Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E041BCCD2311EFA516C889762E951A.roa
File: C1E041BCCD2311EFA516C889762E951A.roa (raw, json)
Hash identifier: IlpU+e3WvEUe/EIOC/v+1tvPy/Wgx3y/KJ3pMN92eBQ=
Subject key identifier: DC:B0:36:86:EB:CB:68:A4:93:47:D3:D5:4C:BC:F3:82:19:F6:68:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E041BCCD2311EFA516C889762E951A.roa
Signing time: Tue 07 Jan 2025 18:18:13 +0000
ROA not before: Tue 07 Jan 2025 18:18:10 +0000
ROA not after: Sat 13 Dec 2025 18:18:10 +0000
asID: 984
IP address blocks: 156.241.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64905 (0xfd89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:18:10 2025 GMT
Not After : Dec 13 18:18:10 2025 GMT
Subject: CN=677d6fe5-8dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:e1:c5:aa:da:82:6d:a1:b9:68:a5:1a:2a:
cb:e0:d8:82:0b:d8:03:ed:65:0f:9e:e3:4b:23:ea:
43:13:5b:33:4f:b8:77:b8:c7:9a:f4:37:dd:13:e2:
c3:84:3b:19:11:31:75:17:7a:2e:a9:48:a8:b6:a7:
40:d6:05:1f:61:cf:e4:b7:c7:08:81:04:ba:e4:a6:
9c:bb:e4:fb:af:58:a2:26:7c:d8:4f:62:a1:5e:a2:
1b:93:71:db:2f:c3:db:b4:9b:49:35:14:9f:cd:b8:
65:92:27:57:a3:82:0c:b3:43:14:05:cb:81:01:a7:
fb:96:d8:67:c3:cc:39:8c:43:16:fe:0e:60:f7:63:
89:47:69:52:2d:e9:d0:15:c0:48:7c:ee:73:fd:43:
a7:90:4b:18:62:f5:8e:ce:85:fa:15:4f:9f:2e:1c:
9d:f1:92:58:4f:27:fa:1c:f8:88:e2:c2:1b:1a:fa:
c6:4a:ef:37:29:2c:41:64:c9:36:69:66:06:a7:30:
35:e2:c1:5a:5c:2f:48:c3:b8:e7:24:8e:73:70:65:
58:7c:54:55:31:9e:a0:4f:6f:f2:83:82:3c:73:b2:
5d:b3:d2:11:58:e2:b0:42:67:8a:f6:c1:5a:ac:ef:
c6:e2:d7:e4:8f:4e:e7:54:22:03:71:08:5d:60:ff:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B0:36:86:EB:CB:68:A4:93:47:D3:D5:4C:BC:F3:82:19:F6:68:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1E041BCCD2311EFA516C889762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.207.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bf:b5:d8:c2:06:50:5c:81:8c:aa:32:7a:e2:66:c1:e9:7d:
cf:ad:47:ce:54:f0:d3:3d:cd:6f:04:da:fd:a1:fb:ab:02:4a:
11:27:7c:dc:93:ba:df:58:cf:8e:8c:e1:42:6c:7d:40:ef:e9:
c1:c4:68:5f:40:99:38:33:4f:89:90:df:16:75:32:51:e7:ec:
97:dc:26:13:6b:b5:a3:08:0f:11:d9:78:e3:6e:b7:73:5c:0f:
1b:8b:a3:f0:fc:d5:cf:4c:97:ca:2d:04:9d:46:8c:f3:34:3a:
3c:14:2c:24:3d:c2:eb:31:c9:b5:d1:8d:6a:47:2e:2c:72:ed:
a3:7b:78:07:b2:ea:c4:82:95:e3:e8:d1:83:3e:c9:fa:34:48:
d9:b7:06:61:47:ef:3f:48:fe:5e:80:93:87:5c:2c:a0:6e:ca:
47:fc:3f:9d:b7:82:29:69:12:74:2c:79:e9:09:5f:76:9d:3c:
91:b9:cb:c7:4d:fd:36:f5:60:5c:90:1c:94:0c:24:4a:c1:88:
f4:98:78:7d:65:eb:ca:11:a0:b6:e3:a2:04:96:a0:4f:aa:53:
6a:10:ba:2b:20:0a:34:94:98:ec:91:b4:23:4a:0b:d2:e4:c2:
f7:d1:aa:8f:d2:b6:c5:3e:42:fb:6e:39:5f:77:a8:69:97:b8:
7d:0a:d3:d8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP2JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTgxODEwWhcNMjUxMjEzMTgxODEwWjAYMRYw
FAYDVQQDEw02NzdkNmZlNS04ZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Mfhxaragm2huWilGirL4NiCC9gD7WUPnuNLI+pDE1szT7h3uMea9Dfd
E+LDhDsZETF1F3ouqUiotqdA1gUfYc/kt8cIgQS65Kacu+T7r1iiJnzYT2KhXqIb
k3HbL8PbtJtJNRSfzbhlkidXo4IMs0MUBcuBAaf7lthnw8w5jEMW/g5g92OJR2lS
LenQFcBIfO5z/UOnkEsYYvWOzoX6FU+fLhyd8ZJYTyf6HPiI4sIbGvrGSu83KSxB
ZMk2aWYGpzA14sFaXC9Iw7jnJI5zcGVYfFRVMZ6gT2/yg4I8c7Jds9IRWOKwQmeK
9sFarO/G4tfkj07nVCIDcQhdYP+EEQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNyw
Nobry2ikk0fT1Uy884IZ9mj+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMUUwNDFCQ0NEMjMxMUVGQTUxNkM4ODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHPMA0GCSqGSIb3DQEBCwUA
A4IBAQAkv7XYwgZQXIGMqjJ64mbB6X3PrUfOVPDTPc1vBNr9ofurAkoRJ3zck7rf
WM+OjOFCbH1A7+nBxGhfQJk4M0+JkN8WdTJR5+yX3CYTa7WjCA8R2XjjbrdzXA8b
i6Pw/NXPTJfKLQSdRozzNDo8FCwkPcLrMcm10Y1qRy4scu2je3gHsurEgpXj6NGD
Psn6NEjZtwZhR+8/SP5egJOHXCygbspH/D+dt4IpaRJ0LHnpCV92nTyRucvHTf02
9WBckByUDCRKwYj0mHh9ZevKEaC246IElqBPqlNqELorIAo0lJjskbQjSgvS5ML3
0aqP0rbFPkL7bjlfd6hpl7h9CtPY
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:41 2025 by rpki-client