Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3868DC4CCC811EFB182854C762E951A.roa
File: C3868DC4CCC811EFB182854C762E951A.roa (raw, json)
Hash identifier: uerSXjnDuQUkur8yIVfEpAY/JnbmR1rJopiNBS/K56s=
Subject key identifier: B2:23:68:1D:D2:50:EB:F8:4B:94:5C:1C:4C:66:39:31:7E:E2:7D:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3868DC4CCC811EFB182854C762E951A.roa
Signing time: Tue 07 Jan 2025 07:26:52 +0000
ROA not before: Tue 07 Jan 2025 07:26:48 +0000
ROA not after: Sat 13 Dec 2025 07:26:48 +0000
asID: 984
IP address blocks: 156.233.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64102 (0xfa66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 07:26:48 2025 GMT
Not After : Dec 13 07:26:48 2025 GMT
Subject: CN=677cd73c-4feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:f7:ac:b7:c3:2c:f2:da:db:05:f5:27:1e:
31:cb:91:4e:0d:f7:00:8c:29:2b:ef:e3:b0:af:b4:
0f:93:8a:8b:41:17:bf:66:be:19:87:4b:16:36:28:
26:ff:23:e1:0c:ca:16:8d:6d:a9:ec:05:c4:9c:a4:
8e:ff:c1:d3:a6:6f:b1:0e:3e:71:ac:86:a4:b1:03:
89:7a:c7:29:2d:fd:a1:1a:9c:6b:ff:b3:b3:88:70:
0d:d7:66:a2:3f:d6:ce:ef:69:bb:dd:0a:8e:6f:ab:
0c:41:fa:fa:00:67:65:eb:d6:a7:de:da:ac:ee:5c:
03:c2:39:4b:2c:d5:7d:2e:ec:ae:a8:83:fe:75:8e:
39:ab:05:0b:a7:96:18:27:80:f2:80:2f:96:9a:d2:
87:60:23:ae:a1:43:6c:b7:ef:8f:78:17:18:a8:e1:
a3:4e:95:7d:c4:8c:48:2c:b9:04:5f:43:e4:fb:80:
bc:87:4c:27:f1:32:4f:90:88:92:b1:4a:e1:af:45:
fa:e5:00:9e:f6:35:d3:63:3b:12:d3:03:37:34:64:
00:10:16:4a:f6:aa:22:e3:45:ed:a4:5c:13:ff:26:
58:cb:0a:be:46:35:0f:c8:6b:f5:e8:dd:47:1b:1d:
30:d8:ac:f4:b9:3c:8a:32:0b:c9:f4:7d:d6:63:be:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:68:1D:D2:50:EB:F8:4B:94:5C:1C:4C:66:39:31:7E:E2:7D:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3868DC4CCC811EFB182854C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.77.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f1:8b:c9:0e:8c:b7:b3:eb:95:56:dd:d4:10:2c:a9:66:32:
14:53:1c:17:0c:17:38:25:a2:78:34:0e:5c:60:43:b6:0b:29:
c8:ae:f5:39:c7:be:a2:af:c4:8d:6e:a6:6f:64:63:66:01:06:
f2:fa:d9:7b:ec:f9:e8:55:e1:34:29:4d:c9:ad:73:38:7a:f4:
18:09:83:fd:eb:63:a8:6e:74:b3:9e:db:ea:24:b5:6c:0e:fd:
4a:d0:d0:85:36:8a:a2:52:6c:d5:50:69:f3:d1:8c:ac:95:22:
97:59:b3:81:ee:4a:c8:be:ac:3b:4b:a8:b8:ea:dc:8b:6d:ee:
1e:d5:0c:28:39:7e:ba:72:ce:21:85:06:d5:99:d1:42:45:b0:
4b:a6:c9:bf:e4:91:f6:03:7c:29:40:dc:a3:0b:2c:0a:d0:38:
88:dc:bc:1f:c9:d1:3e:a9:68:a4:43:bf:8d:8d:ad:f2:37:f9:
2b:05:5a:25:6c:16:54:d5:3e:f8:f4:3d:bc:18:8b:1f:25:56:
90:83:b1:c5:e1:76:b5:95:f8:b5:ef:53:a1:e0:47:8a:f9:a9:
0b:93:30:94:10:35:6c:ff:c4:5c:a7:e5:82:7f:da:a4:dd:db:
05:ef:46:14:07:23:25:8e:02:ec:95:22:46:77:59:9c:0b:20:
39:dd:d5:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPpmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDcyNjQ4WhcNMjUxMjEzMDcyNjQ4WjAYMRYw
FAYDVQQDEw02NzdjZDczYy00ZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0/H3rLfDLPLa2wX1Jx4xy5FODfcAjCkr7+Owr7QPk4qLQRe/Zr4Zh0sW
Nigm/yPhDMoWjW2p7AXEnKSO/8HTpm+xDj5xrIaksQOJescpLf2hGpxr/7OziHAN
12aiP9bO72m73QqOb6sMQfr6AGdl69an3tqs7lwDwjlLLNV9LuyuqIP+dY45qwUL
p5YYJ4DygC+WmtKHYCOuoUNst++PeBcYqOGjTpV9xIxILLkEX0Pk+4C8h0wn8TJP
kIiSsUrhr0X65QCe9jXTYzsS0wM3NGQAEBZK9qoi40XtpFwT/yZYywq+RjUPyGv1
6N1HGx0w2Kz0uTyKMgvJ9H3WY75W3wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLIj
aB3SUOv4S5RcHExmOTF+4n3XMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMzg2OERDNENDQzgxMUVGQjE4Mjg1NEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlNMA0GCSqGSIb3DQEBCwUA
A4IBAQCF8YvJDoy3s+uVVt3UECypZjIUUxwXDBc4JaJ4NA5cYEO2CynIrvU5x76i
r8SNbqZvZGNmAQby+tl77PnoVeE0KU3JrXM4evQYCYP962OobnSzntvqJLVsDv1K
0NCFNoqiUmzVUGnz0YyslSKXWbOB7krIvqw7S6i46tyLbe4e1QwoOX66cs4hhQbV
mdFCRbBLpsm/5JH2A3wpQNyjCywK0DiI3LwfydE+qWikQ7+Nja3yN/krBVolbBZU
1T749D28GIsfJVaQg7HF4Xa1lfi171Oh4EeK+akLkzCUEDVs/8Rcp+WCf9qk3dsF
70YUByMljgLslSJGd1mcCyA53dVO
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:39 2025 by rpki-client