Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD7819C8CF2B11EF88F6BC8C762E951A.roa
File: CD7819C8CF2B11EF88F6BC8C762E951A.roa (raw, json)
Hash identifier: ZunvBr9NHoveNuAQXPCLZQaVhJDLXY7DSdrUOqR7T/A=
Subject key identifier: A9:4E:39:87:23:BB:8D:9D:D1:18:F8:42:0D:A3:71:7C:CB:F3:77:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010511
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD7819C8CF2B11EF88F6BC8C762E951A.roa
Signing time: Fri 10 Jan 2025 08:20:51 +0000
ROA not before: Fri 10 Jan 2025 08:20:47 +0000
ROA not after: Sat 22 Mar 2025 08:20:47 +0000
asID: 142286
IP address blocks: 156.225.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66833 (0x10511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 08:20:47 2025 GMT
Not After : Mar 22 08:20:47 2025 GMT
Subject: CN=6780d863-a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:63:91:f1:3a:bd:3c:ec:79:04:e1:38:14:
f0:8e:66:43:4a:61:55:0c:f8:b8:50:a8:64:bf:1e:
04:da:35:16:7e:22:04:d1:5a:f1:1b:b1:7d:c2:d6:
38:c4:e1:2f:88:77:77:6e:b6:2e:4e:b4:fa:b4:1d:
22:32:ed:0e:53:56:63:66:e7:ac:10:00:7b:ca:8a:
e0:d1:b1:96:b8:64:3a:a9:d9:01:dd:54:3a:b2:7a:
91:dc:f2:4a:be:cb:a6:97:09:cc:42:b8:4f:ed:96:
8e:3f:eb:74:c3:f9:d5:a5:ca:c2:c1:cc:e9:a2:86:
d3:8c:63:eb:6e:a9:96:95:05:00:a6:fc:37:a2:15:
98:8b:63:92:63:a1:80:4d:b2:58:45:7b:51:36:8a:
d7:70:51:1b:fe:97:0c:ce:85:82:3f:ce:30:57:e1:
52:75:16:9c:2e:96:99:5a:36:56:49:67:4f:21:a3:
ba:8c:59:37:00:69:0e:a8:f7:01:58:f3:c6:79:32:
37:47:3d:33:b6:b1:f7:ae:e6:a7:d7:37:e6:28:92:
1f:7a:da:b3:93:dd:2c:6b:31:98:3c:28:93:9c:81:
d3:a0:c7:a3:f9:29:41:81:51:bb:63:33:3d:42:3b:
4e:a9:5f:11:52:3c:52:e2:49:7c:e8:13:82:09:0d:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:39:87:23:BB:8D:9D:D1:18:F8:42:0D:A3:71:7C:CB:F3:77:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD7819C8CF2B11EF88F6BC8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.132.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:56:31:b4:0c:5f:12:1e:29:10:d7:1d:a7:2c:50:1d:bd:02:
77:4e:35:a5:80:2c:a9:dd:26:0f:85:23:1b:45:1f:04:ca:a7:
96:81:8f:1e:12:d9:9b:63:2b:b4:3b:f5:c8:6e:84:8f:04:d2:
28:77:d1:58:5f:cf:01:92:a4:70:ce:09:05:76:59:42:fc:95:
76:ca:f8:c2:33:4c:87:7b:19:78:7f:5b:8d:d6:33:5d:5e:2c:
3e:8d:dc:8a:c5:ee:f9:c5:5f:80:9a:28:1b:09:26:c1:c4:f8:
61:f8:3c:90:06:c0:fc:ef:22:a1:85:59:d6:33:d5:5d:f6:02:
22:59:17:fc:17:fa:71:22:ef:62:18:e5:53:0f:f5:00:a8:87:
4c:e9:fd:0e:a1:8c:51:ff:08:9e:13:0b:26:21:3b:9f:6c:54:
e1:03:d7:6f:a7:10:b2:bf:47:f3:27:c9:d9:6a:49:73:18:26:
a5:36:53:a2:b4:90:c1:fb:04:ee:1b:26:67:24:89:75:15:dc:
94:11:cb:f5:dc:37:f2:98:55:7b:e3:b8:2f:4e:ea:5d:38:0c:
75:b9:54:ce:02:a1:db:86:25:95:e7:cf:4a:07:4f:99:47:20:
92:58:00:8d:48:76:1b:b9:70:6a:7b:b1:4a:15:cf:00:31:15:
f6:80:9e:84
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQURMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDgyMDQ3WhcNMjUwMzIyMDgyMDQ3WjAYMRYw
FAYDVQQDEw02NzgwZDg2My1hNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6hVjkfE6vTzseQThOBTwjmZDSmFVDPi4UKhkvx4E2jUWfiIE0VrxG7F9
wtY4xOEviHd3brYuTrT6tB0iMu0OU1ZjZuesEAB7yorg0bGWuGQ6qdkB3VQ6snqR
3PJKvsumlwnMQrhP7ZaOP+t0w/nVpcrCwczpoobTjGPrbqmWlQUApvw3ohWYi2OS
Y6GATbJYRXtRNorXcFEb/pcMzoWCP84wV+FSdRacLpaZWjZWSWdPIaO6jFk3AGkO
qPcBWPPGeTI3Rz0ztrH3ruan1zfmKJIfetqzk90sazGYPCiTnIHToMej+SlBgVG7
YzM9QjtOqV8RUjxS4kl86BOCCQ1mbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKlO
OYcju42d0Rj4Qg2jcXzL83flMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDc4MTlDOENGMkIxMUVGODhGNkJDOEM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOGEMA0GCSqGSIb3DQEBCwUA
A4IBAQCsVjG0DF8SHikQ1x2nLFAdvQJ3TjWlgCyp3SYPhSMbRR8EyqeWgY8eEtmb
Yyu0O/XIboSPBNIod9FYX88BkqRwzgkFdllC/JV2yvjCM0yHexl4f1uN1jNdXiw+
jdyKxe75xV+AmigbCSbBxPhh+DyQBsD87yKhhVnWM9Vd9gIiWRf8F/pxIu9iGOVT
D/UAqIdM6f0OoYxR/wieEwsmITufbFThA9dvpxCyv0fzJ8nZaklzGCalNlOitJDB
+wTuGyZnJIl1FdyUEcv13DfymFV747gvTupdOAx1uVTOAqHbhiWV589KB0+ZRyCS
WACNSHYbuXBqe7FKFc8AMRX2gJ6E
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:17 2025 by rpki-client