Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34C9BC0CCE311EFBC248178762E951A.roa
File: D34C9BC0CCE311EFBC248178762E951A.roa (raw, json)
Hash identifier: dAWKle6ksf2DOW1tScK++WbjrfoPHtbMzJXHjW7XOvs=
Subject key identifier: C0:B3:69:B1:69:93:27:B1:09:02:35:2A:56:8C:CF:AF:40:91:A2:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FBBB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34C9BC0CCE311EFBC248178762E951A.roa
Signing time: Tue 07 Jan 2025 10:40:35 +0000
ROA not before: Tue 07 Jan 2025 10:40:31 +0000
ROA not after: Mon 13 Dec 2027 10:40:31 +0000
asID: 17561
IP address blocks: 156.233.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64443 (0xfbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 10:40:31 2025 GMT
Not After : Dec 13 10:40:31 2027 GMT
Subject: CN=677d04a3-ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:a3:dc:aa:fa:04:32:fb:42:5a:e3:d4:63:
fd:1b:3c:59:d3:69:ce:47:da:7b:66:40:04:7c:8e:
82:c9:dd:ed:8b:74:6d:92:fa:0e:af:c0:df:01:4b:
34:c2:1e:37:ef:04:7c:eb:79:3d:38:74:92:4c:91:
ba:a6:76:ab:dd:f0:34:b9:29:3c:3f:d9:24:8c:65:
12:a0:8e:db:37:f0:c6:f9:15:9f:15:44:2e:6e:14:
08:fe:25:5c:3d:c4:7c:6b:4b:b9:05:e1:0a:4d:8f:
c1:2a:b3:24:12:6f:d3:f5:27:1f:c6:35:d9:b2:c1:
f6:48:d4:43:e6:3d:10:be:f3:3a:32:2e:2a:82:12:
ac:41:46:be:8e:e3:b7:18:00:5d:c3:90:7f:30:30:
06:0d:38:48:bb:26:ec:12:c8:62:e7:25:28:61:59:
18:f9:c2:44:7d:7e:f5:eb:cb:8b:38:0f:3f:bb:fc:
94:b8:2e:a2:42:20:e9:cd:94:c4:11:17:a2:e5:aa:
c8:10:71:93:87:4c:8c:b7:1c:85:95:0c:90:26:ca:
c4:94:50:c4:61:b6:a4:6e:03:25:69:ba:07:89:15:
87:68:cf:21:25:b4:a2:36:75:eb:93:6c:4e:3d:52:
5d:9f:46:e9:e2:df:97:70:52:21:17:a5:c0:e7:30:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:69:B1:69:93:27:B1:09:02:35:2A:56:8C:CF:AF:40:91:A2:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D34C9BC0CCE311EFBC248178762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.242.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7b:59:c0:0b:87:31:7b:4f:a3:08:25:c5:f5:05:f7:b9:fb:
8d:69:64:6a:3c:75:da:c7:45:71:3c:fe:d7:69:af:a5:02:00:
b3:5c:b8:ab:19:bd:61:eb:f4:66:5b:56:5a:08:a5:2e:b3:98:
4c:95:95:a2:5e:1a:db:d8:ce:4c:f3:91:ca:65:b8:4e:79:5e:
52:b7:14:97:5e:b5:e2:3d:4f:17:8b:74:80:97:64:bd:70:9d:
a4:7d:b0:bf:5c:f1:8a:19:68:65:6e:a4:9c:2c:57:3d:57:c6:
29:c6:db:61:a0:f9:46:ae:e4:6c:2f:ff:bb:b5:bd:0a:28:76:
f3:d3:38:07:38:ca:50:48:95:b8:bc:21:0a:a8:7c:7c:ee:25:
4a:e3:a8:9d:5d:1f:a2:ad:57:43:dd:5d:ef:d8:94:75:d1:da:
94:30:a4:36:9e:b3:be:38:b2:b0:cc:1f:19:2e:85:96:81:56:
40:f6:84:62:f1:92:61:2f:31:ac:e2:a3:4a:98:cd:33:43:09:
e8:fd:59:f6:f5:d9:f7:10:63:33:7e:7e:72:5a:be:a7:95:9e:
0b:ad:28:c5:03:8c:50:d5:8e:fc:a0:54:d1:28:3f:98:29:4f:
7b:5f:93:5f:88:bf:96:8f:5e:4a:6d:d5:86:04:36:3d:61:a7:
5a:35:34:e3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPu7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTA0MDMxWhcNMjcxMjEzMTA0MDMxWjAYMRYw
FAYDVQQDEw02NzdkMDRhMy1lY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr1ij3Kr6BDL7Qlrj1GP9GzxZ02nOR9p7ZkAEfI6Cyd3ti3RtkvoOr8Df
AUs0wh437wR863k9OHSSTJG6pnar3fA0uSk8P9kkjGUSoI7bN/DG+RWfFUQubhQI
/iVcPcR8a0u5BeEKTY/BKrMkEm/T9ScfxjXZssH2SNRD5j0QvvM6Mi4qghKsQUa+
juO3GABdw5B/MDAGDThIuybsEshi5yUoYVkY+cJEfX7168uLOA8/u/yUuC6iQiDp
zZTEERei5arIEHGTh0yMtxyFlQyQJsrElFDEYbakbgMlaboHiRWHaM8hJbSiNnXr
k2xOPVJdn0bp4t+XcFIhF6XA5zA9xwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMCz
abFpkyexCQI1KlaMz69AkaK9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMzRDOUJDMENDRTMxMUVGQkMyNDgxNzg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOnyMA0GCSqGSIb3DQEBCwUA
A4IBAQARe1nAC4cxe0+jCCXF9QX3ufuNaWRqPHXax0VxPP7Xaa+lAgCzXLirGb1h
6/RmW1ZaCKUus5hMlZWiXhrb2M5M85HKZbhOeV5StxSXXrXiPU8Xi3SAl2S9cJ2k
fbC/XPGKGWhlbqScLFc9V8YpxtthoPlGruRsL/+7tb0KKHbz0zgHOMpQSJW4vCEK
qHx87iVK46idXR+irVdD3V3v2JR10dqUMKQ2nrO+OLKwzB8ZLoWWgVZA9oRi8ZJh
LzGs4qNKmM0zQwno/Vn29dn3EGMzfn5yWr6nlZ4LrSjFA4xQ1Y78oFTRKD+YKU97
X5NfiL+Wj15KbdWGBDY9YadaNTTj
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:14 2025 by rpki-client