1ZRGCkRLZZlNTDOWtq
zIl3FDzGFROU8Jh40CgqJXjZIcmQGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHYE
EZnlr3FwdL9/+pF0kJ/fvHeSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMTZGODFBRUNEODExMUVGQjMxMDAyNzE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwHMA0GCSqGSIb3DQEBCwUA
A4IBAQCk624+V/FCbyL6ZafLF12p3jQmCHAVCAnvYx5Z3q7Qfo3sh/2goF99898n
DOtqT+u+7RB4fkm4ZTnRjcJ8si/CWSfxkOV7zZaPJwfudVqMHwInqTks4sRIIINw
7APm4O3M1Ln88n+MH31Sa+y0w+GIhquRBjYp/zEb/Dkz8u9RgyVUZedAO3NQQ0gz
ykOw0J2UyHdr+fRQMRhzmUwfK8E9RLbFyPhnBNDRfiU08cZcaiCt0b5BDkyEKA+Z
wrHoBNYlsBF9uhFfE7nHT00CRdO4aS28ypL3inWrROdwKSHbpHlw8lMYazYc9Bip
7P4MTF74Q72ARBvmIN98sAhsoouo
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:00 2025 by rpki-client