Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7731F54AF43111EFA767DF5E762E951A.roa
File: 7731F54AF43111EFA767DF5E762E951A.roa (raw, json)
Hash identifier: afn9NBc+SHoK+oXO2jMZkTvxpXElbOOU1jQdPFVaGHQ=
Subject key identifier: 68:9C:59:69:94:74:1D:AB:0D:79:9D:3C:01:F6:96:2D:98:51:67:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013196
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7731F54AF43111EFA767DF5E762E951A.roa
Signing time: Wed 26 Feb 2025 11:04:36 +0000
ROA not before: Wed 26 Feb 2025 11:04:33 +0000
ROA not after: Thu 19 Feb 2026 11:04:33 +0000
asID: 984
IP address blocks: 156.230.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 12 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78230 (0x13196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:04:33 2025 GMT
Not After : Feb 19 11:04:33 2026 GMT
Subject: CN=67bef544-920c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:3e:85:86:c8:66:d3:c9:d5:fd:1a:1b:fc:
ae:4c:0e:a6:48:00:13:05:d6:e8:e2:bc:a6:6d:58:
12:7e:98:31:30:75:d8:89:ee:d0:65:ea:d5:63:ae:
fc:6d:dc:1b:e6:b2:4c:0b:74:a8:a6:e7:a9:23:18:
c2:74:e4:2f:a3:a4:f8:70:df:c6:b3:00:1d:45:83:
8b:9b:b2:dc:09:24:1a:ff:e7:14:19:7b:a2:64:92:
e6:19:1e:86:38:40:7b:b1:b8:62:3b:b9:a9:c1:fc:
c4:4f:7c:99:87:37:a6:bf:3d:71:b7:74:3a:3f:e5:
0f:ed:a8:02:fb:03:bf:04:f3:da:8b:d2:6f:49:4a:
c6:10:ef:3d:5b:ba:75:8e:39:56:6c:cf:b8:c5:0e:
80:8f:6a:75:61:04:59:1f:37:1e:e7:0f:46:81:24:
fb:64:a1:65:d2:00:14:dc:30:ea:f7:f2:f9:1f:6f:
72:c7:2c:55:6f:f1:49:3c:42:05:40:c8:09:52:67:
68:d2:a9:37:58:2a:e7:74:3f:29:ae:10:9e:6e:8f:
68:d5:ca:df:ad:27:34:ec:74:cf:d8:ec:e2:a3:0a:
86:63:55:3a:65:c0:5f:4b:3d:a7:72:81:88:15:a9:
ff:5e:ad:89:ed:37:49:de:12:69:60:77:fd:c2:2c:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:59:69:94:74:1D:AB:0D:79:9D:3C:01:F6:96:2D:98:51:67:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7731F54AF43111EFA767DF5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:86:19:65:6e:63:4c:11:fd:64:11:37:15:5d:cf:7a:99:45:
9e:ec:8c:8d:2c:06:a8:d2:7d:c5:9d:ab:01:6f:8a:7b:2c:2e:
f0:c6:ef:29:b2:d5:c0:79:f7:01:ea:0a:09:ca:63:82:6a:41:
43:8d:42:2e:0f:cc:10:fb:6a:9e:6a:0d:f7:02:94:ab:19:fb:
03:f5:09:28:e4:b0:1c:7a:96:dc:00:50:da:26:e3:1d:45:fe:
1b:29:c5:74:72:d4:b3:b0:6a:08:a2:c4:48:d3:47:d8:62:39:
0c:a2:a5:0a:72:f5:8b:47:1d:00:b3:9b:54:b1:12:40:94:dd:
41:04:05:66:e2:e9:c1:be:bf:70:f6:74:51:1a:aa:92:56:c7:
55:6a:ee:68:5a:d0:85:61:d3:fe:eb:22:5a:b5:d9:07:df:62:
9b:0c:7b:07:a8:ec:1c:63:02:83:43:ee:97:06:ba:26:4b:0f:
85:55:33:95:c2:f2:16:93:84:27:0c:14:a0:2b:b7:8d:ad:78:
75:39:f9:e0:09:5a:3c:2d:64:1f:e5:0c:61:4c:73:f4:3d:ab:
15:83:79:e5:ba:7e:de:84:d8:db:a1:ee:46:0f:50:95:8b:26:
05:65:8a:c5:42:4b:0d:0e:bb:0d:21:6c:a1:4a:cc:9e:d6:a1:
63:41:32:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATGWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTEwNDMzWhcNMjYwMjE5MTEwNDMzWjAYMRYw
FAYDVQQDEw02N2JlZjU0NC05MjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzF0+hYbIZtPJ1f0aG/yuTA6mSAATBdbo4rymbVgSfpgxMHXYie7QZerV
Y678bdwb5rJMC3SopuepIxjCdOQvo6T4cN/GswAdRYOLm7LcCSQa/+cUGXuiZJLm
GR6GOEB7sbhiO7mpwfzET3yZhzemvz1xt3Q6P+UP7agC+wO/BPPai9JvSUrGEO89
W7p1jjlWbM+4xQ6Aj2p1YQRZHzce5w9GgST7ZKFl0gAU3DDq9/L5H29yxyxVb/FJ
PEIFQMgJUmdo0qk3WCrndD8prhCebo9o1crfrSc07HTP2OziowqGY1U6ZcBfSz2n
coGIFan/Xq2J7TdJ3hJpYHf9wiyZcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGic
WWmUdB2rDXmdPAH2li2YUWdtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzMxRjU0QUY0MzExMUVGQTc2N0RGNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOa7MA0GCSqGSIb3DQEBCwUA
A4IBAQBuhhllbmNMEf1kETcVXc96mUWe7IyNLAao0n3FnasBb4p7LC7wxu8pstXA
efcB6goJymOCakFDjUIuD8wQ+2qeag33ApSrGfsD9Qko5LAcepbcAFDaJuMdRf4b
KcV0ctSzsGoIosRI00fYYjkMoqUKcvWLRx0As5tUsRJAlN1BBAVm4unBvr9w9nRR
GqqSVsdVau5oWtCFYdP+6yJatdkH32KbDHsHqOwcYwKDQ+6XBromSw+FVTOVwvIW
k4QnDBSgK7eNrXh1OfngCVo8LWQf5QxhTHP0PasVg3nlun7ehNjboe5GD1CViyYF
ZYrFQksNDrsNIWyhSsye1qFjQTJZ
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:07:37 2025 by rpki-client