Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/316924BAFFE011EFB8405FA7762E951A.roa
File: 316924BAFFE011EFB8405FA7762E951A.roa (raw, json)
Hash identifier: G5ly4YS+tqKdVgr58GOggCatQ/pkCTTnYPHFvm9I15E=
Subject key identifier: 8E:44:1D:C2:94:CA:23:B4:11:64:44:FB:A0:A9:D3:36:3C:C9:CE:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014583
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/316924BAFFE011EFB8405FA7762E951A.roa
Signing time: Thu 13 Mar 2025 07:53:04 +0000
ROA not before: Thu 13 Mar 2025 07:53:00 +0000
ROA not after: Sun 13 Apr 2025 07:53:00 +0000
asID: 20473
IP address blocks: 156.231.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83331 (0x14583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 07:53:00 2025 GMT
Not After : Apr 13 07:53:00 2025 GMT
Subject: CN=67d28ee0-4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:6f:8a:21:50:73:0d:e9:b5:bb:19:51:f2:
ed:78:70:04:da:ee:35:c4:15:d1:d4:e6:55:2b:38:
69:25:54:1d:bc:4c:42:fb:0e:e9:3b:53:0f:db:35:
9d:cd:16:f2:ef:55:7f:91:14:a9:9f:23:9a:7f:e4:
9a:f3:63:a8:0d:8b:06:b9:ec:32:69:7e:e3:13:24:
d4:7f:35:e7:f1:c5:ca:e5:b5:a3:e2:33:3a:91:ec:
bc:c3:58:aa:d6:c6:72:18:56:c2:48:93:96:16:cc:
b2:24:1f:62:78:96:f0:08:f5:b8:fc:c1:71:dc:c3:
6b:12:ab:ba:9c:97:fd:74:75:12:06:62:cb:db:b9:
6d:dd:6e:df:50:37:8f:13:e3:72:7e:fc:05:c5:10:
c6:87:d2:15:fa:08:b9:0e:54:dd:65:bd:ec:49:0a:
4f:e6:a4:87:21:12:a2:b4:c7:7a:e5:63:7b:79:fa:
ec:2c:d4:e6:08:0a:5e:e5:c6:5a:e4:0c:a0:52:b2:
e4:94:5f:55:75:09:66:b4:18:d7:9c:b5:16:e4:c3:
4c:df:b9:7c:c2:d8:8e:14:c7:5b:fe:17:c5:77:78:
0d:25:96:c6:55:db:db:f0:4c:d6:2a:43:58:f4:80:
f3:ff:b2:a1:2a:87:76:90:5d:2f:c1:fb:38:f5:c6:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:1D:C2:94:CA:23:B4:11:64:44:FB:A0:A9:D3:36:3C:C9:CE:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/316924BAFFE011EFB8405FA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:18:8c:b2:cd:b1:5e:d3:21:81:72:e8:1a:75:72:47:28:86:
b9:7d:79:14:39:f9:a7:05:2e:80:0b:41:0d:f8:ee:6b:38:4a:
0f:03:56:7e:c6:c3:07:e8:87:0b:4c:b5:9d:cc:d2:87:32:05:
d2:92:39:6c:03:04:15:3f:68:16:29:32:35:25:1a:02:60:1c:
18:80:3d:3a:36:13:8d:f8:39:0a:00:9b:fb:c9:b4:db:b0:c2:
f3:75:e5:56:67:bf:d9:f9:28:8b:2e:16:72:65:36:c6:1a:b9:
09:45:ad:f1:71:18:aa:9a:aa:43:f8:37:d6:f7:0d:14:01:fa:
a7:d0:b6:f7:31:8e:75:49:1b:3f:0f:a1:c7:13:66:12:88:0a:
57:dd:76:1c:24:1e:ec:ea:15:a0:f1:52:75:c3:63:0d:55:be:
7c:70:15:0a:87:88:64:e5:fd:17:00:cc:14:16:5b:c1:64:e5:
e8:d8:37:18:4d:9f:78:f9:6f:c6:2a:a3:9e:55:f3:3a:7a:10:
61:87:b0:da:53:72:d9:30:8d:f7:7e:82:ef:eb:10:41:91:43:
96:d4:0d:71:92:63:a4:64:a7:eb:4b:dd:11:c3:a8:a6:d0:bb:
18:d3:5d:5e:40:f9:4f:b6:39:5b:6a:dd:23:ca:57:02:7a:28:
d4:95:f4:7f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUWDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEzMDc1MzAwWhcNMjUwNDEzMDc1MzAwWjAYMRYw
FAYDVQQDEw02N2QyOGVlMC00YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ThviiFQcw3ptbsZUfLteHAE2u41xBXR1OZVKzhpJVQdvExC+w7pO1MP
2zWdzRby71V/kRSpnyOaf+Sa82OoDYsGuewyaX7jEyTUfzXn8cXK5bWj4jM6key8
w1iq1sZyGFbCSJOWFsyyJB9ieJbwCPW4/MFx3MNrEqu6nJf9dHUSBmLL27lt3W7f
UDePE+NyfvwFxRDGh9IV+gi5DlTdZb3sSQpP5qSHIRKitMd65WN7efrsLNTmCApe
5cZa5AygUrLklF9VdQlmtBjXnLUW5MNM37l8wtiOFMdb/hfFd3gNJZbGVdvb8EzW
KkNY9IDz/7KhKod2kF0vwfs49cYBVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI5E
HcKUyiO0EWRE+6Cp0zY8yc53MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMTY5MjRCQUZGRTAxMUVGQjg0MDVGQTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOcKMA0GCSqGSIb3DQEBCwUA
A4IBAQBcGIyyzbFe0yGBcugadXJHKIa5fXkUOfmnBS6AC0EN+O5rOEoPA1Z+xsMH
6IcLTLWdzNKHMgXSkjlsAwQVP2gWKTI1JRoCYBwYgD06NhON+DkKAJv7ybTbsMLz
deVWZ7/Z+SiLLhZyZTbGGrkJRa3xcRiqmqpD+DfW9w0UAfqn0Lb3MY51SRs/D6HH
E2YSiApX3XYcJB7s6hWg8VJ1w2MNVb58cBUKh4hk5f0XAMwUFlvBZOXo2DcYTZ94
+W/GKqOeVfM6ehBhh7DaU3LZMI33foLv6xBBkUOW1A1xkmOkZKfrS90Rw6im0LsY
011eQPlPtjlbat0jylcCeijUlfR/
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:34 2025 by rpki-client