Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290860920CD811F08F8206BC762E951A.roa
File: 290860920CD811F08F8206BC762E951A.roa (raw, json)
Hash identifier: 6plD7rnFSPQGalFhh+CHtawo1hfon6gxyiYBYNMMqQ0=
Subject key identifier: F8:17:F8:14:3D:72:71:2E:77:5D:E3:81:18:CC:C4:95:3A:A8:E5:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014912
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290860920CD811F08F8206BC762E951A.roa
Signing time: Sat 29 Mar 2025 19:58:19 +0000
ROA not before: Sat 29 Mar 2025 19:58:15 +0000
ROA not after: Tue 08 Apr 2025 19:58:15 +0000
asID: 152092
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84242 (0x14912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 19:58:15 2025 GMT
Not After : Apr 8 19:58:15 2025 GMT
Subject: CN=67e850db-a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:35:fc:ba:a0:2a:0e:3d:f4:07:f8:88:f4:
1a:91:f3:e7:04:7b:39:05:dc:b1:9f:b2:20:bb:d3:
1e:56:2e:f2:70:c8:e1:7c:84:4f:a7:b9:94:4e:51:
6d:4b:0c:ea:64:6b:a5:08:03:c1:98:27:4e:02:f5:
c2:02:db:87:28:e4:75:71:09:cb:e0:96:64:ce:a8:
56:1e:31:50:d9:ad:4d:2d:d3:71:2f:9f:1a:e7:9b:
5b:44:af:5b:77:65:bc:b2:c6:1b:58:4b:52:bd:e7:
76:0e:6c:50:2f:ad:41:b9:79:fb:db:b7:f8:87:c4:
37:d1:9b:2d:d0:40:31:99:36:1e:fc:37:c1:8d:4a:
d3:cd:f7:46:c0:27:f7:52:7d:87:0e:cd:d2:27:d2:
83:de:ec:fa:b4:51:aa:e8:52:d6:f5:55:b5:bd:75:
28:77:cc:00:f5:e4:ce:15:18:87:4c:79:c9:c9:3e:
5a:b1:de:72:e6:2a:2f:a4:7a:05:43:0a:fe:16:c1:
02:f3:1d:c0:62:a6:a0:36:0e:88:99:a2:3e:e8:e5:
56:db:f8:ff:41:b5:8c:bf:17:d0:4a:e2:be:a6:a2:
0e:b1:d3:21:13:a6:80:7b:4e:a0:4f:2d:85:2b:86:
af:e6:d0:63:1d:52:7a:e9:e5:71:ac:e9:e4:01:21:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:F8:14:3D:72:71:2E:77:5D:E3:81:18:CC:C4:95:3A:A8:E5:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/290860920CD811F08F8206BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.198.0-156.245.203.255
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
81:45:b3:44:52:24:4c:91:55:8c:9d:81:e2:2c:f1:69:77:29:
6b:c4:ff:1c:d9:14:f1:b6:b8:15:31:3b:45:7d:b2:8c:01:31:
42:28:68:54:4c:5a:cd:72:58:11:b0:be:1b:11:7f:00:23:43:
e7:98:1b:ce:43:39:47:f1:0d:77:2b:fa:6d:3a:8f:5a:94:b2:
97:9f:ce:d1:c3:48:3b:bc:49:65:a3:b5:1e:56:4c:fe:dc:2c:
dd:dd:0c:2f:81:f3:ce:ba:3a:fb:41:42:7a:05:6b:e3:46:88:
eb:b6:a6:a3:65:1c:6c:7d:f0:9e:0c:4e:78:b0:ab:a3:f2:a7:
57:a9:fc:b9:57:84:71:2f:c4:3c:bc:55:47:06:cf:d9:4b:db:
d7:c6:40:0c:a7:e4:9e:09:b2:89:13:51:04:0b:94:ad:72:38:
e4:54:47:d0:21:a3:8e:ad:eb:d5:fd:73:b8:94:5e:a1:c2:6e:
3a:90:af:a3:bc:2c:91:a4:ae:1e:b5:fd:3d:c6:4d:62:46:df:
ac:37:9c:11:e0:1a:82:d3:fd:9e:af:42:35:85:7c:62:b9:94:
8b:57:32:91:e2:1d:45:7f:e0:a2:d3:7b:ab:90:f5:9d:69:4c:
76:ce:47:3e:6c:9f:5f:d5:7a:e9:78:d7:5f:20:d3:0a:29:1a:
d0:35:9a:4a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAUkSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI5MTk1ODE1WhcNMjUwNDA4MTk1ODE1WjAYMRYw
FAYDVQQDEw02N2U4NTBkYi1hNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6UU1/LqgKg499Af4iPQakfPnBHs5Bdyxn7Igu9MeVi7ycMjhfIRPp7mU
TlFtSwzqZGulCAPBmCdOAvXCAtuHKOR1cQnL4JZkzqhWHjFQ2a1NLdNxL58a55tb
RK9bd2W8ssYbWEtSved2DmxQL61BuXn727f4h8Q30Zst0EAxmTYe/DfBjUrTzfdG
wCf3Un2HDs3SJ9KD3uz6tFGq6FLW9VW1vXUod8wA9eTOFRiHTHnJyT5asd5y5iov
pHoFQwr+FsEC8x3AYqagNg6ImaI+6OVW2/j/QbWMvxfQSuK+pqIOsdMhE6aAe06g
Ty2FK4av5tBjHVJ66eVxrOnkASFYOQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPgX
+BQ9cnEud13jgRjMxJU6qOWkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOTA4NjA5MjBDRDgxMUYwOEY4MjA2QkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDnPWAMAwDBAGc9cYDBAKc9cgD
BACc9dEwDQYJKoZIhvcNAQELBQADggEBAIFFs0RSJEyRVYydgeIs8Wl3KWvE/xzZ
FPG2uBUxO0V9sowBMUIoaFRMWs1yWBGwvhsRfwAjQ+eYG85DOUfxDXcr+m06j1qU
spefztHDSDu8SWWjtR5WTP7cLN3dDC+B8866OvtBQnoFa+NGiOu2pqNlHGx98J4M
Tniwq6Pyp1ep/LlXhHEvxDy8VUcGz9lL29fGQAyn5J4JsokTUQQLlK1yOORUR9Ah
o46t69X9c7iUXqHCbjqQr6O8LJGkrh61/T3GTWJG36w3nBHgGoLT/Z6vQjWFfGK5
lItXMpHiHUV/4KLTe6uQ9Z1pTHbORz5sn1/Veul4118g0wopGtA1mko=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:10 2025 by rpki-client