Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544297C4D4B011EFBB1869A5762E951A.roa
File: 544297C4D4B011EFBB1869A5762E951A.roa (raw, json)
Hash identifier: LdLYbN0UQ2pe3vyIgMqXx2kQUTnxd05jcMIlC+znIMM=
Subject key identifier: 81:D6:AC:DA:54:A7:6F:56:D9:4B:15:FF:93:D3:A9:B8:40:A8:9B:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010949
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544297C4D4B011EFBB1869A5762E951A.roa
Signing time: Fri 17 Jan 2025 08:52:06 +0000
ROA not before: Fri 17 Jan 2025 08:52:03 +0000
ROA not after: Thu 17 Jul 2025 08:52:03 +0000
asID: 63199
IP address blocks: 156.240.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67913 (0x10949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 17 08:52:03 2025 GMT
Not After : Jul 17 08:52:03 2025 GMT
Subject: CN=678a1a36-df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:d0:d5:6c:37:91:1c:72:ef:61:46:ba:05:
f8:ac:95:2d:f8:b9:8b:20:9a:32:3a:5f:17:bd:eb:
54:2c:30:d3:cf:dd:ed:48:06:3b:bd:f3:30:90:21:
ad:21:8c:8e:6e:f2:b4:77:79:90:e4:23:f4:d7:d3:
b2:0c:86:c6:2a:63:5e:3b:06:e4:7d:6e:c0:52:b7:
45:c5:60:14:af:3e:a9:d4:58:d1:76:99:64:fc:63:
c3:04:66:3c:e8:bc:85:c6:e2:21:f3:df:a7:60:28:
df:5a:99:77:dc:df:3e:07:f9:25:74:f2:f2:33:cf:
d4:3c:86:24:c6:3f:71:56:63:38:17:75:5a:1d:60:
d0:0f:62:86:53:b1:c3:90:60:a3:d8:72:af:43:2a:
20:a6:fe:63:73:ba:2f:57:ad:8e:13:b5:5d:2b:08:
96:41:f2:4e:0c:a7:0a:9e:c7:87:07:e6:07:da:d9:
20:a3:2c:c8:d7:96:4c:13:39:18:b6:ac:63:61:65:
5b:fa:1f:2b:03:15:b9:18:50:bf:bd:a6:7f:43:20:
80:90:54:6d:e2:1c:5a:15:c5:2e:57:fa:05:40:ee:
44:cf:82:37:19:63:c6:11:7b:32:83:07:0f:96:ff:
0b:c0:55:87:73:b9:25:1f:51:0d:49:1f:97:9d:17:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:AC:DA:54:A7:6F:56:D9:4B:15:FF:93:D3:A9:B8:40:A8:9B:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544297C4D4B011EFBB1869A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.96.0/23
Signature Algorithm: sha256WithRSAEncryption
03:80:05:bf:f3:93:2c:71:ed:75:79:08:ce:f5:21:49:52:18:
59:0f:63:e8:ec:f3:a6:e0:63:ea:6f:99:24:9a:2d:0b:74:e8:
43:5f:c6:b9:74:86:91:5f:a4:f1:eb:4e:ee:5f:84:5f:60:d3:
ab:59:ad:c9:26:62:1a:4d:55:e4:4f:42:78:69:a8:2b:06:76:
b0:c0:2a:13:b5:80:b1:46:4e:6d:59:10:9f:69:16:e3:4d:b6:
5b:d5:00:03:13:11:52:e6:50:f3:71:4e:ac:2a:dd:8a:61:5c:
2f:e0:e2:53:ab:a5:ed:c4:4c:22:36:ee:4a:4b:17:3a:d9:c5:
08:98:3c:b8:1b:fa:03:e4:b3:d8:46:68:ae:30:09:5b:5c:10:
c0:eb:ce:6f:b4:03:da:75:c8:db:c2:1a:be:53:2a:5a:c0:33:
f3:7d:03:ca:02:21:b9:cf:fb:31:38:d7:d9:7c:74:09:47:ac:
ec:1e:4f:fc:df:ae:15:9a:a4:69:ab:aa:53:0b:04:17:d6:e0:
23:04:20:4b:06:64:a9:69:20:ea:92:04:29:fe:aa:68:17:f2:
00:3e:bc:b1:3e:f3:7d:69:f0:9a:6f:7f:37:4c:f8:1e:63:35:
1a:71:1a:83:d5:6f:54:5f:c4:36:9a:e3:48:a1:46:2b:45:09:
f1:16:ce:56
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQlJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE3MDg1MjAzWhcNMjUwNzE3MDg1MjAzWjAYMRYw
FAYDVQQDEw02NzhhMWEzNi1kZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvW/Q1Ww3kRxy72FGugX4rJUt+LmLIJoyOl8XvetULDDTz93tSAY7vfMw
kCGtIYyObvK0d3mQ5CP019OyDIbGKmNeOwbkfW7AUrdFxWAUrz6p1FjRdplk/GPD
BGY86LyFxuIh89+nYCjfWpl33N8+B/kldPLyM8/UPIYkxj9xVmM4F3VaHWDQD2KG
U7HDkGCj2HKvQyogpv5jc7ovV62OE7VdKwiWQfJODKcKnseHB+YH2tkgoyzI15ZM
EzkYtqxjYWVb+h8rAxW5GFC/vaZ/QyCAkFRt4hxaFcUuV/oFQO5Ez4I3GWPGEXsy
gwcPlv8LwFWHc7klH1ENSR+XnRcwgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIHW
rNpUp29W2UsV/5PTqbhAqJtYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NDQyOTdDNEQ0QjAxMUVGQkIxODY5QTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPBgMA0GCSqGSIb3DQEBCwUA
A4IBAQADgAW/85Msce11eQjO9SFJUhhZD2Po7POm4GPqb5kkmi0LdOhDX8a5dIaR
X6Tx607uX4RfYNOrWa3JJmIaTVXkT0J4aagrBnawwCoTtYCxRk5tWRCfaRbjTbZb
1QADExFS5lDzcU6sKt2KYVwv4OJTq6XtxEwiNu5KSxc62cUImDy4G/oD5LPYRmiu
MAlbXBDA685vtAPadcjbwhq+UypawDPzfQPKAiG5z/sxONfZfHQJR6zsHk/8364V
mqRpq6pTCwQX1uAjBCBLBmSpaSDqkgQp/qpoF/IAPryxPvN9afCab383TPgeYzUa
cRqD1W9UX8Q2muNIoUYrRQnxFs5W
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:28 2025 by rpki-client