Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CBB86D0F41D11EFA9E21852762E951A.roa
File: 6CBB86D0F41D11EFA9E21852762E951A.roa (raw, json)
Hash identifier: beB+AYIklnCU7VCv0FxfVn0K2avbq4kJUw/KXwvI59Y=
Subject key identifier: 89:D7:E8:A6:91:F7:12:C3:FE:8D:64:20:37:D4:94:85:BD:93:66:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01300D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CBB86D0F41D11EFA9E21852762E951A.roa
Signing time: Wed 26 Feb 2025 08:41:09 +0000
ROA not before: Wed 26 Feb 2025 08:41:05 +0000
ROA not after: Thu 19 Feb 2026 08:41:05 +0000
asID: 984
IP address blocks: 156.252.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77837 (0x1300d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 08:41:05 2025 GMT
Not After : Feb 19 08:41:05 2026 GMT
Subject: CN=67bed3a5-10ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:9b:bf:b4:a7:fe:c6:2d:32:09:d6:35:2e:
9a:3d:83:e9:7a:56:88:2d:59:26:18:66:78:fb:a2:
37:e3:7a:77:f7:7e:f1:48:23:ac:12:26:22:0c:ec:
01:f6:a2:05:36:d6:97:04:fd:64:48:b1:3a:fe:6c:
66:19:20:4f:92:dc:94:6f:22:c2:77:5f:4f:18:18:
1a:4d:eb:c3:46:d1:dd:30:87:e3:19:79:11:44:f7:
65:f5:9b:30:d5:95:04:ab:6f:f9:f5:0e:96:f1:52:
ea:9b:71:b1:b8:32:50:fd:54:b7:08:65:51:a5:f7:
3a:7f:c8:a1:17:e6:fa:50:b7:42:17:90:cb:ab:52:
f0:48:c6:36:52:91:17:b5:2e:11:32:36:61:61:89:
4c:33:07:94:f9:44:f4:e3:13:53:10:43:26:b4:b7:
a8:4d:71:87:d8:ef:53:f8:53:57:45:ed:a3:9e:45:
7c:6a:c4:b2:b0:c4:ef:d9:38:e2:62:ee:09:cc:dd:
d5:3d:d8:fd:1c:9e:33:1c:9e:44:c9:9b:df:a2:0d:
c5:f5:25:8a:d3:8e:cf:5b:a3:30:5b:7a:b7:43:e7:
af:de:9e:fc:b5:77:93:3d:5f:84:8d:02:bb:e8:0d:
56:c4:59:8f:45:84:27:47:04:7d:5d:4b:83:af:88:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:E8:A6:91:F7:12:C3:FE:8D:64:20:37:D4:94:85:BD:93:66:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CBB86D0F41D11EFA9E21852762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.23.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d7:3b:07:d6:b1:b1:83:df:0d:73:28:b2:ce:f7:0d:55:10:
73:90:0d:89:9e:36:79:61:bf:b3:c5:ff:c3:9c:ab:d3:44:9e:
f0:85:c5:49:46:28:26:fd:d6:15:6a:fb:f1:5f:e9:2d:a4:a5:
51:56:30:01:17:03:43:34:70:76:fc:08:81:88:7d:2f:40:ca:
7f:29:c8:2b:8a:cb:51:a1:23:4e:a2:ba:2f:71:80:eb:2c:3d:
59:e9:ba:b0:26:9d:41:42:3e:98:41:f8:63:0f:a8:ad:63:70:
c1:b7:43:d0:4b:49:1e:fd:d7:f6:63:50:d5:c6:0d:3f:15:2a:
25:e8:13:f4:1a:24:94:4e:71:03:ea:fe:91:cf:36:ea:84:39:
ad:26:92:5d:b2:61:19:ea:55:9f:0d:4a:73:f0:0f:3d:71:13:
fc:4b:c8:82:e8:a1:84:39:28:3e:35:1b:8d:e1:81:e7:2d:20:
20:1b:43:f6:30:43:30:d4:bf:4e:6f:f5:33:08:19:1c:ff:f3:
72:04:0a:7b:09:0b:b0:b3:1b:d2:fa:44:d2:08:83:dd:22:e8:
17:c4:8c:32:9c:b6:9d:fa:ed:ff:a4:7a:e2:a9:54:4f:2b:ee:
cc:16:8d:4b:90:ec:9a:ed:06:23:a7:2c:e8:ed:4b:29:4b:f7:
b2:c8:a1:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATANMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDg0MTA1WhcNMjYwMjE5MDg0MTA1WjAYMRYw
FAYDVQQDEw02N2JlZDNhNS0xMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3BWbv7Sn/sYtMgnWNS6aPYPpelaILVkmGGZ4+6I343p3937xSCOsEiYi
DOwB9qIFNtaXBP1kSLE6/mxmGSBPktyUbyLCd19PGBgaTevDRtHdMIfjGXkRRPdl
9Zsw1ZUEq2/59Q6W8VLqm3GxuDJQ/VS3CGVRpfc6f8ihF+b6ULdCF5DLq1LwSMY2
UpEXtS4RMjZhYYlMMweU+UT04xNTEEMmtLeoTXGH2O9T+FNXRe2jnkV8asSysMTv
2TjiYu4JzN3VPdj9HJ4zHJ5EyZvfog3F9SWK047PW6MwW3q3Q+ev3p78tXeTPV+E
jQK76A1WxFmPRYQnRwR9XUuDr4iZGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFInX
6KaR9xLD/o1kIDfUlIW9k2a9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Q0JCODZEMEY0MUQxMUVGQTlFMjE4NTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwXMA0GCSqGSIb3DQEBCwUA
A4IBAQB01zsH1rGxg98NcyiyzvcNVRBzkA2JnjZ5Yb+zxf/DnKvTRJ7whcVJRigm
/dYVavvxX+ktpKVRVjABFwNDNHB2/AiBiH0vQMp/KcgristRoSNOorovcYDrLD1Z
6bqwJp1BQj6YQfhjD6itY3DBt0PQS0ke/df2Y1DVxg0/FSol6BP0GiSUTnED6v6R
zzbqhDmtJpJdsmEZ6lWfDUpz8A89cRP8S8iC6KGEOSg+NRuN4YHnLSAgG0P2MEMw
1L9Ob/UzCBkc//NyBAp7CQuwsxvS+kTSCIPdIugXxIwynLad+u3/pHriqVRPK+7M
Fo1LkOya7QYjpyzo7UspS/eyyKEQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:23 2025 by rpki-client