Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C4A02B20F9911F0AB88C982762E951A.roa
File: 5C4A02B20F9911F0AB88C982762E951A.roa (raw, json)
Hash identifier: GpmF3KUR234dyxokTt92btps/9ozHBfOU0afFwtv0xk=
Subject key identifier: 51:A1:2C:D8:4B:82:6F:34:85:F8:B7:F2:8C:49:AD:4A:5A:8C:7C:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01495B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C4A02B20F9911F0AB88C982762E951A.roa
Signing time: Wed 02 Apr 2025 08:06:20 +0000
ROA not before: Wed 02 Apr 2025 08:06:16 +0000
ROA not after: Sun 11 May 2025 08:06:16 +0000
asID: 29802
IP address blocks: 156.238.117.0/24 maxlen: 24
156.239.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84315 (0x1495b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:06:16 2025 GMT
Not After : May 11 08:06:16 2025 GMT
Subject: CN=67eceffc-fbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:7c:72:7d:69:38:72:8e:f4:de:6c:58:4c:
1f:d2:a9:c0:09:7b:23:69:96:d6:4f:ca:f7:a6:e9:
88:ea:91:fc:34:67:b6:c1:fd:44:b9:d0:c7:77:9a:
0b:b9:ad:90:db:45:99:34:77:eb:4c:50:54:aa:ed:
f3:e3:fc:41:23:44:12:8e:02:f8:bf:e1:18:36:2a:
12:e3:a3:2a:0e:74:30:80:89:ca:78:77:84:fe:2f:
d4:63:d1:4c:11:22:45:b2:fe:28:d8:8c:22:04:37:
4b:4d:3c:da:ff:94:ea:b3:ca:0f:80:f0:02:9b:a5:
f5:83:6e:e7:f5:9d:8f:10:be:76:4a:6d:56:1c:83:
1d:c0:f2:02:b9:34:1a:4b:c4:c9:26:25:c1:fb:ad:
2e:9e:65:ad:c9:b0:54:97:91:54:d4:7b:c5:56:01:
04:a1:5c:8f:c7:fd:43:92:d3:37:36:13:74:61:0e:
3a:16:f3:79:be:26:48:38:67:0d:21:03:75:19:8a:
66:a9:85:a0:ce:40:43:7d:04:0d:88:ac:e6:69:ef:
e9:66:c8:01:c2:93:c2:e1:d6:a4:44:8e:e1:48:20:
08:20:8c:22:bf:86:55:a1:90:93:7c:49:6a:05:f7:
db:53:45:1c:8c:df:6e:85:93:ba:8d:9a:bb:c0:32:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:2C:D8:4B:82:6F:34:85:F8:B7:F2:8C:49:AD:4A:5A:8C:7C:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5C4A02B20F9911F0AB88C982762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.117.0/24
156.239.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3e:73:1e:25:63:aa:be:2e:43:57:71:30:ec:d9:55:19:9a:
bc:8a:b5:51:56:42:48:56:a4:e0:4e:93:1e:0d:b9:fa:c2:38:
3b:27:1c:22:4c:f8:0d:21:f4:a8:57:e0:36:e5:b8:5d:cd:b0:
3b:53:c9:e8:f6:c1:bd:67:4d:67:36:3c:4c:1a:97:51:62:71:
d8:9e:45:8f:b4:99:19:33:f8:40:b9:d7:6a:a3:93:62:7e:99:
fb:de:28:d9:c9:ef:78:6c:7c:3e:c5:2d:7f:b3:3f:5e:95:d0:
b2:6f:74:b7:fd:ff:ea:e0:0d:ee:0e:07:04:be:f5:19:5e:67:
68:7e:6b:6a:04:a8:db:d3:30:8b:41:a7:78:5c:ad:97:b7:60:
d9:5b:16:a0:ee:81:3e:21:49:2f:45:f2:55:5c:23:80:33:34:
ed:21:d2:62:c7:0d:6d:46:6c:40:3f:8d:35:be:a6:64:18:7a:
71:1a:fe:31:36:1d:c6:09:98:3a:e3:10:d8:ef:f3:f7:4e:ff:
8f:18:5d:c3:5a:50:f2:8f:2c:52:cb:4b:bd:ec:22:0c:32:b7:
35:ff:14:4b:4b:1b:b4:2a:37:8e:ba:69:e6:2d:7d:d0:5b:e7:
82:e7:30:2f:1b:50:b6:9b:1c:1c:85:73:80:9b:dc:9a:53:db:
96:92:99:0b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUlbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDAyMDgwNjE2WhcNMjUwNTExMDgwNjE2WjAYMRYw
FAYDVQQDEw02N2VjZWZmYy1mYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqSt8cn1pOHKO9N5sWEwf0qnACXsjaZbWT8r3pumI6pH8NGe2wf1EudDH
d5oLua2Q20WZNHfrTFBUqu3z4/xBI0QSjgL4v+EYNioS46MqDnQwgInKeHeE/i/U
Y9FMESJFsv4o2IwiBDdLTTza/5Tqs8oPgPACm6X1g27n9Z2PEL52Sm1WHIMdwPIC
uTQaS8TJJiXB+60unmWtybBUl5FU1HvFVgEEoVyPx/1DktM3NhN0YQ46FvN5viZI
OGcNIQN1GYpmqYWgzkBDfQQNiKzmae/pZsgBwpPC4dakRI7hSCAIIIwiv4ZVoZCT
fElqBffbU0UcjN9uhZO6jZq7wDL6AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGh
LNhLgm80hfi38oxJrUpajHzXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QzRBMDJCMjBGOTkxMUYwQUI4OEM5ODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnO51AwQAnO82MA0GCSqGSIb3
DQEBCwUAA4IBAQBPPnMeJWOqvi5DV3Ew7NlVGZq8irVRVkJIVqTgTpMeDbn6wjg7
JxwiTPgNIfSoV+A25bhdzbA7U8no9sG9Z01nNjxMGpdRYnHYnkWPtJkZM/hAuddq
o5Nifpn73ijZye94bHw+xS1/sz9eldCyb3S3/f/q4A3uDgcEvvUZXmdofmtqBKjb
0zCLQad4XK2Xt2DZWxag7oE+IUkvRfJVXCOAMzTtIdJixw1tRmxAP401vqZkGHpx
Gv4xNh3GCZg64xDY7/P3Tv+PGF3DWlDyjyxSy0u97CIMMrc1/xRLSxu0KjeOumnm
LX3QW+eC5zAvG1C2mxwchXOAm9yaU9uWkpkL
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:46 2025 by rpki-client