Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFF3D40F64D11EFBC47C573762E951A.roa
File: 2FFF3D40F64D11EFBC47C573762E951A.roa (raw, json)
Hash identifier: jI2nzdQOqRFSLk5pE27/ssGf5GFsorI+iVYubGvim5A=
Subject key identifier: 7D:33:E0:71:00:25:56:B4:F8:6B:0D:77:91:F9:60:CA:07:8C:B3:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFF3D40F64D11EFBC47C573762E951A.roa
Signing time: Sat 01 Mar 2025 03:28:05 +0000
ROA not before: Sat 01 Mar 2025 03:28:01 +0000
ROA not after: Wed 01 Mar 2028 03:28:01 +0000
asID: 17561
IP address blocks: 156.243.218.0/24 maxlen: 24
156.246.72.0/24 maxlen: 24
156.246.73.0/24 maxlen: 24
156.246.74.0/24 maxlen: 24
156.246.79.0/24 maxlen: 24
156.253.61.0/24 maxlen: 24
156.253.62.0/24 maxlen: 24
156.253.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81798 (0x13f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 1 03:28:01 2025 GMT
Not After : Mar 1 03:28:01 2028 GMT
Subject: CN=67c27ec5-09da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:a3:83:2b:e3:2a:1a:ca:2f:f7:fb:e5:ee:
ed:fc:08:0b:87:05:1c:ea:75:58:04:39:b5:1f:12:
6e:86:ca:a8:5f:cc:35:dc:dd:9c:9a:94:74:80:b5:
dd:fc:ac:60:65:7d:a0:cb:7b:1e:3f:d4:17:a6:36:
c2:bb:f0:ad:29:7b:92:52:d1:8d:cf:ee:46:95:ac:
52:9e:77:2e:ee:de:cc:f0:71:57:a0:ed:1e:de:c5:
e6:30:0b:5a:e5:d3:3e:80:51:10:32:98:8e:ac:c9:
e9:c6:9b:e5:e5:69:68:1d:7f:e9:ff:46:f5:f9:6f:
78:0a:19:82:73:2a:01:92:9a:8c:23:29:9e:40:24:
20:e9:71:75:c9:a1:bc:29:3a:e6:c6:4a:4d:97:7a:
06:fa:a4:52:a3:ea:9d:92:ed:44:dd:d2:16:c6:1c:
e4:37:49:18:32:14:d6:62:58:63:f4:f0:5d:d1:ca:
61:4a:2b:c5:bf:2f:12:1c:83:f5:22:2c:12:fc:a7:
55:8e:62:bd:f2:e4:34:5f:a7:76:fe:79:ed:ed:1a:
70:2d:d8:16:8c:6a:cc:62:1c:55:98:f7:21:1d:a1:
86:23:9a:b6:ab:3b:d7:7e:4c:2c:f4:32:17:32:e0:
1e:33:42:42:6a:f5:f7:de:69:59:96:e9:e3:b1:d1:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:33:E0:71:00:25:56:B4:F8:6B:0D:77:91:F9:60:CA:07:8C:B3:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFF3D40F64D11EFBC47C573762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.218.0/24
156.246.72.0-156.246.74.255
156.246.79.0/24
156.253.61.0-156.253.63.255
Signature Algorithm: sha256WithRSAEncryption
60:32:96:43:a9:3a:f6:48:71:96:5c:7d:11:05:e6:b6:89:a6:
fc:cf:b0:93:b0:59:58:13:0b:93:85:cd:0f:7b:5a:ed:79:2d:
71:ce:da:b3:92:9b:b7:f7:b0:1d:05:6b:e3:4d:ed:61:bc:41:
f3:63:8c:fb:46:e0:86:d6:79:b9:4b:cf:d5:00:b2:7c:9d:6c:
80:c4:3e:4a:22:d6:22:57:51:ed:3e:32:0b:e2:cc:96:e3:dc:
66:bf:b0:f8:39:d5:e3:b7:55:5c:d5:fe:12:7f:11:9d:67:5d:
6d:10:a6:6f:07:cf:e2:0a:14:13:73:13:fc:43:ca:42:fa:6f:
26:22:97:5e:75:e5:9a:d4:d7:24:73:2a:fa:84:e4:80:91:1c:
c4:55:4e:32:69:a5:a2:e0:54:39:67:7b:7f:1c:52:5a:b6:0f:
c1:c0:16:b9:2c:07:15:35:74:55:d9:96:e0:34:c8:9f:35:13:
07:15:63:01:bf:2d:f4:69:c5:7c:75:5e:ab:f9:15:5e:c1:4d:
f5:ec:c0:7b:87:c4:1e:ff:5a:bd:6a:79:c9:6e:66:97:56:96:
a6:4b:b8:cf:db:9d:57:f7:50:96:4a:b3:78:1d:51:a2:48:c3:
71:65:f3:16:c0:10:56:66:f2:0b:c3:2e:86:e0:3c:88:6d:ae:
2e:17:3e:ee
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAT+GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAxMDMyODAxWhcNMjgwMzAxMDMyODAxWjAYMRYw
FAYDVQQDEw02N2MyN2VjNS0wOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo2OjgyvjKhrKL/f75e7t/AgLhwUc6nVYBDm1HxJuhsqoX8w13N2cmpR0
gLXd/KxgZX2gy3seP9QXpjbCu/CtKXuSUtGNz+5GlaxSnncu7t7M8HFXoO0e3sXm
MAta5dM+gFEQMpiOrMnpxpvl5WloHX/p/0b1+W94ChmCcyoBkpqMIymeQCQg6XF1
yaG8KTrmxkpNl3oG+qRSo+qdku1E3dIWxhzkN0kYMhTWYlhj9PBd0cphSivFvy8S
HIP1IiwS/KdVjmK98uQ0X6d2/nnt7RpwLdgWjGrMYhxVmPchHaGGI5q2qzvXfkws
9DIXMuAeM0JCavX33mlZlunjsdHTJwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFH0z
4HEAJVa0+GsNd5H5YMoHjLPYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRkZGM0Q0MEY2NEQxMUVGQkM0N0M1NzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAnPPaMAwDBAOc9kgDBACc9koD
BACc9k8wDAMEAJz9PQMEBpz9ADANBgkqhkiG9w0BAQsFAAOCAQEAYDKWQ6k69khx
llx9EQXmtomm/M+wk7BZWBMLk4XND3ta7Xktcc7as5Kbt/ewHQVr403tYbxB82OM
+0bghtZ5uUvP1QCyfJ1sgMQ+SiLWIldR7T4yC+LMluPcZr+w+DnV47dVXNX+En8R
nWddbRCmbwfP4goUE3MT/EPKQvpvJiKXXnXlmtTXJHMq+oTkgJEcxFVOMmmlouBU
OWd7fxxSWrYPwcAWuSwHFTV0VdmW4DTInzUTBxVjAb8t9GnFfHVeq/kVXsFN9ezA
e4fEHv9avWp5yW5ml1aWpku4z9udV/dQlkqzeB1RokjDcWXzFsAQVmbyC8MuhuA8
iG2uLhc+7g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client