Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D3EFB4CCD511EFA274F49F762E951A.roa
File: D0D3EFB4CCD511EFA274F49F762E951A.roa (raw, json)
Hash identifier: WmewA7NjSUKIEUgttwA19hPK64BKXUyTLVOSamzgsCc=
Subject key identifier: 89:F6:75:01:46:5D:90:6A:37:F5:C5:0E:4F:1E:F2:4B:5C:40:A4:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D3EFB4CCD511EFA274F49F762E951A.roa
Signing time: Tue 07 Jan 2025 09:00:17 +0000
ROA not before: Tue 07 Jan 2025 09:00:14 +0000
ROA not after: Sat 13 Dec 2025 09:00:14 +0000
asID: 984
IP address blocks: 156.233.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64257 (0xfb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:00:14 2025 GMT
Not After : Dec 13 09:00:14 2025 GMT
Subject: CN=677ced21-a76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:2d:a6:5e:df:dc:ea:54:b5:5a:7c:5f:bb:
a2:9a:d9:ac:f1:d0:36:da:33:7a:f7:24:f6:40:ea:
37:d6:05:a8:d8:9f:08:54:77:18:38:d6:0d:b3:f9:
d4:ab:cc:2f:d6:8c:8a:f4:5c:1b:57:da:32:96:84:
70:81:f5:d5:91:9e:a3:e9:11:52:c5:0b:61:4b:79:
10:d6:83:a7:57:cf:6d:99:1b:8e:b1:a2:74:7f:45:
70:f0:c3:27:b9:ef:59:b2:d5:3f:9b:33:47:a5:83:
e3:45:af:a0:ea:04:b7:d5:77:b5:77:9c:5d:9c:bf:
08:33:9a:3c:56:18:51:71:52:5e:a4:ae:d3:18:27:
44:2f:89:f6:90:2e:89:e1:4c:22:63:10:6a:88:40:
70:b0:a5:2f:65:e1:29:c3:4e:13:42:ff:42:52:a3:
5e:73:09:38:17:ce:36:a8:8b:df:0d:fb:cd:28:f1:
dc:c3:0a:ca:51:89:07:97:d6:a1:e9:9a:99:d0:dd:
8f:37:fa:75:8c:b3:52:b6:fa:96:ee:58:a5:87:62:
ed:57:c2:56:93:4b:e5:bc:9a:31:ef:6f:37:25:d3:
be:86:94:19:07:fe:f1:af:c1:43:3c:67:4b:1f:19:
b3:98:80:b5:f2:ff:f7:8e:8c:a1:f5:4f:dd:4d:8d:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:75:01:46:5D:90:6A:37:F5:C5:0E:4F:1E:F2:4B:5C:40:A4:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0D3EFB4CCD511EFA274F49F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.174.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5f:60:72:00:30:f8:5d:0f:55:d0:82:03:fd:30:10:ac:21:
92:aa:4a:26:79:3c:c7:d5:6f:09:02:d3:ac:fe:3b:49:2a:fd:
e1:17:f7:8a:47:60:1b:e3:df:5a:08:99:81:85:8c:15:bb:e0:
3f:ef:e5:03:bf:b6:6f:30:ef:6d:cf:48:5d:e3:7f:95:d8:4a:
b3:8b:dc:90:00:a4:06:48:36:32:22:c7:b8:91:15:db:82:34:
fb:6a:ab:67:f2:87:cd:10:ea:19:7e:8f:a5:31:4e:37:39:f0:
7e:f9:1d:7e:8e:bb:53:4b:33:55:ab:0b:69:00:24:e5:8f:8d:
b1:6d:a2:0e:98:c2:61:3f:89:e5:6f:78:88:bf:c8:b8:06:ea:
b1:dd:92:7f:41:eb:6d:12:0f:e2:f6:8c:80:26:58:f2:1f:a5:
87:19:28:0f:ad:03:37:3a:b8:49:fb:4f:6a:aa:28:ca:c5:b3:
99:a3:25:15:ab:5b:fd:a2:24:24:41:b4:ac:6e:93:4b:de:06:
6d:40:f1:07:b9:e6:ee:39:8f:3c:3b:d6:34:b8:1b:5c:12:7d:
a0:ea:41:df:4c:1b:50:10:38:8e:4d:03:5e:61:9b:a8:e5:ae:
2c:f9:61:9e:06:52:a3:d0:9f:a4:2c:cb:48:10:8e:8e:ee:28:
3a:23:ac:6d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPsBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDkwMDE0WhcNMjUxMjEzMDkwMDE0WjAYMRYw
FAYDVQQDEw02NzdjZWQyMS1hNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl6stpl7f3OpUtVp8X7uimtms8dA22jN69yT2QOo31gWo2J8IVHcYONYN
s/nUq8wv1oyK9FwbV9oyloRwgfXVkZ6j6RFSxQthS3kQ1oOnV89tmRuOsaJ0f0Vw
8MMnue9ZstU/mzNHpYPjRa+g6gS31Xe1d5xdnL8IM5o8VhhRcVJepK7TGCdEL4n2
kC6J4UwiYxBqiEBwsKUvZeEpw04TQv9CUqNecwk4F842qIvfDfvNKPHcwwrKUYkH
l9ah6ZqZ0N2PN/p1jLNStvqW7lilh2LtV8JWk0vlvJox7283JdO+hpQZB/7xr8FD
PGdLHxmzmIC18v/3joyh9U/dTY1cIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIn2
dQFGXZBqN/XFDk8e8ktcQKRpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMEQzRUZCNENDRDUxMUVGQTI3NEY0OUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOmuMA0GCSqGSIb3DQEBCwUA
A4IBAQCHX2ByADD4XQ9V0IID/TAQrCGSqkomeTzH1W8JAtOs/jtJKv3hF/eKR2Ab
499aCJmBhYwVu+A/7+UDv7ZvMO9tz0hd43+V2Eqzi9yQAKQGSDYyIse4kRXbgjT7
aqtn8ofNEOoZfo+lMU43OfB++R1+jrtTSzNVqwtpACTlj42xbaIOmMJhP4nlb3iI
v8i4Buqx3ZJ/QettEg/i9oyAJljyH6WHGSgPrQM3OrhJ+09qqijKxbOZoyUVq1v9
oiQkQbSsbpNL3gZtQPEHuebuOY88O9Y0uBtcEn2g6kHfTBtQEDiOTQNeYZuo5a4s
+WGeBlKj0J+kLMtIEI6O7ig6I6xt
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:46 2025 by rpki-client