Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2445039A0A1611F084F7B25A762E951A.roa
File: 2445039A0A1611F084F7B25A762E951A.roa (raw, json)
Hash identifier: LQd3U36Xs0B1T4oaXoKiSgdiQP0z/YtSn4imer7ikvY=
Subject key identifier: E3:11:5B:0D:C4:13:25:2D:A7:EB:B4:87:C5:C1:DA:28:8F:A8:4D:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014838
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2445039A0A1611F084F7B25A762E951A.roa
Signing time: Wed 26 Mar 2025 07:44:26 +0000
ROA not before: Wed 26 Mar 2025 07:44:22 +0000
ROA not after: Thu 15 May 2025 07:44:22 +0000
asID: 398465
IP address blocks: 156.255.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84024 (0x14838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 07:44:22 2025 GMT
Not After : May 15 07:44:22 2025 GMT
Subject: CN=67e3b05a-f672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4e:af:71:2a:26:93:f8:6e:77:72:db:60:47:
28:b6:e3:bb:31:22:0e:d3:8c:84:bd:a3:51:40:4b:
bc:12:da:fd:d2:c9:21:63:b3:89:13:50:c6:cb:a2:
7c:bb:b5:a7:f7:d5:fb:f4:e9:07:a3:1f:b5:c4:47:
b6:1e:72:38:65:1d:21:84:79:aa:b2:d3:6f:c7:74:
66:0e:d6:cb:7d:ed:52:66:fb:67:fb:64:8a:b6:03:
d6:c6:07:5e:1f:d0:b8:34:e0:e7:82:df:e5:b4:53:
8f:e8:0c:af:3c:cb:7d:7e:aa:81:20:8c:62:37:8d:
e6:fa:5b:dc:87:d3:a4:db:1d:64:eb:a9:9b:60:e8:
53:5f:1e:9d:0d:ef:a6:43:41:98:5d:33:66:fe:bc:
41:2a:80:12:5a:f3:14:1a:36:c0:15:c4:28:4d:d2:
dc:c1:5b:6f:f7:20:74:98:a2:93:bb:d5:d7:ec:e2:
51:3b:23:ed:6c:56:d1:8e:7b:ef:11:7b:e2:74:fd:
91:3f:52:6c:26:15:27:e6:6e:84:df:56:35:04:b6:
39:11:73:19:5f:33:cf:08:ba:71:f1:46:73:15:e4:
d4:a5:e3:05:9b:d3:b8:df:d9:b9:72:5d:cb:4a:a0:
09:4a:ca:14:3e:d6:21:72:5c:d6:69:4c:73:fa:94:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:11:5B:0D:C4:13:25:2D:A7:EB:B4:87:C5:C1:DA:28:8F:A8:4D:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2445039A0A1611F084F7B25A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:9e:8c:a7:e1:74:55:b9:38:88:71:db:1d:45:bb:8e:f4:aa:
ee:aa:3e:4a:4e:98:e5:d1:ed:a3:1d:9f:b8:f0:98:0c:f3:46:
68:a8:72:51:56:8a:01:d9:51:ec:59:08:88:04:a2:13:42:6f:
dc:d0:03:71:29:b0:75:bd:e9:c4:c7:eb:53:91:08:ac:96:f5:
7a:1b:11:86:76:d6:93:f3:b9:21:49:a5:59:4d:17:18:54:ad:
0c:a0:71:c5:d5:3c:32:7a:10:85:f9:b5:c0:e1:da:6b:66:ee:
7c:d8:73:55:aa:36:68:92:ef:d2:d5:ad:bc:8d:6b:cf:39:0d:
a4:6f:89:ad:d6:e4:09:19:fe:26:c0:98:c5:96:4f:70:3b:bb:
9f:02:33:0b:38:14:90:55:09:1d:9d:2c:a0:c2:db:51:15:ab:
51:34:20:f2:91:26:e5:f6:26:e9:b0:1a:1e:4c:5b:20:60:7c:
e6:52:5e:c7:08:3c:e8:84:bf:bc:4b:fe:39:05:b3:71:e9:c4:
95:f1:19:93:30:8b:51:10:61:6d:ce:34:e4:34:6a:d2:10:3b:
3d:de:64:35:2c:da:22:81:c2:25:b0:39:77:5f:78:d2:33:8b:
f6:02:da:0a:af:9e:f1:a3:81:37:41:82:e6:df:f5:75:2b:dd:
04:45:a0:2f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUg4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI2MDc0NDIyWhcNMjUwNTE1MDc0NDIyWjAYMRYw
FAYDVQQDEw02N2UzYjA1YS1mNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5U6vcSomk/hud3LbYEcotuO7MSIO04yEvaNRQEu8Etr90skhY7OJE1DG
y6J8u7Wn99X79OkHox+1xEe2HnI4ZR0hhHmqstNvx3RmDtbLfe1SZvtn+2SKtgPW
xgdeH9C4NODngt/ltFOP6AyvPMt9fqqBIIxiN43m+lvch9Ok2x1k66mbYOhTXx6d
De+mQ0GYXTNm/rxBKoASWvMUGjbAFcQoTdLcwVtv9yB0mKKTu9XX7OJROyPtbFbR
jnvvEXvidP2RP1JsJhUn5m6E31Y1BLY5EXMZXzPPCLpx8UZzFeTUpeMFm9O439m5
cl3LSqAJSsoUPtYhclzWaUxz+pS61wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOMR
Ww3EEyUtp+u0h8XB2iiPqE2gMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNDQ1MDM5QTBBMTYxMUYwODRGN0IyNUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP8YMA0GCSqGSIb3DQEBCwUA
A4IBAQCXnoyn4XRVuTiIcdsdRbuO9Kruqj5KTpjl0e2jHZ+48JgM80ZoqHJRVooB
2VHsWQiIBKITQm/c0ANxKbB1venEx+tTkQislvV6GxGGdtaT87khSaVZTRcYVK0M
oHHF1TwyehCF+bXA4dprZu582HNVqjZoku/S1a28jWvPOQ2kb4mt1uQJGf4mwJjF
lk9wO7ufAjMLOBSQVQkdnSygwttRFatRNCDykSbl9ibpsBoeTFsgYHzmUl7HCDzo
hL+8S/45BbNx6cSV8RmTMItREGFtzjTkNGrSEDs93mQ1LNoigcIlsDl3X3jSM4v2
AtoKr57xo4E3QYLm3/V1K90ERaAv
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:06 2025 by rpki-client