Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAB88D2AB5F611EF93C70D76762E951A.roa
File: BAB88D2AB5F611EF93C70D76762E951A.roa (raw, json)
Hash identifier: XuDEL1gt8bBiDu/PY6lMggQmI7Pw1qCEdGqlLXNcdNs=
Subject key identifier: E4:F8:D1:54:D1:06:C2:B2:24:36:F1:2B:5C:25:0D:8C:56:67:28:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E12C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAB88D2AB5F611EF93C70D76762E951A.roa
Signing time: Mon 09 Dec 2024 06:27:57 +0000
ROA not before: Mon 09 Dec 2024 06:27:53 +0000
ROA not after: Tue 03 Nov 2026 06:27:53 +0000
asID: 150706
IP address blocks: 156.254.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57644 (0xe12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 06:27:53 2024 GMT
Not After : Nov 3 06:27:53 2026 GMT
Subject: CN=67568ded-ed0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:ce:3f:57:e8:a2:70:51:56:4e:53:86:21:
1c:8d:64:8e:5c:31:60:a0:15:b7:3e:07:a6:4b:25:
e8:73:50:49:32:4f:04:9a:78:46:26:0b:d2:a1:fd:
e2:d9:8a:62:7f:81:36:4b:2f:e4:a6:bf:b0:df:bc:
bd:f9:04:73:4e:bb:94:bb:83:fb:d3:b6:b7:26:83:
70:60:d2:fa:d5:02:c8:33:ce:af:57:56:53:7c:ff:
73:ef:9d:4f:1f:df:48:b0:a8:51:8a:ec:53:7c:33:
5d:7a:91:38:98:a5:6f:23:79:2b:d0:26:96:7a:69:
e0:92:a8:3b:b6:fd:81:d4:65:2b:7e:b5:6f:ef:84:
1c:c1:76:3d:ec:81:1a:6a:6c:44:3c:12:10:b1:46:
0b:97:78:bf:02:f8:bc:8c:91:7e:06:7d:76:88:5a:
73:76:a7:71:ca:c2:bf:c2:3e:12:89:65:6a:7a:19:
24:cb:2a:19:96:f6:41:0c:9f:b6:b7:0f:06:5a:2e:
93:fe:4d:bc:84:07:00:7e:9b:65:0a:06:83:0a:12:
c0:b8:12:42:fe:24:da:29:85:c1:e8:0f:37:c0:88:
d5:b2:3e:1c:2d:c9:b3:21:7d:d2:08:48:03:bd:8a:
50:f5:24:ec:50:28:22:fc:68:58:c4:da:48:da:3f:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:D1:54:D1:06:C2:B2:24:36:F1:2B:5C:25:0D:8C:56:67:28:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAB88D2AB5F611EF93C70D76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:9a:0c:45:a3:4a:a8:4b:10:0f:f9:0b:d7:06:b0:d6:7f:4c:
c5:95:9a:20:b6:2d:00:41:c0:67:91:e2:06:64:38:21:71:61:
77:00:46:39:0a:9e:c8:38:4f:6a:86:b6:4e:d2:58:50:f8:ed:
cc:e1:97:d5:de:38:74:58:2a:6a:bc:5c:ed:ff:5f:81:8c:73:
08:31:d6:68:19:29:ae:a4:e8:58:98:9c:2f:07:42:37:3f:05:
4b:95:5c:bc:56:93:c3:3c:f5:70:7f:ba:24:4a:c2:00:c1:d3:
ab:57:c4:8d:bd:88:46:ba:db:ac:37:ca:96:c8:45:48:5f:72:
b5:9e:0b:15:ec:13:b2:6a:2c:18:54:ce:98:c4:28:cd:88:aa:
04:f4:11:f4:6e:b0:40:65:3c:d9:b2:68:0a:75:96:ae:d2:cb:
82:4e:da:e2:87:3c:1b:d2:9e:27:d9:d9:cf:ca:51:c7:c8:df:
e0:9f:30:02:d1:f2:ba:f8:ef:d1:e6:df:c1:6e:e1:75:0c:10:
5a:83:93:37:11:f2:33:32:8f:d7:aa:9e:98:49:54:e0:61:e5:
a0:49:27:99:61:7f:df:e6:da:6d:99:e3:cf:89:d0:d7:66:e6:
c2:65:fa:49:b3:73:dd:9c:1c:99:7f:62:5f:b0:b6:86:18:ed:
60:1f:b1:12
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOEsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA5MDYyNzUzWhcNMjYxMTAzMDYyNzUzWjAYMRYw
FAYDVQQDEw02NzU2OGRlZC1lZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt4/OP1foonBRVk5ThiEcjWSOXDFgoBW3PgemSyXoc1BJMk8EmnhGJgvS
of3i2Ypif4E2Sy/kpr+w37y9+QRzTruUu4P707a3JoNwYNL61QLIM86vV1ZTfP9z
751PH99IsKhRiuxTfDNdepE4mKVvI3kr0CaWemngkqg7tv2B1GUrfrVv74QcwXY9
7IEaamxEPBIQsUYLl3i/Avi8jJF+Bn12iFpzdqdxysK/wj4SiWVqehkkyyoZlvZB
DJ+2tw8GWi6T/k28hAcAfptlCgaDChLAuBJC/iTaKYXB6A83wIjVsj4cLcmzIX3S
CEgDvYpQ9STsUCgi/GhYxNpI2j+8SwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOT4
0VTRBsKyJDbxK1wlDYxWZyifMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQUI4OEQyQUI1RjYxMUVGOTNDNzBENzY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP5+MA0GCSqGSIb3DQEBCwUA
A4IBAQA9mgxFo0qoSxAP+QvXBrDWf0zFlZogti0AQcBnkeIGZDghcWF3AEY5Cp7I
OE9qhrZO0lhQ+O3M4ZfV3jh0WCpqvFzt/1+BjHMIMdZoGSmupOhYmJwvB0I3PwVL
lVy8VpPDPPVwf7okSsIAwdOrV8SNvYhGutusN8qWyEVIX3K1ngsV7BOyaiwYVM6Y
xCjNiKoE9BH0brBAZTzZsmgKdZau0suCTtrihzwb0p4n2dnPylHHyN/gnzAC0fK6
+O/R5t/BbuF1DBBag5M3EfIzMo/Xqp6YSVTgYeWgSSeZYX/f5tptmePPidDXZubC
ZfpJs3PdnByZf2JfsLaGGO1gH7ES
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:09 2025 by rpki-client