Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47090140F42E11EFA111C949762E951A.roa
File: 47090140F42E11EFA111C949762E951A.roa (raw, json)
Hash identifier: OugOwXZatH1YczA9cZ3PwPzZjAXcj12ydLqUuHPtNw8=
Subject key identifier: F8:B6:18:7F:78:01:CE:A6:45:42:85:2E:2B:15:0B:A7:73:E3:DC:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01314A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47090140F42E11EFA111C949762E951A.roa
Signing time: Wed 26 Feb 2025 10:41:47 +0000
ROA not before: Wed 26 Feb 2025 10:41:43 +0000
ROA not after: Thu 19 Feb 2026 10:41:43 +0000
asID: 328608
IP address blocks: 156.253.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78154 (0x1314a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:41:43 2025 GMT
Not After : Feb 19 10:41:43 2026 GMT
Subject: CN=67beefeb-3c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:84:d8:fc:5b:82:49:3d:8e:75:f4:57:fc:
cd:74:f9:c0:9c:23:d2:b5:79:1c:1c:6b:d4:4f:9b:
b5:9c:34:5b:99:dc:88:ad:c3:3d:42:6b:63:71:31:
8a:62:51:1a:03:16:3a:cb:ea:71:31:42:cb:aa:8c:
1a:68:2d:61:98:30:05:e5:2e:7d:87:07:84:4f:1d:
b4:85:57:2a:47:c9:09:cc:af:73:93:18:67:aa:f9:
5e:5f:f7:93:9d:f2:fd:9c:09:47:ba:af:8b:7d:fa:
4e:de:cb:10:11:e1:47:5c:bd:d4:3a:46:e9:f3:55:
22:30:d3:eb:1f:c0:a4:d5:71:a8:1a:5c:3b:38:b0:
ad:74:4b:ee:dd:ba:67:b4:6a:ac:bd:14:d9:aa:d1:
b4:dd:8a:ad:ff:dd:53:0c:a0:f8:48:9d:29:18:83:
ba:ad:c1:70:a8:e8:46:f2:7d:db:04:d1:c9:3d:7e:
74:af:25:9f:0b:26:cb:54:66:83:c2:93:c2:34:56:
e9:61:03:db:aa:66:93:dc:da:bf:55:a4:ec:02:e2:
11:11:b5:0e:ce:dc:b8:60:85:40:80:db:38:25:4b:
49:39:1d:4d:b1:07:02:a9:e1:92:a9:70:ec:f0:6e:
3d:dc:d9:f3:3f:3d:b0:58:2f:90:8e:b3:68:8f:9a:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:18:7F:78:01:CE:A6:45:42:85:2E:2B:15:0B:A7:73:E3:DC:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47090140F42E11EFA111C949762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.188.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8d:c0:f4:0d:ca:30:d2:dc:fa:a6:21:65:c5:34:e1:49:01:
3b:5f:bd:a6:54:2a:f4:10:24:aa:8f:05:70:a6:63:fb:b4:14:
a7:c0:85:36:3b:63:ff:72:80:f5:3e:02:35:b6:48:92:00:c3:
55:61:38:b0:3c:4a:e1:96:82:d1:0b:28:86:ef:23:8d:af:48:
50:53:c4:fe:bf:b8:2a:42:8d:d1:67:09:92:db:c0:18:05:be:
64:28:2b:fa:11:34:e3:1b:9f:19:28:72:f6:9c:8f:a3:4a:70:
54:ee:65:e8:3e:69:e4:6c:ae:01:df:b7:45:a5:09:22:ef:ef:
f6:1e:e3:c2:29:19:45:e5:f8:7b:1f:fb:d6:7a:e6:ef:af:75:
3d:ef:31:81:61:97:26:1d:87:b2:ca:47:ce:cf:c2:15:7b:4a:
09:76:24:bf:d4:c1:e8:37:e4:4f:be:8d:2d:d0:40:a9:a0:51:
86:dd:19:6b:12:f7:8a:33:9c:ba:ee:58:57:4a:cf:dd:d6:cd:
6c:b4:59:7c:c9:d9:b1:c3:3f:e8:e4:16:ff:a4:cf:64:c3:46:
bb:f9:a8:39:91:ad:1e:f0:f5:ab:87:6f:cb:72:c5:0e:a3:83:
45:6c:c9:56:9b:bb:b8:f6:33:62:c9:19:0a:2d:be:6a:dd:24:
06:0b:a6:5b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATFKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTA0MTQzWhcNMjYwMjE5MTA0MTQzWjAYMRYw
FAYDVQQDEw02N2JlZWZlYi0zYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0J6E2Pxbgkk9jnX0V/zNdPnAnCPStXkcHGvUT5u1nDRbmdyIrcM9Qmtj
cTGKYlEaAxY6y+pxMULLqowaaC1hmDAF5S59hweETx20hVcqR8kJzK9zkxhnqvle
X/eTnfL9nAlHuq+LffpO3ssQEeFHXL3UOkbp81UiMNPrH8Ck1XGoGlw7OLCtdEvu
3bpntGqsvRTZqtG03Yqt/91TDKD4SJ0pGIO6rcFwqOhG8n3bBNHJPX50ryWfCybL
VGaDwpPCNFbpYQPbqmaT3Nq/VaTsAuIREbUOzty4YIVAgNs4JUtJOR1NsQcCqeGS
qXDs8G493NnzPz2wWC+QjrNoj5o84QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPi2
GH94Ac6mRUKFLisVC6dz49wjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NzA5MDE0MEY0MkUxMUVGQTExMUM5NDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP28MA0GCSqGSIb3DQEBCwUA
A4IBAQCRjcD0Dcow0tz6piFlxTThSQE7X72mVCr0ECSqjwVwpmP7tBSnwIU2O2P/
coD1PgI1tkiSAMNVYTiwPErhloLRCyiG7yONr0hQU8T+v7gqQo3RZwmS28AYBb5k
KCv6ETTjG58ZKHL2nI+jSnBU7mXoPmnkbK4B37dFpQki7+/2HuPCKRlF5fh7H/vW
eubvr3U97zGBYZcmHYeyykfOz8IVe0oJdiS/1MHoN+RPvo0t0ECpoFGG3RlrEveK
M5y67lhXSs/d1s1stFl8ydmxwz/o5Bb/pM9kw0a7+ag5ka0e8PWrh2/LcsUOo4NF
bMlWm7u49jNiyRkKLb5q3SQGC6Zb
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:56 2025 by rpki-client