Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6D6ED08CD5A11EF8F166F65762E951A.roa
File: F6D6ED08CD5A11EF8F166F65762E951A.roa (raw, json)
Hash identifier: BEiIafF4c69ixn8nixJLrRZOE1JoysOhJN7LFgZ01fY=
Subject key identifier: 20:BB:1F:C5:5E:B6:ED:2B:AE:FC:20:E9:93:97:8A:6E:F3:03:D5:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6D6ED08CD5A11EF8F166F65762E951A.roa
Signing time: Wed 08 Jan 2025 00:53:24 +0000
ROA not before: Wed 08 Jan 2025 00:00:21 +0000
ROA not after: Sat 13 Dec 2025 00:00:21 +0000
asID: 984
IP address blocks: 156.247.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65289 (0xff09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 00:00:21 2025 GMT
Not After : Dec 13 00:00:21 2025 GMT
Subject: CN=677dcc84-65b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:0d:f5:d1:0d:e2:46:41:73:ed:59:41:ec:
fc:4c:23:d5:fd:ea:54:8c:80:64:37:8e:c8:37:2b:
69:e1:59:05:43:88:79:00:6c:36:4e:c4:69:2a:5c:
cd:73:65:5d:d2:ad:77:ea:22:61:27:e0:5e:d0:0f:
1b:29:45:3e:57:05:4e:09:e3:47:a1:18:45:f6:5a:
3d:e7:80:9b:e2:4d:52:e6:7d:37:40:e1:d8:d5:b3:
95:ca:47:6c:5c:a2:37:27:99:79:e0:66:f2:47:76:
e9:a5:4c:95:ec:14:eb:8c:b1:36:2f:f5:91:32:68:
99:c5:f2:62:0d:00:88:7a:70:30:3a:20:5c:2d:63:
83:6f:42:2e:ca:fa:67:c6:41:a3:b3:50:73:0b:79:
4f:a9:6c:80:4f:ca:f4:1a:4c:65:63:c2:f3:4f:7e:
5e:e7:b5:47:6d:9d:3e:3a:e1:c8:a5:fc:6d:84:7b:
c7:94:4a:1a:67:d9:b0:a4:32:5b:44:04:cc:1a:58:
b9:a1:c6:1b:1e:fc:95:8b:15:1c:b7:f7:9d:a3:c9:
c2:cd:c4:a2:bb:25:0a:7d:6e:26:d2:f6:13:09:cc:
b1:90:6f:e9:54:38:4a:62:ac:4e:54:aa:cf:85:0f:
20:bf:68:50:b3:d5:99:70:2d:93:0c:cd:e9:ae:83:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BB:1F:C5:5E:B6:ED:2B:AE:FC:20:E9:93:97:8A:6E:F3:03:D5:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6D6ED08CD5A11EF8F166F65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0e:1c:cc:0b:d2:87:32:c9:c3:b9:9b:13:f2:70:54:95:c1:
5f:83:2c:a9:e4:60:e6:39:30:08:eb:bc:73:53:c8:db:34:c2:
ee:e6:c6:e2:a1:47:99:24:f8:30:d2:14:61:84:1e:0c:51:66:
10:f2:7a:b9:ad:c8:bd:91:a0:83:af:f4:5f:7f:10:76:89:a4:
af:86:b9:b7:fc:d2:35:47:b0:2f:d0:c7:66:0c:0e:51:b8:22:
ca:cd:b5:af:e1:ac:f6:7c:97:c3:bf:2d:92:97:80:46:a0:c8:
24:0b:04:de:5f:83:39:88:e3:c2:8b:4b:3e:a5:e4:43:75:99:
6d:72:f6:37:36:81:79:b5:f5:88:6b:07:6a:06:9e:ed:d8:f0:
14:2d:8f:6c:20:81:39:54:99:78:78:86:59:77:42:bb:00:4d:
1c:fd:3b:5a:f2:34:91:74:cf:b8:f3:42:a1:c4:34:c4:ac:ea:
15:cd:c5:67:f0:ca:34:c6:94:32:ca:fe:e7:99:92:a3:3c:0d:
e1:aa:7a:63:db:c6:24:f7:da:ad:46:c7:3d:75:16:6e:47:3d:
21:96:35:6e:a8:6e:d8:6e:ff:7d:8f:cf:c1:4b:4f:c9:c4:59:
2c:55:5d:6f:05:56:1d:b7:cd:a4:5f:88:3a:b2:53:ef:11:16:
59:3e:72:64
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP8JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDAwMDIxWhcNMjUxMjEzMDAwMDIxWjAYMRYw
FAYDVQQDEw02NzdkY2M4NC02NWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1lIN9dEN4kZBc+1ZQez8TCPV/epUjIBkN47INytp4VkFQ4h5AGw2TsRp
KlzNc2Vd0q136iJhJ+Be0A8bKUU+VwVOCeNHoRhF9lo954Cb4k1S5n03QOHY1bOV
ykdsXKI3J5l54GbyR3bppUyV7BTrjLE2L/WRMmiZxfJiDQCIenAwOiBcLWODb0Iu
yvpnxkGjs1BzC3lPqWyAT8r0GkxlY8LzT35e57VHbZ0+OuHIpfxthHvHlEoaZ9mw
pDJbRATMGli5ocYbHvyVixUct/edo8nCzcSiuyUKfW4m0vYTCcyxkG/pVDhKYqxO
VKrPhQ8gv2hQs9WZcC2TDM3proNxpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCC7
H8Vetu0rrvwg6ZOXim7zA9VFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNkQ2RUQwOENENUExMUVGOEYxNjZGNjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPdNMA0GCSqGSIb3DQEBCwUA
A4IBAQCiDhzMC9KHMsnDuZsT8nBUlcFfgyyp5GDmOTAI67xzU8jbNMLu5sbioUeZ
JPgw0hRhhB4MUWYQ8nq5rci9kaCDr/RffxB2iaSvhrm3/NI1R7Av0MdmDA5RuCLK
zbWv4az2fJfDvy2Sl4BGoMgkCwTeX4M5iOPCi0s+peRDdZltcvY3NoF5tfWIawdq
Bp7t2PAULY9sIIE5VJl4eIZZd0K7AE0c/Tta8jSRdM+480KhxDTErOoVzcVn8Mo0
xpQyyv7nmZKjPA3hqnpj28Yk99qtRsc9dRZuRz0hljVuqG7Ybv99j8/BS0/JxFks
VV1vBVYdt82kX4g6slPvERZZPnJk
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:42 2025 by rpki-client