Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/676DCB50F4B011EFA0775A56762E951A.roa
File: 676DCB50F4B011EFA0775A56762E951A.roa (raw, json)
Hash identifier: e/W4RhqLu0jOZ0qkOJRQrqiqVOr2/qwyoC0leZv4fWs=
Subject key identifier: 6E:C2:A5:57:56:AA:95:23:14:4D:12:28:46:D5:6B:BA:46:90:5E:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/676DCB50F4B011EFA0775A56762E951A.roa
Signing time: Thu 27 Feb 2025 02:13:16 +0000
ROA not before: Thu 27 Feb 2025 02:13:12 +0000
ROA not after: Sat 19 Feb 2028 02:13:12 +0000
asID: 17561
IP address blocks: 156.229.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80042 (0x138aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 02:13:12 2025 GMT
Not After : Feb 19 02:13:12 2028 GMT
Subject: CN=67bfca3c-cca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:af:62:69:bf:3f:89:a6:a7:30:be:01:45:
87:c7:39:8f:61:15:5b:6a:7a:e8:74:74:f4:ed:9e:
a4:a7:03:6e:86:92:1e:3e:60:11:43:08:4e:34:3d:
11:98:59:e0:08:8a:bc:0b:16:ee:c6:54:a9:39:8e:
4f:4f:da:f1:e3:c4:2f:89:b0:67:34:19:33:14:a0:
e0:b2:fe:f5:8e:e0:27:8c:a7:89:ee:a5:d2:d6:cb:
c9:15:f2:b2:5c:22:ec:24:3e:7f:03:be:3c:0e:d0:
4b:e4:07:f9:1a:b3:ea:6b:0e:30:3c:82:86:c4:bd:
88:00:09:cd:76:ff:fa:ee:ce:cd:21:ce:c8:c0:c0:
ca:92:f5:11:e8:6c:00:4d:04:e6:e9:5f:84:b6:aa:
8e:95:96:c5:87:ce:38:a8:1e:2a:75:61:6a:37:07:
47:10:1f:12:51:c7:d8:78:28:88:a6:c6:31:cd:18:
72:2f:af:e6:8e:64:ff:16:fc:e7:8a:01:fc:25:08:
dc:0e:bf:98:1b:ed:bd:80:15:a4:c7:b7:d9:a5:3a:
d4:a2:98:a5:8a:43:78:5a:83:06:13:f7:b7:72:a5:
5c:e8:64:f4:bb:1e:08:49:c2:91:51:cf:12:0c:97:
f1:13:0a:34:4d:8c:bd:fc:16:6d:ad:52:ae:83:b0:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:A5:57:56:AA:95:23:14:4D:12:28:46:D5:6B:BA:46:90:5E:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/676DCB50F4B011EFA0775A56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2e:39:e8:12:1a:a2:d3:87:89:69:ce:79:43:08:5a:09:97:
4c:3a:7d:ff:1c:76:f9:44:e7:e9:1e:2f:cc:2c:3f:1e:53:d4:
f9:67:42:0e:90:57:55:fa:60:e9:48:13:cd:50:1a:e7:04:fc:
c1:9b:1a:0b:dd:88:ef:fa:c8:4a:a0:1e:52:88:b6:2e:57:b9:
12:11:ee:e6:c4:08:96:1d:d3:43:3e:45:b7:f1:03:14:6b:0e:
77:8c:83:82:a3:a5:e5:f4:cf:af:37:4b:7c:7f:6a:fc:8f:f4:
2b:eb:37:48:4d:ab:ca:82:a0:75:a1:1c:e9:00:c0:6e:46:65:
b3:8c:76:11:67:64:ed:44:43:39:83:7e:0c:3e:46:f1:5b:79:
56:16:4d:48:cd:20:13:f0:9b:6f:81:bd:57:01:df:7c:6e:dd:
ee:fa:e2:08:cf:f4:e4:58:26:e5:d7:ca:42:76:08:20:2f:16:
11:2c:f2:f8:eb:8f:d8:5b:57:a0:04:bb:d9:00:fc:c5:54:06:
9c:d8:64:82:8a:40:84:33:33:ae:09:83:d5:1b:dd:f2:33:06:
e7:7e:eb:e9:53:00:84:03:14:12:f5:e2:f9:06:5b:07:20:82:
d4:76:17:d3:04:28:62:0e:0c:20:8c:57:e7:eb:c0:5e:e8:df:
be:55:f8:2c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATiqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDIxMzEyWhcNMjgwMjE5MDIxMzEyWjAYMRYw
FAYDVQQDEw02N2JmY2EzYy1jY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyravYmm/P4mmpzC+AUWHxzmPYRVbanrodHT07Z6kpwNuhpIePmARQwhO
ND0RmFngCIq8CxbuxlSpOY5PT9rx48QvibBnNBkzFKDgsv71juAnjKeJ7qXS1svJ
FfKyXCLsJD5/A748DtBL5Af5GrPqaw4wPIKGxL2IAAnNdv/67s7NIc7IwMDKkvUR
6GwATQTm6V+EtqqOlZbFh844qB4qdWFqNwdHEB8SUcfYeCiIpsYxzRhyL6/mjmT/
FvznigH8JQjcDr+YG+29gBWkx7fZpTrUopilikN4WoMGE/e3cqVc6GT0ux4IScKR
Uc8SDJfxEwo0TYy9/BZtrVKug7BziwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG7C
pVdWqpUjFE0SKEbVa7pGkF7DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzZEQ0I1MEY0QjAxMUVGQTA3NzVBNTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOV/MA0GCSqGSIb3DQEBCwUA
A4IBAQAaLjnoEhqi04eJac55QwhaCZdMOn3/HHb5ROfpHi/MLD8eU9T5Z0IOkFdV
+mDpSBPNUBrnBPzBmxoL3Yjv+shKoB5SiLYuV7kSEe7mxAiWHdNDPkW38QMUaw53
jIOCo6Xl9M+vN0t8f2r8j/Qr6zdITavKgqB1oRzpAMBuRmWzjHYRZ2TtREM5g34M
PkbxW3lWFk1IzSAT8Jtvgb1XAd98bt3u+uIIz/TkWCbl18pCdgggLxYRLPL464/Y
W1egBLvZAPzFVAac2GSCikCEMzOuCYPVG93yMwbnfuvpUwCEAxQS9eL5BlsHIILU
dhfTBChiDgwgjFfn68Be6N++Vfgs
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:34 2025 by rpki-client