Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/18F331CCE71311EF980CE67F762E951A.roa
File: 18F331CCE71311EF980CE67F762E951A.roa (raw, json)
Hash identifier: U6asCyD1O+BpSuJZbisAWolN+j2KzxhuuEzB1cz8LNI=
Subject key identifier: B9:98:28:1A:E3:99:2D:44:25:A5:08:D7:05:65:BA:48:3D:92:49:81
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 39
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/18F331CCE71311EF980CE67F762E951A.roa
Signing time: Sun 09 Feb 2025 18:24:28 +0000
ROA not before: Sun 09 Feb 2025 18:24:23 +0000
ROA not after: Mon 31 Dec 2035 18:24:23 +0000
asID: 30992
IP address blocks: 129.0.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Feb 9 18:24:23 2025 GMT
Not After : Dec 31 18:24:23 2035 GMT
Subject: CN=67a8f2dc-3dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:f7:f3:72:a2:23:78:a4:fa:98:d6:fa:13:
d8:bf:0b:15:6f:4e:ca:03:b4:f9:f7:b8:49:9b:9b:
d1:c3:f6:d3:98:27:4e:e2:69:30:45:73:cf:83:d6:
5a:f2:56:83:4a:44:79:b7:6c:18:65:47:54:51:7f:
fc:b5:30:a3:fa:92:7d:69:e1:a6:95:b2:4e:b7:ab:
f2:bb:07:79:6f:5f:29:e4:64:61:bd:91:30:3c:01:
be:f0:6d:0f:03:0e:20:c1:7e:be:f8:8b:51:c1:6b:
36:3d:7f:26:2f:00:0c:76:9e:30:8c:a9:31:66:9c:
ab:b5:98:d1:1a:16:90:5a:98:51:14:0e:dc:d8:1d:
ff:2a:35:c6:fb:43:4b:19:d8:07:11:34:2a:24:4b:
e0:c5:75:86:f9:bd:9e:a5:e0:22:69:8a:c7:b9:98:
49:1b:2a:61:4a:85:0b:1c:01:92:87:9d:e5:b6:31:
f0:10:ae:c6:3d:2b:56:a2:45:a9:34:8b:84:58:8a:
4e:e2:3d:82:8a:50:03:1f:4e:1b:5e:2e:a9:00:4f:
93:8c:e8:14:45:bc:af:35:47:30:f7:48:1f:67:5f:
5d:a6:10:0f:47:f4:b3:e4:6f:70:b0:c6:48:35:f6:
b3:6f:76:76:de:f4:a6:8c:2e:61:90:8c:86:b7:2f:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:28:1A:E3:99:2D:44:25:A5:08:D7:05:65:BA:48:3D:92:49:81
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/18F331CCE71311EF980CE67F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.80.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f3:8c:f1:da:b0:69:cd:8b:ab:ee:6b:1c:84:cb:60:ad:22:
3d:5e:ab:b7:4c:22:25:d5:2c:cd:50:90:fc:7a:a8:01:50:25:
57:76:ea:b2:99:10:1a:18:dd:ae:89:3c:65:56:7e:c5:1b:4a:
df:1f:c1:18:09:5a:b5:0f:5c:4d:fe:cf:6d:e1:7c:ec:04:19:
e2:13:a4:15:2d:09:54:40:c0:5c:68:b6:02:90:d2:48:97:90:
c7:9b:27:5b:90:4c:a9:08:6e:85:43:91:f6:91:16:97:79:65:
d6:ac:20:15:65:32:e6:5e:fb:26:6a:84:72:f4:30:e9:d2:55:
9f:9d:ab:82:d4:2f:34:83:1c:10:a3:8d:22:4b:23:9a:8a:5c:
80:51:53:f5:2a:c9:8d:2a:8e:c8:48:a4:69:df:bd:ce:2b:de:
e9:d4:c3:4d:a7:a1:82:ba:8f:c4:b1:a1:1c:83:5f:45:83:0d:
14:e7:bf:58:2d:04:51:0e:fd:a6:48:29:22:36:89:eb:e5:8d:
9d:d5:57:21:a6:4e:db:8d:56:77:df:2a:44:66:e0:25:95:a8:
fe:2b:ce:ca:30:fa:65:0f:b8:6a:d7:70:7e:93:85:a3:f2:31:
43:49:f3:8c:92:42:f0:0a:f8:62:0c:a3:8b:9c:fc:5e:f0:d5:
6e:27:e8:fa
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBOTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RENGMkFSMTEwLwYDVQQFEyhDNEJCQ0RFRjlEQzdFNjhGOTE4NEM4MEMwODcxOEMy
MDZFRERGNzBCMB4XDTI1MDIwOTE4MjQyM1oXDTM1MTIzMTE4MjQyM1owGDEWMBQG
A1UEAxMNNjdhOGYyZGMtM2RlYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAORn9/NyoiN4pPqY1voT2L8LFW9OygO0+fe4SZub0cP205gnTuJpMEVzz4PW
WvJWg0pEebdsGGVHVFF//LUwo/qSfWnhppWyTrer8rsHeW9fKeRkYb2RMDwBvvBt
DwMOIMF+vviLUcFrNj1/Ji8ADHaeMIypMWacq7WY0RoWkFqYURQO3Ngd/yo1xvtD
SxnYBxE0KiRL4MV1hvm9nqXgImmKx7mYSRsqYUqFCxwBkoed5bYx8BCuxj0rVqJF
qTSLhFiKTuI9gopQAx9OG14uqQBPk4zoFEW8rzVHMPdIH2dfXaYQD0f0s+RvcLDG
SDX2s292dt70powuYZCMhrcvFm0CAwEAAaOCAqIwggKeMB0GA1UdDgQWBBS5mCga
45ktRCWlCNcFZbpIPZJJgTAfBgNVHSMEGDAWgBTEu83vncfmj5GEyAwIcYwgbt33
CzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0RDRjIvQTE4NTMxQjZEQ0JFMTFFRkJFMkI1MEJCNzYyRTk1MUEveEx2Tjc1
M0g1by1SaE1nTUNIR01JRzdkOXdzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
eEx2Tjc1M0g1by1SaE1nTUNIR01JRzdkOXdzLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0RDRjIvQTE4NTMxQjZEQ0JFMTFFRkJFMkI1MEJCNzYyRTk1
MUEvMThGMzMxQ0NFNzEzMTFFRjk4MENFNjdGNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIEAUDANBgkqhkiG9w0BAQsFAAOC
AQEAFvOM8dqwac2Lq+5rHITLYK0iPV6rt0wiJdUszVCQ/HqoAVAlV3bqspkQGhjd
rok8ZVZ+xRtK3x/BGAlatQ9cTf7PbeF87AQZ4hOkFS0JVEDAXGi2ApDSSJeQx5sn
W5BMqQhuhUOR9pEWl3ll1qwgFWUy5l77JmqEcvQw6dJVn52rgtQvNIMcEKONIksj
mopcgFFT9SrJjSqOyEikad+9zive6dTDTaehgrqPxLGhHINfRYMNFOe/WC0EUQ79
pkgpIjaJ6+WNndVXIaZO241Wd98qRGbgJZWo/ivOyjD6ZQ+4atdwfpOFo/IxQ0nz
jJJC8Ar4Ygyji5z8XvDVbifo+g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:03 2025 by rpki-client on console.sobornost.net