Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBD08BA6B60411EFB6B3684D762E951A.roa
File: FBD08BA6B60411EFB6B3684D762E951A.roa (raw, json)
Hash identifier: jdr7T3uGsiwm9jh8rhUO00BdXHBDCd2VZI45c796mvg=
Subject key identifier: 2B:FF:A9:AC:14:CD:1C:D3:6D:4B:5B:66:DB:C9:70:82:8F:AC:0C:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E182
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBD08BA6B60411EFB6B3684D762E951A.roa
Signing time: Mon 09 Dec 2024 08:10:00 +0000
ROA not before: Mon 09 Dec 2024 08:09:53 +0000
ROA not after: Thu 06 Feb 2025 08:09:53 +0000
asID: 150706
IP address blocks: 156.236.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 08:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57730 (0xe182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 08:09:53 2024 GMT
Not After : Feb 6 08:09:53 2025 GMT
Subject: CN=6756a5d8-8977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:bf:43:55:c7:2b:92:87:57:26:4f:bc:80:
24:6f:30:3b:81:b1:f4:da:a4:b4:d3:bc:3c:6f:57:
6a:cf:25:6a:79:d0:d7:88:12:c4:21:d7:0e:71:73:
74:ad:39:4f:c9:5a:ea:a2:4a:e1:2d:e9:0f:b5:f7:
80:82:85:77:5b:90:2e:7b:23:33:0d:37:96:4f:ad:
9e:9f:bd:dc:3e:f2:6f:85:9c:a1:44:c8:1c:63:99:
a3:31:a8:7e:8c:07:93:6d:0b:1d:59:79:eb:5c:b2:
3c:3c:65:d3:ce:b4:57:73:6e:60:23:5f:39:74:9d:
ef:7e:72:eb:ab:38:29:2f:3b:2d:34:02:55:ab:4b:
71:02:fb:cd:6b:d7:3c:93:b2:d2:54:51:39:c6:5e:
9f:b3:25:69:04:34:5a:75:fe:c7:d9:13:99:c8:98:
d1:76:9b:43:1b:6e:10:a3:d8:0b:0b:17:72:ff:53:
00:89:c8:c5:0c:3f:09:52:3a:30:41:3f:4d:be:be:
10:42:5d:18:34:a8:a8:29:58:68:86:e8:4e:81:c2:
8f:42:52:41:a6:f2:c9:a6:fe:a8:1f:ef:67:15:99:
6a:ce:3a:56:d2:07:88:dd:44:e7:42:dd:cc:24:84:
91:da:ac:f3:e0:0b:18:8d:58:35:28:56:f8:6b:8f:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:A9:AC:14:CD:1C:D3:6D:4B:5B:66:DB:C9:70:82:8F:AC:0C:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBD08BA6B60411EFB6B3684D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.112.0/21
Signature Algorithm: sha256WithRSAEncryption
75:df:a2:5d:0f:8b:b0:7f:7d:db:85:d4:b1:bd:f6:cc:82:ca:
0b:e6:e1:d6:e8:19:85:7a:27:7d:5e:a5:a5:45:2f:f3:71:53:
b3:10:78:c9:da:86:25:94:bd:a9:38:60:8d:4a:b8:54:47:02:
5d:45:e1:be:0b:7f:43:0f:77:d6:dc:35:df:99:f2:39:58:cc:
e6:31:a8:54:b2:ff:d7:84:c5:dd:cb:4e:38:4d:66:36:02:ea:
c4:00:75:c4:dd:59:7a:4c:95:ff:30:82:28:c4:cb:20:09:ea:
a3:19:93:9c:0f:58:5e:e1:a9:13:d5:f1:6b:c1:68:3e:d7:8b:
08:20:84:a5:d5:e9:3e:85:19:a9:f1:56:b7:15:ed:87:f5:2b:
5d:06:90:f6:a7:ab:a8:04:d7:2e:7c:44:ae:6f:e9:a0:18:af:
9a:21:3b:4e:b8:6e:a3:bb:63:63:15:4d:c5:aa:79:85:39:21:
42:c0:b8:ad:55:37:60:3a:61:bd:30:7f:26:05:80:91:20:3f:
ca:a9:b1:8e:55:87:a2:ff:a1:a5:16:f5:38:a7:93:20:0b:e7:
5a:51:6b:5f:46:64:60:0f:38:d4:fe:72:a1:6c:87:39:ab:40:
b2:82:5a:16:c3:c0:14:41:8a:f8:05:61:06:02:40:32:eb:76:
66:bc:87:a2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOGCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA5MDgwOTUzWhcNMjUwMjA2MDgwOTUzWjAYMRYw
FAYDVQQDEw02NzU2YTVkOC04OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApam/Q1XHK5KHVyZPvIAkbzA7gbH02qS007w8b1dqzyVqedDXiBLEIdcO
cXN0rTlPyVrqokrhLekPtfeAgoV3W5AueyMzDTeWT62en73cPvJvhZyhRMgcY5mj
Mah+jAeTbQsdWXnrXLI8PGXTzrRXc25gI185dJ3vfnLrqzgpLzstNAJVq0txAvvN
a9c8k7LSVFE5xl6fsyVpBDRadf7H2ROZyJjRdptDG24Qo9gLCxdy/1MAicjFDD8J
UjowQT9Nvr4QQl0YNKioKVhohuhOgcKPQlJBpvLJpv6oH+9nFZlqzjpW0geI3UTn
Qt3MJISR2qzz4AsYjVg1KFb4a4+tJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCv/
qawUzRzTbUtbZtvJcIKPrAwPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQkQwOEJBNkI2MDQxMUVGQjZCMzY4NEQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOxwMA0GCSqGSIb3DQEBCwUA
A4IBAQB136JdD4uwf33bhdSxvfbMgsoL5uHW6BmFeid9XqWlRS/zcVOzEHjJ2oYl
lL2pOGCNSrhURwJdReG+C39DD3fW3DXfmfI5WMzmMahUsv/XhMXdy044TWY2AurE
AHXE3Vl6TJX/MIIoxMsgCeqjGZOcD1he4akT1fFrwWg+14sIIISl1ek+hRmp8Va3
Fe2H9StdBpD2p6uoBNcufESub+mgGK+aITtOuG6ju2NjFU3FqnmFOSFCwLitVTdg
OmG9MH8mBYCRID/KqbGOVYei/6GlFvU4p5MgC+daUWtfRmRgDzjU/nKhbIc5q0Cy
gloWw8AUQYr4BWEGAkAy63ZmvIei
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:01 2025 by rpki-client