Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F9D8FCF42211EFB2CCF374762E951A.roa
File: 64F9D8FCF42211EFB2CCF374762E951A.roa (raw, json)
Hash identifier: zOARvA5LdDk8p4hMT/QPKt7bhRioZg9pw9vgyj9drYI=
Subject key identifier: DA:D6:87:02:69:8F:C2:31:85:ED:7E:96:E9:72:6A:6E:AE:25:12:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01305B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F9D8FCF42211EFB2CCF374762E951A.roa
Signing time: Wed 26 Feb 2025 09:16:43 +0000
ROA not before: Wed 26 Feb 2025 09:16:40 +0000
ROA not after: Thu 19 Feb 2026 09:16:40 +0000
asID: 984
IP address blocks: 156.230.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77915 (0x1305b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:16:40 2025 GMT
Not After : Feb 19 09:16:40 2026 GMT
Subject: CN=67bedbfb-4a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:99:6e:db:80:49:c5:b5:59:1a:f1:9b:bc:
38:fe:b3:b7:4e:35:9e:22:d6:0d:e6:a7:d0:bb:6f:
41:a3:d5:a2:70:d8:cf:ca:28:e2:16:9f:09:ca:27:
eb:bd:11:f6:e2:82:3f:02:1c:e4:29:cd:d4:56:f2:
05:66:12:91:aa:47:ed:d2:9c:4b:56:73:2d:e7:a7:
a9:01:1b:b6:0f:f0:03:b1:58:b2:60:c0:95:9d:b9:
8d:2e:d8:8e:0a:3c:80:59:15:e4:77:64:5a:93:20:
e3:00:6c:20:c8:13:27:21:a2:2b:3c:ac:69:b6:44:
3a:40:6a:c0:75:1e:e8:14:15:93:94:2e:78:06:64:
bd:82:ee:e6:d0:6e:9b:b8:9b:46:56:3a:ef:ca:1e:
94:18:22:e6:fd:88:e7:63:fc:56:a8:64:f0:f6:dd:
f3:31:71:65:64:ba:1a:aa:62:cc:91:cf:b8:73:e3:
17:97:40:7c:3e:df:db:8c:92:f1:16:79:fb:6c:ec:
f6:ad:42:84:ab:3c:ea:06:1d:af:16:cb:f6:54:12:
5b:ea:56:a1:48:82:bb:27:fe:4c:e7:5d:b3:56:41:
d7:8f:cd:8c:5a:6a:f2:88:53:55:ed:ca:bc:f1:d7:
3c:da:1a:ea:2f:76:e1:d7:54:cf:07:2b:a1:01:ea:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:87:02:69:8F:C2:31:85:ED:7E:96:E9:72:6A:6E:AE:25:12:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F9D8FCF42211EFB2CCF374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:64:ef:2c:cd:19:a4:73:3a:f0:37:e7:a0:ab:70:57:cc:4d:
f4:04:b7:94:52:90:62:c8:b0:ef:75:29:09:99:c8:26:5f:3b:
d6:49:02:ea:e8:68:6c:67:64:e6:01:bf:d7:9e:55:49:b1:09:
1a:dd:4d:ff:e7:53:27:50:48:96:fd:60:cd:d3:b9:ff:58:3c:
49:06:4c:e0:3b:6c:c8:f4:66:79:20:b4:43:36:dd:2f:4e:2b:
4e:66:b1:b9:33:0a:b8:24:08:43:b1:a1:34:78:82:dd:b1:4c:
f0:7d:ac:22:ee:67:15:ea:f3:f0:c2:2a:18:66:0a:4f:ad:a1:
c9:87:e1:ff:63:e7:12:9e:18:58:1e:27:38:f5:96:6d:0d:20:
8d:ca:82:b8:f9:02:61:af:a8:ec:34:f4:2c:58:4c:86:1e:13:
af:1b:71:4e:2a:94:38:be:9e:5d:69:40:d3:b2:4d:c4:e0:2d:
7b:a0:b5:39:ea:c2:75:f9:9d:0b:3b:04:06:2f:f4:d2:d0:87:
42:3c:b4:51:68:39:d5:75:b9:1e:df:a0:1f:80:33:05:97:6a:
99:66:cc:24:ec:16:c2:9b:0e:15:25:72:0a:9e:d8:65:08:a3:
60:8f:41:bf:f6:2b:5b:22:c5:dd:ca:f9:51:58:4c:72:52:fb:
75:23:08:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATBbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDkxNjQwWhcNMjYwMjE5MDkxNjQwWjAYMRYw
FAYDVQQDEw02N2JlZGJmYi00YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAumiZbtuAScW1WRrxm7w4/rO3TjWeItYN5qfQu29Bo9WicNjPyijiFp8J
yifrvRH24oI/AhzkKc3UVvIFZhKRqkft0pxLVnMt56epARu2D/ADsViyYMCVnbmN
LtiOCjyAWRXkd2RakyDjAGwgyBMnIaIrPKxptkQ6QGrAdR7oFBWTlC54BmS9gu7m
0G6buJtGVjrvyh6UGCLm/YjnY/xWqGTw9t3zMXFlZLoaqmLMkc+4c+MXl0B8Pt/b
jJLxFnn7bOz2rUKEqzzqBh2vFsv2VBJb6lahSIK7J/5M512zVkHXj82MWmryiFNV
7cq88dc82hrqL3bh11TPByuhAeqlFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNrW
hwJpj8Ixhe1+lulyam6uJRKnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NEY5RDhGQ0Y0MjIxMUVGQjJDQ0YzNzQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOYXMA0GCSqGSIb3DQEBCwUA
A4IBAQBKZO8szRmkczrwN+egq3BXzE30BLeUUpBiyLDvdSkJmcgmXzvWSQLq6Ghs
Z2TmAb/XnlVJsQka3U3/51MnUEiW/WDN07n/WDxJBkzgO2zI9GZ5ILRDNt0vTitO
ZrG5Mwq4JAhDsaE0eILdsUzwfawi7mcV6vPwwioYZgpPraHJh+H/Y+cSnhhYHic4
9ZZtDSCNyoK4+QJhr6jsNPQsWEyGHhOvG3FOKpQ4vp5daUDTsk3E4C17oLU56sJ1
+Z0LOwQGL/TS0IdCPLRRaDnVdbke36AfgDMFl2qZZswk7BbCmw4VJXIKnthlCKNg
j0G/9itbIsXdyvlRWExyUvt1Iwjt
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:53 2025 by rpki-client