Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A61AA2AE06C11EFBAC60B98762E951A.roa
File: 4A61AA2AE06C11EFBAC60B98762E951A.roa (raw, json)
Hash identifier: nFL4MRxXgxCXEqsxMTjsCOmye0owwULLN7DW0OCOmzE=
Subject key identifier: 54:56:5F:F6:78:75:C2:57:71:9C:99:51:72:8E:90:22:2B:29:CC:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011865
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A61AA2AE06C11EFBAC60B98762E951A.roa
Signing time: Sat 01 Feb 2025 07:15:18 +0000
ROA not before: Sat 01 Feb 2025 07:15:14 +0000
ROA not after: Thu 01 May 2025 07:15:14 +0000
asID: 328608
IP address blocks: 156.229.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71781 (0x11865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 1 07:15:14 2025 GMT
Not After : May 1 07:15:14 2025 GMT
Subject: CN=679dca06-a4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:c9:60:80:65:79:69:27:da:3e:4d:2d:14:
9e:ca:38:4e:aa:13:57:93:93:cf:6a:16:84:44:1e:
9a:b0:f6:40:b2:42:4f:d5:18:25:7d:c1:74:56:98:
12:45:cd:e5:12:1e:4a:3a:6f:e8:86:13:18:f8:42:
37:28:a7:b3:c2:54:56:f2:e8:bc:d5:d8:40:58:80:
66:49:c7:b5:d2:39:61:61:4b:d1:6c:11:ea:e8:c1:
41:7e:d4:46:38:7b:ba:ef:75:eb:13:6e:14:ca:01:
ae:33:97:25:66:45:dc:da:76:d3:53:50:e2:ba:5d:
19:15:30:23:a4:e5:5e:53:2c:b8:97:32:4f:49:ab:
4d:3f:e0:10:e3:32:6d:a0:48:91:04:8c:77:6b:5f:
14:32:6b:31:1c:19:52:9c:05:95:6c:c8:c3:dd:26:
b8:ab:37:7c:ef:2f:62:f9:32:93:77:58:4b:95:8c:
a7:66:82:ad:41:43:2a:a1:10:59:77:95:84:7f:33:
e6:bd:4d:71:c5:98:6c:b6:cf:29:f0:af:7e:b1:fa:
42:57:c1:70:79:4a:f9:0b:6c:59:06:1b:2c:b3:b6:
c9:73:11:0a:c2:b1:c0:48:b6:d9:aa:5d:58:26:45:
43:f8:0e:ea:0b:55:7d:27:8b:1f:03:a9:18:71:be:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:5F:F6:78:75:C2:57:71:9C:99:51:72:8E:90:22:2B:29:CC:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A61AA2AE06C11EFBAC60B98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.172.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:2f:6e:93:0f:af:cd:8b:9a:b8:b0:e1:86:4e:7a:28:66:65:
f1:41:bd:00:b7:d7:1f:ba:fa:6c:33:a1:e8:16:92:db:10:00:
83:e8:2b:9b:c6:6b:50:c8:a1:fd:3a:25:3d:0d:cb:2f:37:03:
c2:2e:de:f7:94:e3:d4:d7:ff:c8:e8:6b:06:2a:dd:95:f6:74:
98:fd:1b:79:a4:d0:25:ef:32:ee:a0:1b:66:6e:88:06:a9:02:
33:2b:6e:d5:14:5d:8b:ba:51:dd:b4:72:3e:d2:66:35:b0:db:
03:f1:d9:b1:b1:0c:85:5d:21:72:dc:01:7d:9e:62:41:4f:40:
24:4d:bb:ee:a5:92:15:d9:13:74:4f:f5:4e:f3:6e:bd:c3:d1:
bf:f0:70:3e:e6:ad:35:e6:c6:ff:19:6b:e6:d8:3f:c2:e4:2c:
92:88:b9:48:4a:fe:3c:49:ba:d0:8d:6a:19:c8:0a:e7:94:a1:
0d:fd:50:eb:60:0d:62:c3:c8:f0:2e:16:c0:6c:f0:d1:9a:56:
85:34:8f:eb:69:99:ad:0d:3f:c1:a6:2f:b8:3f:7d:d8:95:01:
1a:c8:0c:32:41:a6:2b:1e:4e:5e:fb:f4:73:e0:4e:bf:9e:c8:
0c:cc:93:fc:54:a2:69:12:8f:07:36:f7:e1:c7:58:fe:ba:cb:
f6:6f:47:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARhlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjAxMDcxNTE0WhcNMjUwNTAxMDcxNTE0WjAYMRYw
FAYDVQQDEw02NzlkY2EwNi1hNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApiDJYIBleWkn2j5NLRSeyjhOqhNXk5PPahaERB6asPZAskJP1RglfcF0
VpgSRc3lEh5KOm/ohhMY+EI3KKezwlRW8ui81dhAWIBmSce10jlhYUvRbBHq6MFB
ftRGOHu673XrE24UygGuM5clZkXc2nbTU1Diul0ZFTAjpOVeUyy4lzJPSatNP+AQ
4zJtoEiRBIx3a18UMmsxHBlSnAWVbMjD3Sa4qzd87y9i+TKTd1hLlYynZoKtQUMq
oRBZd5WEfzPmvU1xxZhsts8p8K9+sfpCV8FweUr5C2xZBhsss7bJcxEKwrHASLbZ
ql1YJkVD+A7qC1V9J4sfA6kYcb5IxQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFRW
X/Z4dcJXcZyZUXKOkCIrKczXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QTYxQUEyQUUwNkMxMUVGQkFDNjBCOTg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOWsMA0GCSqGSIb3DQEBCwUA
A4IBAQA6L26TD6/Ni5q4sOGGTnooZmXxQb0At9cfuvpsM6HoFpLbEACD6CubxmtQ
yKH9OiU9DcsvNwPCLt73lOPU1//I6GsGKt2V9nSY/Rt5pNAl7zLuoBtmbogGqQIz
K27VFF2LulHdtHI+0mY1sNsD8dmxsQyFXSFy3AF9nmJBT0AkTbvupZIV2RN0T/VO
8269w9G/8HA+5q015sb/GWvm2D/C5CySiLlISv48SbrQjWoZyArnlKEN/VDrYA1i
w8jwLhbAbPDRmlaFNI/raZmtDT/Bpi+4P33YlQEayAwyQaYrHk5e+/Rz4E6/nsgM
zJP8VKJpEo8HNvfhx1j+usv2b0cm
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:10 2025 by rpki-client