Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFDDF580CEF711EFB426C3B9762E951A.roa
File: DFDDF580CEF711EFB426C3B9762E951A.roa (raw, json)
Hash identifier: QqVbzUH2CFVinvWNkPg+Fl8U7qYLYKgFFsrLphXO86A=
Subject key identifier: 7A:93:6A:30:0D:A8:71:01:AD:97:77:CC:EB:24:6F:56:94:2D:8E:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01049B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFDDF580CEF711EFB426C3B9762E951A.roa
Signing time: Fri 10 Jan 2025 02:09:08 +0000
ROA not before: Fri 10 Jan 2025 02:09:04 +0000
ROA not after: Thu 13 Feb 2025 02:09:04 +0000
asID: 395793
IP address blocks: 156.228.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66715 (0x1049b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 02:09:04 2025 GMT
Not After : Feb 13 02:09:04 2025 GMT
Subject: CN=67808144-e5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:11:56:77:6f:62:03:0a:83:3d:62:1f:cd:
40:0b:58:a7:41:7a:09:55:04:1c:10:c3:7c:bc:29:
1f:dc:5b:16:85:36:b0:0c:04:a7:06:64:af:b2:a4:
79:e2:77:63:43:b4:04:de:51:9d:ec:ee:4d:52:c2:
a3:42:fa:3f:13:1e:aa:60:b5:d0:e7:e3:8f:c8:f3:
63:72:1e:e0:db:fa:ae:72:4a:11:05:bd:6d:00:f3:
8f:8d:15:53:cc:4f:cb:86:a0:34:ee:59:e4:75:2f:
07:a9:9a:47:52:e3:78:79:9c:3e:45:fc:4e:b4:0d:
00:0a:6d:48:7b:09:30:25:d8:20:15:f0:ac:32:8e:
a3:1b:01:92:54:90:0b:0d:e8:47:f8:92:7b:5d:0f:
8c:f5:86:9b:e2:59:aa:ac:a9:70:ac:5f:76:8a:8b:
14:c8:f4:89:b8:34:05:a1:c3:da:e6:8a:be:2f:22:
e0:fc:49:d5:be:90:2c:f5:49:a3:97:84:ee:ee:7c:
4a:3d:a5:a4:2b:f9:3a:ac:ac:94:52:5c:c4:a2:cf:
f6:6d:9f:b1:b2:a5:7d:6a:4c:4d:17:1f:5e:5b:d4:
8b:7a:b4:6b:70:b5:6c:64:11:79:bb:bf:aa:da:ad:
71:3d:b1:53:40:12:e8:d9:25:79:4d:3d:28:b7:5c:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:6A:30:0D:A8:71:01:AD:97:77:CC:EB:24:6F:56:94:2D:8E:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFDDF580CEF711EFB426C3B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7e:a3:93:e2:cb:92:a8:28:39:cd:e2:25:9f:bd:0a:51:e5:
0b:e0:af:57:0f:2f:08:f0:ff:cd:61:da:83:09:84:d5:f2:10:
02:31:d6:bf:bd:63:2e:61:02:ac:82:e9:d7:3f:e8:2d:6e:e0:
0f:5a:40:99:71:d6:77:22:c0:06:9f:61:1f:aa:49:8d:08:db:
c9:7a:1b:03:de:4a:51:fd:28:80:64:20:7f:70:8c:d2:6d:cb:
cf:4b:af:16:48:a6:c6:c6:84:83:c5:6f:54:eb:be:ca:60:bc:
34:00:eb:6a:86:83:a2:79:9d:d6:b6:a2:84:a3:ca:cf:c3:83:
26:78:82:c8:78:fd:9f:2d:80:18:97:85:76:20:1d:13:0a:b7:
07:f9:df:09:d5:3a:ee:ae:c5:d6:61:e5:11:e6:67:b9:af:a5:
d6:1d:95:76:75:dd:9d:25:a4:51:3c:29:06:9f:27:a0:17:95:
3d:55:47:c2:21:b1:75:40:65:eb:7f:dc:5f:28:58:1b:e5:ae:
59:91:96:b5:9d:be:7e:82:4b:8c:22:f5:3e:b3:08:08:35:66:
19:50:f8:60:50:cc:db:4f:24:ce:9e:fa:ee:b5:80:4e:c9:99:
9f:4e:6d:9e:81:e2:0a:fd:86:cf:c1:b6:bd:cd:ba:27:e3:ea:
d7:10:93:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQSbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMDIwOTA0WhcNMjUwMjEzMDIwOTA0WjAYMRYw
FAYDVQQDEw02NzgwODE0NC1lNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlX4RVndvYgMKgz1iH81AC1inQXoJVQQcEMN8vCkf3FsWhTawDASnBmSv
sqR54ndjQ7QE3lGd7O5NUsKjQvo/Ex6qYLXQ5+OPyPNjch7g2/quckoRBb1tAPOP
jRVTzE/LhqA07lnkdS8HqZpHUuN4eZw+RfxOtA0ACm1IewkwJdggFfCsMo6jGwGS
VJALDehH+JJ7XQ+M9Yab4lmqrKlwrF92iosUyPSJuDQFocPa5oq+LyLg/EnVvpAs
9Umjl4Tu7nxKPaWkK/k6rKyUUlzEos/2bZ+xsqV9akxNFx9eW9SLerRrcLVsZBF5
u7+q2q1xPbFTQBLo2SV5TT0ot1zsxwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHqT
ajANqHEBrZd3zOskb1aULY4sMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERkRERjU4MENFRjcxMUVGQjQyNkMzQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQPMA0GCSqGSIb3DQEBCwUA
A4IBAQBjfqOT4suSqCg5zeIln70KUeUL4K9XDy8I8P/NYdqDCYTV8hACMda/vWMu
YQKsgunXP+gtbuAPWkCZcdZ3IsAGn2EfqkmNCNvJehsD3kpR/SiAZCB/cIzSbcvP
S68WSKbGxoSDxW9U677KYLw0AOtqhoOieZ3WtqKEo8rPw4MmeILIeP2fLYAYl4V2
IB0TCrcH+d8J1TrursXWYeUR5me5r6XWHZV2dd2dJaRRPCkGnyegF5U9VUfCIbF1
QGXrf9xfKFgb5a5ZkZa1nb5+gkuMIvU+swgINWYZUPhgUMzbTyTOnvrutYBOyZmf
Tm2egeIK/YbPwba9zbon4+rXEJPq
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:45 2025 by rpki-client