Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F26D704ACDA311EFAE402349762E951A.roa
File: F26D704ACDA311EFAE402349762E951A.roa (raw, json)
Hash identifier: /lPSepHBheAxZmSYqDWd4irviA5TqvVAH+jBpxiM5cI=
Subject key identifier: AB:80:81:86:5A:DD:69:3E:46:85:2A:C3:38:82:77:DB:FC:93:B2:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010109
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F26D704ACDA311EFAE402349762E951A.roa
Signing time: Wed 08 Jan 2025 09:35:50 +0000
ROA not before: Wed 08 Jan 2025 09:35:47 +0000
ROA not after: Sat 13 Dec 2025 09:35:47 +0000
asID: 984
IP address blocks: 156.253.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65801 (0x10109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:35:47 2025 GMT
Not After : Dec 13 09:35:47 2025 GMT
Subject: CN=677e46f6-0a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:e2:e0:1d:98:c4:d1:46:c5:62:b6:de:26:
8f:dd:30:02:60:24:8a:2e:4d:d5:9a:c5:30:bd:89:
c5:fe:42:d7:fe:81:8c:8a:3c:a0:08:db:56:9e:98:
3d:7a:d3:c5:50:80:1d:4c:52:aa:a0:ca:eb:cd:a7:
48:30:fb:c8:02:28:5e:f1:de:85:77:e6:3b:6c:fe:
cb:49:51:da:4b:0f:de:26:7d:73:cc:80:d2:0b:0e:
a0:ff:51:df:8f:e5:5d:d7:1a:ba:b4:bd:31:66:c5:
99:be:f5:ab:b4:f4:b4:66:52:3f:9a:41:50:02:58:
5c:c3:5a:e4:67:a7:b9:0e:d4:d3:95:40:0b:83:22:
8e:47:e1:59:e8:d1:7a:f1:3a:a4:c8:5f:e5:3e:67:
52:f6:8a:21:0b:c7:4f:04:3e:20:27:5d:a0:bd:a6:
11:18:a5:8c:24:ef:c0:85:37:77:56:f2:f8:68:ea:
87:61:12:bb:ae:d8:31:87:3f:12:28:c6:6b:56:73:
b3:79:db:67:13:5a:67:dd:53:e4:91:cb:ae:3c:79:
18:e8:16:7e:13:60:b5:e7:17:7c:82:ed:0e:61:18:
55:aa:fa:af:93:35:6a:82:67:64:a9:06:99:7a:b8:
16:92:11:67:c9:2d:61:da:96:0a:a8:81:2c:9d:5b:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:80:81:86:5A:DD:69:3E:46:85:2A:C3:38:82:77:DB:FC:93:B2:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F26D704ACDA311EFAE402349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:65:fe:c0:9c:d3:63:fe:bd:07:e1:1a:33:0f:63:59:fa:e0:
28:07:8e:61:45:4c:1d:0f:3b:a1:9c:7e:48:b1:c1:43:17:65:
53:20:82:39:20:d6:85:bd:13:97:f6:cd:ee:f0:2c:96:38:fb:
a9:68:30:22:98:b3:25:de:d8:3e:e4:0e:49:c6:78:71:98:b8:
95:1d:61:35:26:25:35:81:60:f4:57:6a:22:86:cf:a5:f1:1a:
ed:14:c0:a5:2a:72:d7:6c:99:25:ce:bd:6d:51:b4:85:94:2e:
35:2d:ca:91:01:e4:ca:24:bf:3c:3d:e4:dc:7f:43:68:40:55:
d0:43:73:f7:68:ab:69:ef:1a:25:af:da:76:1f:16:e8:cc:fa:
37:0d:d1:f2:4d:7a:5d:c4:1c:90:fb:89:d6:e7:3b:bf:d7:bd:
8c:9e:bf:22:a9:e6:4a:6f:96:a5:c1:03:3a:b1:43:0e:4e:9f:
0d:37:d0:04:90:ca:06:7d:c0:36:3a:e0:90:48:32:61:f2:4f:
26:9c:3e:2d:ce:4b:fb:e7:fd:41:31:87:f3:4e:c1:33:e1:84:
de:84:65:f3:36:1b:dd:2e:6a:1d:c4:fd:99:57:fd:d6:ff:f3:
ec:0e:01:54:1a:69:4a:66:1a:b5:17:fc:81:e9:31:fb:cc:53:
7b:18:98:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQEJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDkzNTQ3WhcNMjUxMjEzMDkzNTQ3WjAYMRYw
FAYDVQQDEw02NzdlNDZmNi0wYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxd/i4B2YxNFGxWK23iaP3TACYCSKLk3VmsUwvYnF/kLX/oGMijygCNtW
npg9etPFUIAdTFKqoMrrzadIMPvIAihe8d6Fd+Y7bP7LSVHaSw/eJn1zzIDSCw6g
/1Hfj+Vd1xq6tL0xZsWZvvWrtPS0ZlI/mkFQAlhcw1rkZ6e5DtTTlUALgyKOR+FZ
6NF68TqkyF/lPmdS9oohC8dPBD4gJ12gvaYRGKWMJO/AhTd3VvL4aOqHYRK7rtgx
hz8SKMZrVnOzedtnE1pn3VPkkcuuPHkY6BZ+E2C15xd8gu0OYRhVqvqvkzVqgmdk
qQaZergWkhFnyS1h2pYKqIEsnVueuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKuA
gYZa3Wk+RoUqwziCd9v8k7KJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMjZENzA0QUNEQTMxMUVGQUU0MDIzNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP00MA0GCSqGSIb3DQEBCwUA
A4IBAQAbZf7AnNNj/r0H4RozD2NZ+uAoB45hRUwdDzuhnH5IscFDF2VTIII5INaF
vROX9s3u8CyWOPupaDAimLMl3tg+5A5JxnhxmLiVHWE1JiU1gWD0V2oihs+l8Rrt
FMClKnLXbJklzr1tUbSFlC41LcqRAeTKJL88PeTcf0NoQFXQQ3P3aKtp7xolr9p2
HxbozPo3DdHyTXpdxByQ+4nW5zu/172Mnr8iqeZKb5alwQM6sUMOTp8NN9AEkMoG
fcA2OuCQSDJh8k8mnD4tzkv75/1BMYfzTsEz4YTehGXzNhvdLmodxP2ZV/3W//Ps
DgFUGmlKZhq1F/yB6TH7zFN7GJjr
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:37 2025 by rpki-client