Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50FF55FAF46A11EF991F5C6D762E951A.roa
File: 50FF55FAF46A11EF991F5C6D762E951A.roa (raw, json)
Hash identifier: w8mZQGIYfrCevqPghsjZAfWYM2pOmgUm41T8sNz8GD0=
Subject key identifier: BE:2B:2E:F8:EA:16:D6:A9:A0:82:82:05:09:83:3C:0B:FA:76:06:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50FF55FAF46A11EF991F5C6D762E951A.roa
Signing time: Wed 26 Feb 2025 17:51:33 +0000
ROA not before: Wed 26 Feb 2025 17:51:30 +0000
ROA not after: Sat 19 Feb 2028 17:51:30 +0000
asID: 17561
IP address blocks: 156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79336 (0x135e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:51:30 2025 GMT
Not After : Feb 19 17:51:30 2028 GMT
Subject: CN=67bf54a5-0fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:71:61:43:83:7c:a6:be:ed:5f:24:aa:6a:
21:08:3e:f4:6b:82:87:f7:42:70:2b:62:02:7f:2b:
8e:cf:7c:63:86:61:b6:a6:c1:fc:e2:5a:c6:1b:fc:
91:df:7a:dd:db:c6:f5:7e:5e:5b:94:b4:1e:28:76:
71:4c:40:c7:2d:00:39:eb:f5:ba:17:0c:e0:f2:46:
dd:1e:9e:9c:a7:b3:2a:6b:18:a3:f9:72:34:78:51:
f3:4b:6e:33:ea:05:9d:c1:7d:8b:04:06:d7:f3:22:
6e:32:45:37:42:22:30:4a:cf:25:65:75:be:fd:31:
9e:11:b2:c3:92:84:1f:43:1a:f0:99:30:ac:de:97:
36:ae:c5:3d:8c:ff:1d:76:95:24:24:2f:55:aa:87:
39:95:1d:1e:43:13:68:96:6f:95:b4:39:18:45:2b:
4e:75:a4:2e:57:b3:03:53:a6:35:20:1b:10:ca:b8:
42:83:e3:72:a3:ee:e4:eb:28:97:5c:b0:14:95:19:
8f:ef:77:2f:fe:38:a8:5e:2e:7c:a9:75:0b:28:79:
82:25:c3:18:59:d2:0f:7a:95:ad:9b:09:65:14:b8:
80:11:84:43:d0:9c:a7:1b:0e:43:19:85:b2:8b:62:
ca:fe:95:5d:e9:6a:f5:02:f5:52:57:c1:33:47:55:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:2E:F8:EA:16:D6:A9:A0:82:82:05:09:83:3C:0B:FA:76:06:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50FF55FAF46A11EF991F5C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.105.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f0:a1:6a:34:9e:bb:36:8f:00:a6:68:5b:7f:21:14:f5:b5:
2e:36:dd:a1:8b:45:9b:83:26:74:49:4c:84:dd:c6:59:fc:9d:
a9:ec:76:47:22:6d:c9:7c:ed:5e:b7:e8:d8:6b:9e:f3:fb:44:
94:ba:2b:10:c4:35:a8:a3:ea:64:e0:31:90:b4:ab:b3:f8:1c:
28:62:37:f0:50:4d:f1:5f:f5:ee:00:94:0e:c7:76:4c:af:0a:
0e:22:1a:c6:c0:73:10:1d:f9:7f:3f:13:35:42:8d:9c:f6:4a:
05:d0:23:66:09:63:4d:8b:bf:8b:d7:a8:80:ec:ad:7f:1d:63:
3e:b6:60:47:c1:4a:29:79:f5:d3:b7:27:ae:7a:b4:e3:7b:47:
e9:b0:f1:c8:aa:07:62:dc:c1:37:df:f1:ad:a7:6b:5d:95:d8:
71:3b:07:e7:f5:23:7b:3f:8f:bc:a8:79:5b:37:5c:9f:30:db:
4b:31:fe:a2:45:ae:b7:a5:19:22:f9:bb:04:96:a3:7b:49:ce:
c1:85:76:24:77:82:70:8c:a6:41:dd:55:d6:b1:65:a9:f9:7c:
ce:d8:36:40:fd:e6:7b:fd:c0:7b:3a:32:bb:4e:19:2b:29:18:
96:fd:a0:f1:0b:9b:a9:20:4a:a1:54:09:5f:8f:63:3d:2d:9d:
66:75:8b:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATXoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTc1MTMwWhcNMjgwMjE5MTc1MTMwWjAYMRYw
FAYDVQQDEw02N2JmNTRhNS0wZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs9pxYUODfKa+7V8kqmohCD70a4KH90JwK2ICfyuOz3xjhmG2psH84lrG
G/yR33rd28b1fl5blLQeKHZxTEDHLQA56/W6Fwzg8kbdHp6cp7Mqaxij+XI0eFHz
S24z6gWdwX2LBAbX8yJuMkU3QiIwSs8lZXW+/TGeEbLDkoQfQxrwmTCs3pc2rsU9
jP8ddpUkJC9Vqoc5lR0eQxNolm+VtDkYRStOdaQuV7MDU6Y1IBsQyrhCg+Nyo+7k
6yiXXLAUlRmP73cv/jioXi58qXULKHmCJcMYWdIPepWtmwllFLiAEYRD0JynGw5D
GYWyi2LK/pVd6Wr1AvVSV8EzR1WmVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL4r
LvjqFtapoIKCBQmDPAv6dgY5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MEZGNTVGQUY0NkExMUVGOTkxRjVDNkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlpMA0GCSqGSIb3DQEBCwUA
A4IBAQAy8KFqNJ67No8ApmhbfyEU9bUuNt2hi0WbgyZ0SUyE3cZZ/J2p7HZHIm3J
fO1et+jYa57z+0SUuisQxDWoo+pk4DGQtKuz+BwoYjfwUE3xX/XuAJQOx3ZMrwoO
IhrGwHMQHfl/PxM1Qo2c9koF0CNmCWNNi7+L16iA7K1/HWM+tmBHwUopefXTtyeu
erTje0fpsPHIqgdi3ME33/Gtp2tdldhxOwfn9SN7P4+8qHlbN1yfMNtLMf6iRa63
pRki+bsElqN7Sc7BhXYkd4JwjKZB3VXWsWWp+XzO2DZA/eZ7/cB7OjK7ThkrKRiW
/aDxC5upIEqhVAlfj2M9LZ1mdYuU
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:22 2025 by rpki-client