Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10747AF8EAE511EF978D4560762E951A.roa
File: 10747AF8EAE511EF978D4560762E951A.roa (raw, json)
Hash identifier: OWyKUO2bEFgtAwoWv3CZAuifcjV0pFE9qLJp9647KrA=
Subject key identifier: AC:30:BC:3C:28:D2:BA:D2:FF:6B:10:39:22:9B:FE:B7:80:D2:63:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012347
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10747AF8EAE511EF978D4560762E951A.roa
Signing time: Fri 14 Feb 2025 15:05:02 +0000
ROA not before: Fri 14 Feb 2025 15:04:58 +0000
ROA not after: Thu 10 Apr 2025 15:04:58 +0000
asID: 149440
IP address blocks: 156.225.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74567 (0x12347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 14 15:04:58 2025 GMT
Not After : Apr 10 15:04:58 2025 GMT
Subject: CN=67af5b9e-6ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:c2:ef:93:41:16:cb:3b:e6:3d:37:a7:a4:
ae:50:c7:8d:65:4b:ee:fd:d9:a4:03:b4:39:0b:71:
91:cc:36:d7:53:3a:4f:63:96:ee:68:4d:8d:37:f5:
98:f3:06:25:04:3e:53:21:f5:6d:be:fa:c4:6d:6a:
79:35:41:07:59:12:0c:ac:5c:38:e0:0c:15:e1:0f:
6b:c0:53:2c:8a:7b:1e:65:91:87:70:70:19:6c:a3:
3d:68:67:b0:5b:c3:42:03:13:b6:7c:25:86:25:c6:
a8:4f:2c:58:3f:b4:fc:70:56:22:73:de:f0:83:48:
c5:2d:4f:29:e4:45:f6:00:3d:da:89:3c:1e:5d:f0:
98:9c:d9:bc:f9:0d:58:1a:70:ef:cd:5c:2d:9c:8e:
a4:9b:7e:a4:6e:f7:5c:07:16:18:d1:c0:20:e3:ba:
43:73:00:62:22:e2:77:69:92:93:8d:5c:80:03:f9:
b2:19:d1:44:1e:ce:45:54:33:e4:31:88:80:cb:06:
6d:7a:1e:1e:7f:c8:b0:d3:0d:dd:b0:81:6b:2d:d5:
fb:d9:b8:8c:8b:b2:2c:83:6a:6d:6e:a6:67:2f:0d:
78:cb:c9:f9:12:23:92:e1:38:96:73:84:fe:21:51:
fb:5d:e9:e6:03:ba:f3:b2:d3:4f:1a:6e:2d:0e:ca:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:BC:3C:28:D2:BA:D2:FF:6B:10:39:22:9B:FE:B7:80:D2:63:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10747AF8EAE511EF978D4560762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.64.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:76:7b:7c:bb:91:53:8b:89:aa:65:73:aa:e7:2b:be:05:dd:
f5:fa:a5:62:12:fc:31:d0:f2:03:62:51:b3:3b:e9:3a:d5:09:
88:08:f5:19:79:35:b9:b6:85:7a:f3:88:a0:a4:e0:d0:4f:fc:
06:87:dc:82:15:4c:f8:d5:5f:59:20:e0:9e:52:d9:cf:73:93:
2b:39:af:51:13:06:db:c4:d9:c5:28:92:f9:a5:51:65:ec:d9:
0b:d7:37:1c:fe:50:aa:41:2c:fa:6c:97:9a:96:a1:21:04:30:
d7:b7:cc:a4:70:b1:e5:c1:55:67:d4:1e:6d:f9:d5:3b:da:e5:
7f:1c:b9:38:12:36:7a:2b:4a:66:8e:7d:6f:54:cf:26:e4:94:
4e:43:ea:1f:7c:a2:f0:f3:16:d7:86:b7:4f:5e:9e:2b:d2:fb:
0e:2d:62:bf:9f:cb:a0:e9:96:95:4c:32:39:02:d8:39:20:7d:
e3:d2:ae:af:2c:d8:93:1d:28:21:f4:29:11:ef:ee:53:b6:61:
42:45:f1:65:bf:a4:14:15:b4:5b:b7:fb:54:01:b5:e8:32:43:
94:bd:1c:4c:0e:9f:0c:c1:d9:ca:3e:aa:b7:5d:6d:73:4d:8a:
69:c8:9b:d4:29:77:cf:c5:20:17:2a:79:4d:3e:5f:a2:b0:c2:
30:b5:33:f6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASNHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjE0MTUwNDU4WhcNMjUwNDEwMTUwNDU4WjAYMRYw
FAYDVQQDEw02N2FmNWI5ZS02YWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4J/C75NBFss75j03p6SuUMeNZUvu/dmkA7Q5C3GRzDbXUzpPY5buaE2N
N/WY8wYlBD5TIfVtvvrEbWp5NUEHWRIMrFw44AwV4Q9rwFMsinseZZGHcHAZbKM9
aGewW8NCAxO2fCWGJcaoTyxYP7T8cFYic97wg0jFLU8p5EX2AD3aiTweXfCYnNm8
+Q1YGnDvzVwtnI6km36kbvdcBxYY0cAg47pDcwBiIuJ3aZKTjVyAA/myGdFEHs5F
VDPkMYiAywZteh4ef8iw0w3dsIFrLdX72biMi7Isg2ptbqZnLw14y8n5EiOS4TiW
c4T+IVH7XenmA7rzstNPGm4tDsodLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKww
vDwo0rrS/2sQOSKb/reA0mMSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDc0N0FGOEVBRTUxMUVGOTc4RDQ1NjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFAMA0GCSqGSIb3DQEBCwUA
A4IBAQA+dnt8u5FTi4mqZXOq5yu+Bd31+qViEvwx0PIDYlGzO+k61QmICPUZeTW5
toV684igpODQT/wGh9yCFUz41V9ZIOCeUtnPc5MrOa9REwbbxNnFKJL5pVFl7NkL
1zcc/lCqQSz6bJealqEhBDDXt8ykcLHlwVVn1B5t+dU72uV/HLk4EjZ6K0pmjn1v
VM8m5JROQ+offKLw8xbXhrdPXp4r0vsOLWK/n8ug6ZaVTDI5Atg5IH3j0q6vLNiT
HSgh9CkR7+5TtmFCRfFlv6QUFbRbt/tUAbXoMkOUvRxMDp8MwdnKPqq3XW1zTYpp
yJvUKXfPxSAXKnlNPl+isMIwtTP2
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:27 2025 by rpki-client