Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F531D662CCCD11EF89550B6D762E951A.roa
File: F531D662CCCD11EF89550B6D762E951A.roa (raw, json)
Hash identifier: /wtKQIFqkUkc6sDT6Sj9yx9787HefMisWvb5kTqcbzw=
Subject key identifier: 12:8B:9E:BD:47:72:58:33:86:B5:C2:DD:9D:23:CD:F0:1F:6F:63:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F531D662CCCD11EF89550B6D762E951A.roa
Signing time: Tue 07 Jan 2025 08:04:03 +0000
ROA not before: Tue 07 Jan 2025 08:03:59 +0000
ROA not after: Sat 13 Dec 2025 08:03:59 +0000
asID: 984
IP address blocks: 156.233.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64150 (0xfa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:03:59 2025 GMT
Not After : Dec 13 08:03:59 2025 GMT
Subject: CN=677cdff2-8d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:36:52:db:27:55:24:7e:b1:76:26:4c:5e:
b8:eb:7f:4c:d9:13:5b:1f:b1:9e:cc:e0:0f:66:22:
ae:53:90:58:e9:74:6c:09:b0:66:68:d8:2c:29:ef:
f8:f4:0a:b4:2a:91:1f:da:33:94:0a:91:bd:cf:15:
04:f8:e0:df:59:db:26:44:29:5b:6b:c6:fb:1d:62:
ad:5d:2b:01:d5:07:9f:96:ee:8b:2a:c4:b5:55:ff:
0f:aa:73:6e:5f:c0:4a:e5:07:b5:0d:f3:d5:2d:d3:
1c:95:6c:46:0c:6f:d5:5c:71:47:18:ab:5f:b6:2b:
bf:41:78:34:35:d1:11:1c:9e:b0:fb:07:fd:bd:36:
f5:fc:9c:c8:ef:74:b1:6d:d4:1d:85:22:c1:4e:d4:
f5:c8:0c:65:ae:cb:a5:4d:aa:52:91:fe:75:52:b2:
50:7a:d6:f9:79:51:1d:5e:df:34:de:7a:bf:b0:5d:
14:5c:01:60:29:95:d3:0b:01:68:e0:e1:67:50:a3:
37:12:93:23:ac:3f:b3:f1:9f:01:e3:54:95:07:a7:
22:63:25:f8:db:29:49:8e:57:0d:61:d7:18:50:8c:
0c:c0:47:e6:f9:8f:9e:e8:17:63:ab:7d:63:bf:d2:
a3:54:b9:83:8a:89:d2:df:5d:5b:09:96:fe:21:33:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:9E:BD:47:72:58:33:86:B5:C2:DD:9D:23:CD:F0:1F:6F:63:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F531D662CCCD11EF89550B6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:74:93:33:19:12:64:03:2b:af:5e:e0:d5:25:12:5f:3b:41:
64:29:f0:20:58:df:99:35:d1:24:55:b5:4e:a0:bd:4c:a9:94:
0e:26:e7:78:3f:ab:b6:61:c3:9a:1a:0f:1b:51:83:5c:19:69:
35:a2:06:48:0e:4b:3f:d4:87:f1:31:fe:f4:c5:21:da:9f:30:
c9:8a:cb:0a:c6:91:89:76:4e:99:7a:78:3c:3e:9a:90:df:b7:
47:43:75:2f:66:06:93:c9:22:e4:3a:00:eb:e7:62:88:8d:65:
cc:06:75:49:cc:3f:c5:9a:43:de:ce:0a:a2:de:22:4f:5a:3a:
1b:b5:74:97:d6:cd:ef:ba:d2:17:5e:49:bd:de:20:30:d8:07:
b1:04:f6:fd:3c:3f:7d:60:94:c6:30:c1:c5:ca:5a:b4:d5:d6:
2e:32:f7:74:19:60:04:1a:10:f4:b4:7a:81:b3:cf:fe:a7:a1:
46:26:07:bc:db:a4:d0:de:f3:f5:2d:76:03:7e:87:06:3e:36:
f2:66:cb:01:b4:57:0d:b1:d4:54:6c:da:1f:0d:38:4e:58:07:
25:c0:e6:63:9f:6a:66:8c:47:59:f8:a6:24:d1:06:62:ef:8c:
14:b8:cf:ad:00:c3:76:d8:90:b8:1f:93:e8:fd:81:c5:1d:7d:
8a:18:b6:50
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPqWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDgwMzU5WhcNMjUxMjEzMDgwMzU5WjAYMRYw
FAYDVQQDEw02NzdjZGZmMi04ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsvA2UtsnVSR+sXYmTF64639M2RNbH7GezOAPZiKuU5BY6XRsCbBmaNgs
Ke/49Aq0KpEf2jOUCpG9zxUE+ODfWdsmRClba8b7HWKtXSsB1Qeflu6LKsS1Vf8P
qnNuX8BK5Qe1DfPVLdMclWxGDG/VXHFHGKtftiu/QXg0NdERHJ6w+wf9vTb1/JzI
73SxbdQdhSLBTtT1yAxlrsulTapSkf51UrJQetb5eVEdXt803nq/sF0UXAFgKZXT
CwFo4OFnUKM3EpMjrD+z8Z8B41SVB6ciYyX42ylJjlcNYdcYUIwMwEfm+Y+e6Bdj
q31jv9KjVLmDionS311bCZb+ITMTlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBKL
nr1HclgzhrXC3Z0jzfAfb2N7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNTMxRDY2MkNDQ0QxMUVGODk1NTBCNkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOmIMA0GCSqGSIb3DQEBCwUA
A4IBAQBqdJMzGRJkAyuvXuDVJRJfO0FkKfAgWN+ZNdEkVbVOoL1MqZQOJud4P6u2
YcOaGg8bUYNcGWk1ogZIDks/1IfxMf70xSHanzDJissKxpGJdk6Zeng8PpqQ37dH
Q3UvZgaTySLkOgDr52KIjWXMBnVJzD/FmkPezgqi3iJPWjobtXSX1s3vutIXXkm9
3iAw2AexBPb9PD99YJTGMMHFylq01dYuMvd0GWAEGhD0tHqBs8/+p6FGJge826TQ
3vP1LXYDfocGPjbyZssBtFcNsdRUbNofDThOWAclwOZjn2pmjEdZ+KYk0QZi74wU
uM+tAMN22JC4H5Po/YHFHX2KGLZQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:18 2025 by rpki-client