Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA78C820C94211EF8DE18E61762E951A.roa
File: BA78C820C94211EF8DE18E61762E951A.roa (raw, json)
Hash identifier: b7aacPnEyzpyuC8bOgzz1kRZQzcbSjxjzlpSQ+TcIQU=
Subject key identifier: FA:DB:52:E6:EE:DC:4A:DA:8C:89:48:3A:B2:BA:B6:AC:5E:FE:27:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F33E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA78C820C94211EF8DE18E61762E951A.roa
Signing time: Thu 02 Jan 2025 19:49:51 +0000
ROA not before: Thu 02 Jan 2025 19:49:47 +0000
ROA not after: Sat 13 Dec 2025 19:49:47 +0000
asID: 984
IP address blocks: 156.224.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62270 (0xf33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 19:49:47 2025 GMT
Not After : Dec 13 19:49:47 2025 GMT
Subject: CN=6776edde-f1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:53:9a:78:8f:2f:3a:ac:7c:b3:57:53:58:
f3:3d:b2:48:9a:db:1e:ea:c0:19:5a:77:74:02:b0:
ff:23:cd:a5:40:cc:55:3e:71:50:54:75:25:fe:6b:
7a:31:c8:f2:66:7b:77:fe:1b:57:ff:9f:97:68:ce:
d0:a2:9d:09:2b:b7:6f:80:ad:b5:e4:3a:f7:d2:e0:
5c:08:dd:44:f8:f8:32:7d:3f:8a:ec:a2:ac:16:dc:
d9:df:ca:97:82:75:47:92:a4:74:48:f4:70:f1:13:
b9:a5:bd:c5:d3:f7:22:2a:c2:0d:08:c4:c1:ae:fa:
a6:89:bb:a2:bd:36:a3:18:e7:da:04:54:4e:c3:d5:
0b:f2:54:e8:a5:b3:5b:ce:a5:fc:2d:da:c8:d8:ad:
f2:82:0d:74:c8:2c:ac:ae:92:d6:69:8f:1e:ab:ae:
84:24:3a:1c:02:11:b1:e9:30:b8:c7:3f:8b:a0:c2:
17:0d:eb:83:40:9d:d2:a7:bb:55:62:5b:b4:05:97:
b3:94:94:01:b6:6a:9a:00:c9:d5:b9:8f:e6:26:46:
0d:61:0b:03:45:14:d6:08:a9:02:df:2b:d6:f9:69:
33:6e:37:d7:53:68:9d:81:2b:9d:fd:d6:29:4d:39:
8b:40:8f:40:e7:23:c2:8c:fa:ac:50:1e:4a:ad:28:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DB:52:E6:EE:DC:4A:DA:8C:89:48:3A:B2:BA:B6:AC:5E:FE:27:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA78C820C94211EF8DE18E61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:02:7b:01:02:9e:6c:63:ec:44:bc:81:52:ff:32:ae:11:37:
f8:d2:e2:b2:35:67:4f:61:7c:79:6a:37:9b:9e:de:45:d0:4c:
17:54:66:92:76:4d:11:67:42:26:24:c6:f8:8d:87:d7:6c:e0:
b4:69:77:8f:1f:f8:c9:71:70:b4:29:89:6a:0d:62:f4:97:a0:
09:fb:a4:2e:d2:41:92:30:8b:b2:12:63:39:b0:d5:76:fb:94:
4c:f1:92:c3:86:23:35:de:f6:27:2a:34:aa:27:06:7c:a4:64:
10:9c:7e:46:74:2e:85:37:2a:a0:55:d2:df:b9:0a:c6:ea:46:
ba:84:f3:74:e8:89:2d:90:00:89:dc:51:30:76:a0:e0:ea:d2:
fe:30:81:1c:f9:a8:db:93:c1:df:0a:94:fe:19:bf:0f:29:80:
a4:4a:0e:cd:04:f3:2d:38:9e:ce:ab:30:1f:a8:87:0c:e4:41:
ba:c5:4a:b7:7c:0d:98:39:c4:6c:6b:d1:08:ed:1a:90:4a:f4:
10:19:01:9a:99:79:34:e7:79:52:79:47:52:ae:e4:d6:bc:de:
5a:7d:b0:b2:75:61:e0:7a:d0:94:4f:33:4d:b8:06:f5:cd:cd:
0e:16:b1:4a:b2:76:30:1d:bd:8a:6a:f7:e7:ea:9a:20:04:be:
c3:cd:51:fa
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPM+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMTk0OTQ3WhcNMjUxMjEzMTk0OTQ3WjAYMRYw
FAYDVQQDEw02Nzc2ZWRkZS1mMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyz5TmniPLzqsfLNXU1jzPbJImtse6sAZWnd0ArD/I82lQMxVPnFQVHUl
/mt6McjyZnt3/htX/5+XaM7Qop0JK7dvgK215Dr30uBcCN1E+PgyfT+K7KKsFtzZ
38qXgnVHkqR0SPRw8RO5pb3F0/ciKsINCMTBrvqmibuivTajGOfaBFROw9UL8lTo
pbNbzqX8LdrI2K3ygg10yCysrpLWaY8eq66EJDocAhGx6TC4xz+LoMIXDeuDQJ3S
p7tVYlu0BZezlJQBtmqaAMnVuY/mJkYNYQsDRRTWCKkC3yvW+WkzbjfXU2idgSud
/dYpTTmLQI9A5yPCjPqsUB5KrSie5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPrb
Uubu3ErajIlIOrK6tqxe/ierMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTc4QzgyMEM5NDIxMUVGOERFMThFNjE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOBYMA0GCSqGSIb3DQEBCwUA
A4IBAQAMAnsBAp5sY+xEvIFS/zKuETf40uKyNWdPYXx5ajebnt5F0EwXVGaSdk0R
Z0ImJMb4jYfXbOC0aXePH/jJcXC0KYlqDWL0l6AJ+6Qu0kGSMIuyEmM5sNV2+5RM
8ZLDhiM13vYnKjSqJwZ8pGQQnH5GdC6FNyqgVdLfuQrG6ka6hPN06IktkACJ3FEw
dqDg6tL+MIEc+ajbk8HfCpT+Gb8PKYCkSg7NBPMtOJ7OqzAfqIcM5EG6xUq3fA2Y
OcRsa9EI7RqQSvQQGQGamXk053lSeUdSruTWvN5afbCydWHgetCUTzNNuAb1zc0O
FrFKsnYwHb2Kavfn6pogBL7DzVH6
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:08 2025 by rpki-client