Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D431FE2070911F0BF9A2BB6762E951A.roa
File: 1D431FE2070911F0BF9A2BB6762E951A.roa (raw, json)
Hash identifier: IGoERsSBamksMo67jVRdxUrStVNP4a/suhSkCnOttgk=
Subject key identifier: C0:10:9E:E3:D0:D4:23:2B:51:B8:DC:79:A3:8A:1C:4C:A9:7E:1C:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014785
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D431FE2070911F0BF9A2BB6762E951A.roa
Signing time: Sat 22 Mar 2025 10:33:38 +0000
ROA not before: Sat 22 Mar 2025 10:33:34 +0000
ROA not after: Mon 28 Apr 2025 10:33:34 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83845 (0x14785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 22 10:33:34 2025 GMT
Not After : Apr 28 10:33:34 2025 GMT
Subject: CN=67de9201-9cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:f8:6b:40:61:40:16:74:30:6e:b4:a5:e1:
04:04:62:1c:bc:79:1d:15:ca:e8:0b:2a:2b:dc:e0:
3c:60:22:c1:35:1c:f6:9f:38:b4:a9:d8:1a:aa:7f:
f3:89:3e:c8:15:d3:f9:19:11:94:f1:ea:59:6a:cc:
3d:6a:ad:b7:e7:3d:08:69:08:7e:3f:48:28:36:9e:
6a:14:e9:6e:5b:34:ba:1a:d2:fe:19:1d:fc:13:ec:
5a:00:b5:9f:0e:71:8e:80:b3:7a:f9:b6:66:c8:5c:
69:f4:4f:6d:ea:d6:17:01:21:2c:f4:38:59:1d:55:
c8:a2:42:c0:ef:41:e9:31:37:9a:2c:8b:e8:ad:16:
08:ca:aa:ed:7e:52:8f:d9:4e:78:4c:f4:61:8b:ed:
35:b0:5f:3e:b1:05:a3:94:88:50:df:02:28:50:8f:
b4:72:39:38:ae:b8:65:8c:4c:6e:94:fc:7d:e4:dd:
fa:2f:5f:d7:83:3a:3b:9b:e8:c3:09:3a:d4:c0:8d:
ea:32:1f:5a:46:34:f7:48:7d:67:a8:87:84:76:a7:
0d:ed:77:98:12:ec:06:18:d9:aa:86:1e:28:f6:63:
10:43:a2:75:a3:83:20:2e:76:d1:91:01:71:a5:7b:
32:40:02:89:91:30:e6:10:43:fc:ed:22:87:e3:42:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:10:9E:E3:D0:D4:23:2B:51:B8:DC:79:A3:8A:1C:4C:A9:7E:1C:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D431FE2070911F0BF9A2BB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c3:fc:d8:ed:5d:b6:74:15:d1:ff:02:37:39:dc:83:4a:52:
4f:0d:51:74:d6:4b:36:99:09:75:51:ff:df:d9:6c:28:c5:4b:
95:e7:81:c2:ff:f0:58:75:43:de:2d:10:ac:85:0a:3e:07:eb:
63:bc:10:71:bf:d1:20:b4:ef:fa:1e:2e:d0:d1:c4:21:9f:6f:
37:15:28:c3:18:9c:0f:dd:54:6b:64:39:ab:89:1f:28:2a:b3:
05:a9:9b:9a:a0:1d:1a:97:8d:87:59:ed:cf:50:31:ea:b8:66:
af:bf:ba:42:cd:53:c5:6e:8a:43:ea:5a:b7:b1:5f:ff:d0:2b:
0b:f6:a8:d8:d7:30:49:aa:03:17:35:3f:16:68:c1:39:20:04:
67:d6:e5:99:a9:41:11:99:88:02:67:87:c6:c1:74:b6:16:75:
43:bb:39:ac:ae:49:d9:e6:e1:4b:ff:d0:3c:0c:14:49:c7:3b:
a6:18:3f:5e:ad:a2:9c:5b:e9:16:92:ea:dd:b8:6c:c6:ee:51:
ac:ec:8e:f4:f0:bc:2b:5d:a2:24:39:c0:41:11:49:2a:1d:73:
8e:bd:02:2b:bf:5b:64:6a:7e:9f:a3:c9:05:0c:67:8f:35:de:
80:36:55:a8:f1:5a:39:49:48:12:1d:8f:2b:41:19:dd:18:37:
1c:20:85:d2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUeFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzIyMTAzMzM0WhcNMjUwNDI4MTAzMzM0WjAYMRYw
FAYDVQQDEw02N2RlOTIwMS05Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuvX4a0BhQBZ0MG60peEEBGIcvHkdFcroCyor3OA8YCLBNRz2nzi0qdga
qn/ziT7IFdP5GRGU8epZasw9aq235z0IaQh+P0goNp5qFOluWzS6GtL+GR38E+xa
ALWfDnGOgLN6+bZmyFxp9E9t6tYXASEs9DhZHVXIokLA70HpMTeaLIvorRYIyqrt
flKP2U54TPRhi+01sF8+sQWjlIhQ3wIoUI+0cjk4rrhljExulPx95N36L1/Xgzo7
m+jDCTrUwI3qMh9aRjT3SH1nqIeEdqcN7XeYEuwGGNmqhh4o9mMQQ6J1o4MgLnbR
kQFxpXsyQAKJkTDmEEP87SKH40Ki1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMAQ
nuPQ1CMrUbjceaOKHEypfhxWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRDQzMUZFMjA3MDkxMUYwQkY5QTJCQjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOYUMA0GCSqGSIb3DQEBCwUA
A4IBAQAyw/zY7V22dBXR/wI3OdyDSlJPDVF01ks2mQl1Uf/f2WwoxUuV54HC//BY
dUPeLRCshQo+B+tjvBBxv9EgtO/6Hi7Q0cQhn283FSjDGJwP3VRrZDmriR8oKrMF
qZuaoB0al42HWe3PUDHquGavv7pCzVPFbopD6lq3sV//0CsL9qjY1zBJqgMXNT8W
aME5IARn1uWZqUERmYgCZ4fGwXS2FnVDuzmsrknZ5uFL/9A8DBRJxzumGD9eraKc
W+kWkurduGzG7lGs7I708LwrXaIkOcBBEUkqHXOOvQIrv1tkan6fo8kFDGePNd6A
NlWo8Vo5SUgSHY8rQRndGDccIIXS
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:50 2025 by rpki-client