Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BA8BAAFB3611EF9BB875B0762E951A.roa
File: 05BA8BAAFB3611EF9BB875B0762E951A.roa (raw, json)
Hash identifier: T485YE7KWPKpcEqZdU7yvOnKYrzCPCXxWrfBeXFUv/E=
Subject key identifier: 04:5A:C9:71:E7:7C:F3:7B:14:ED:E2:09:42:9C:63:88:3A:40:C0:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0143FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BA8BAAFB3611EF9BB875B0762E951A.roa
Signing time: Fri 07 Mar 2025 09:24:52 +0000
ROA not before: Fri 07 Mar 2025 09:24:47 +0000
ROA not after: Fri 11 Apr 2025 09:24:47 +0000
asID: 395839
IP address blocks: 156.229.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82942 (0x143fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 7 09:24:47 2025 GMT
Not After : Apr 11 09:24:47 2025 GMT
Subject: CN=67cabb63-e127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:5c:73:aa:14:13:10:2a:b8:b5:c8:2b:0f:
fe:a5:23:4c:d9:fe:53:6f:01:bb:2b:58:d5:4a:90:
5d:db:d3:79:b9:ad:84:e5:d5:b8:ec:c6:be:8b:f8:
43:3e:bb:03:75:37:ab:f0:38:0f:a0:10:e8:b1:48:
19:99:7b:87:e7:12:e0:f7:c3:d2:e7:06:ce:10:29:
78:60:1d:18:e6:6b:61:bf:18:e4:a7:34:49:68:61:
e8:ea:89:5e:21:0d:07:d6:49:0e:5a:9e:5e:f1:ac:
ef:a6:80:b4:9d:d7:7f:92:83:99:15:75:4a:ac:24:
7d:17:31:bc:63:75:8c:26:bd:8a:d0:1a:98:16:06:
3f:b6:da:d8:2c:49:01:c4:ed:c7:cc:82:69:83:7b:
18:67:91:43:d5:35:06:dd:0b:e7:3e:cf:e9:76:d9:
85:81:bc:a9:eb:cd:3a:d5:44:fe:fb:d7:4e:8b:09:
25:6a:24:1b:e8:a2:e3:f5:6a:55:01:10:61:c9:78:
ef:55:a8:ee:22:95:72:0a:61:d9:3c:e4:ec:f6:cd:
70:49:b5:06:11:f4:83:e5:b3:30:b9:a7:7c:fc:6c:
55:9b:31:e5:92:f8:43:d8:e6:ba:63:89:46:81:ba:
d4:28:c5:53:70:6c:15:c4:90:3f:d7:90:8c:ac:71:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:C9:71:E7:7C:F3:7B:14:ED:E2:09:42:9C:63:88:3A:40:C0:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BA8BAAFB3611EF9BB875B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.27.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1a:66:4c:cb:31:fc:32:84:0c:45:0a:c6:74:83:01:53:4a:
ac:cc:47:91:35:68:29:87:4e:d7:93:fb:2f:1b:fc:63:c5:5f:
18:6f:1f:ef:af:e0:6b:3e:85:b4:54:de:cb:43:66:71:7c:85:
3b:e7:71:6b:43:65:4f:f7:90:b5:70:d4:6e:f3:8b:9a:c9:2b:
41:bc:02:df:ac:ab:95:ed:73:7d:ba:f8:94:8e:f5:25:74:b8:
b8:5b:78:e7:61:b0:28:29:60:30:ee:55:a9:09:5a:e1:fc:7f:
46:f3:c4:10:5d:bf:68:8e:e7:5a:92:0a:d2:14:bc:81:d2:13:
1d:7c:dc:40:14:f2:ed:c7:67:99:f1:f7:db:26:78:4a:0c:70:
d7:08:59:cf:03:01:45:0d:78:8d:50:a4:06:8c:80:2c:40:16:
5e:eb:f4:16:88:07:b2:b8:72:79:64:34:17:57:21:55:60:46:
56:21:5d:95:eb:d7:38:43:f2:a3:ef:34:76:1e:52:42:05:0f:
7e:e8:a8:7d:d0:19:e9:7c:5e:32:79:d9:f4:50:33:5a:9d:34:
a1:9c:40:29:ba:b2:13:28:4a:37:8b:00:26:11:2c:f4:2d:e8:
d8:0f:31:56:2e:20:7c:c6:d5:70:44:aa:ef:e2:6a:07:89:b7:
9a:19:61:cd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUP+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzA3MDkyNDQ3WhcNMjUwNDExMDkyNDQ3WjAYMRYw
FAYDVQQDEw02N2NhYmI2My1lMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl0Rcc6oUExAquLXIKw/+pSNM2f5TbwG7K1jVSpBd29N5ua2E5dW47Ma+
i/hDPrsDdTer8DgPoBDosUgZmXuH5xLg98PS5wbOECl4YB0Y5mthvxjkpzRJaGHo
6oleIQ0H1kkOWp5e8azvpoC0ndd/koOZFXVKrCR9FzG8Y3WMJr2K0BqYFgY/ttrY
LEkBxO3HzIJpg3sYZ5FD1TUG3QvnPs/pdtmFgbyp68061UT++9dOiwklaiQb6KLj
9WpVARBhyXjvVajuIpVyCmHZPOTs9s1wSbUGEfSD5bMwuad8/GxVmzHlkvhD2Oa6
Y4lGgbrUKMVTcGwVxJA/15CMrHEoVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFARa
yXHnfPN7FO3iCUKcY4g6QMC6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNUJBOEJBQUZCMzYxMUVGOUJCODc1QjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOUbMA0GCSqGSIb3DQEBCwUA
A4IBAQBxGmZMyzH8MoQMRQrGdIMBU0qszEeRNWgph07Xk/svG/xjxV8Ybx/vr+Br
PoW0VN7LQ2ZxfIU753FrQ2VP95C1cNRu84uayStBvALfrKuV7XN9uviUjvUldLi4
W3jnYbAoKWAw7lWpCVrh/H9G88QQXb9ojudakgrSFLyB0hMdfNxAFPLtx2eZ8ffb
JnhKDHDXCFnPAwFFDXiNUKQGjIAsQBZe6/QWiAeyuHJ5ZDQXVyFVYEZWIV2V69c4
Q/Kj7zR2HlJCBQ9+6Kh90BnpfF4yedn0UDNanTShnEApurITKEo3iwAmESz0LejY
DzFWLiB8xtVwRKrv4moHibeaGWHN
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:26 2025 by rpki-client