Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF42184F42B11EF9A53C0B5762E951A.roa
File: 7CF42184F42B11EF9A53C0B5762E951A.roa (raw, json)
Hash identifier: 4hYYSoYTAX8wY2GdM6/Vr73SUliQXkx+Jv8YZJGNoDY=
Subject key identifier: 74:B6:F9:19:30:11:47:89:7A:0F:46:B3:F2:A8:48:9E:73:67:EA:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0130F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF42184F42B11EF9A53C0B5762E951A.roa
Signing time: Wed 26 Feb 2025 10:21:49 +0000
ROA not before: Wed 26 Feb 2025 10:21:45 +0000
ROA not after: Thu 19 Feb 2026 10:21:45 +0000
asID: 984
IP address blocks: 156.230.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78071 (0x130f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 10:21:45 2025 GMT
Not After : Feb 19 10:21:45 2026 GMT
Subject: CN=67beeb3d-77e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:88:e1:fd:6f:26:17:c0:1b:11:51:97:55:
ad:3f:36:3b:09:88:6d:d0:fe:a6:b0:dd:ac:37:59:
61:25:83:22:70:ff:6a:2f:26:46:41:a6:4c:4c:58:
95:15:e7:4d:74:98:b8:80:49:07:e1:95:2c:a2:f2:
a3:10:71:b4:5e:89:4d:8d:f4:ce:58:3d:91:2a:bd:
12:74:78:b7:df:d3:a8:44:49:fc:8c:ff:65:e6:be:
dd:ac:98:b8:95:dc:ce:06:e3:32:c4:89:b3:79:e4:
7d:45:bd:22:f5:d1:98:8a:f4:5f:e4:60:11:44:07:
58:09:7b:e5:f6:8e:db:d2:d5:ac:63:82:7a:ce:7a:
a1:ca:22:66:de:f0:93:eb:97:68:6c:7d:6a:7b:9a:
33:e8:51:5b:df:54:e4:b2:65:0d:31:8d:5e:c0:06:
a8:cb:5d:f5:17:97:40:9a:fc:1d:4a:e4:ee:b0:2c:
9a:23:ff:01:6e:90:2d:f7:9a:8d:80:81:52:69:89:
29:4d:76:fe:bb:c0:57:e4:3a:79:2d:90:73:7d:24:
16:e0:86:99:e8:51:28:71:1d:53:c5:fe:af:dc:c8:
3b:51:cc:58:e3:c4:5e:bc:82:91:63:39:ed:a8:20:
e7:0d:1d:8c:2f:22:9d:ef:9e:23:8f:62:8f:3f:41:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:F9:19:30:11:47:89:7A:0F:46:B3:F2:A8:48:9E:73:67:EA:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CF42184F42B11EF9A53C0B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.148.0/24
Signature Algorithm: sha256WithRSAEncryption
21:76:5a:91:d7:c5:fa:8e:83:73:b7:42:66:e2:1d:25:14:90:
9d:18:75:c8:ee:a0:a7:3f:32:8b:96:2d:ae:70:1f:6d:bd:25:
2a:db:23:9f:cd:4f:d2:d2:c9:7b:fa:fd:f1:f8:ed:a9:2b:de:
0a:61:15:1a:b5:ea:db:5a:fd:44:7d:3f:5f:ab:dd:cb:b2:e7:
f4:ad:20:03:2f:2a:f1:c4:2a:26:7a:ed:64:99:cd:5f:2c:df:
5c:d1:72:cf:ff:2e:7e:b0:ec:7c:b7:27:8d:a2:49:98:f3:e7:
18:3b:ac:b8:b0:ac:8e:e3:30:71:ac:0d:12:de:ff:0b:aa:f0:
93:93:c8:5b:eb:9d:60:59:78:03:1a:8b:1a:a9:12:fc:7b:54:
84:08:e2:f0:80:f6:22:52:d2:e3:28:a1:1e:18:b7:57:73:db:
81:61:54:32:be:c6:95:c8:90:ac:29:32:2e:e4:5d:7a:18:d2:
50:07:4b:d0:54:c3:7e:6d:6f:7b:a0:1a:93:55:c4:37:ae:e9:
28:6e:09:18:d0:93:2b:0c:0a:87:4e:8e:41:0a:2e:50:e3:23:
7a:97:50:36:ee:7b:17:2c:d8:1e:b9:df:4d:ca:f3:b0:00:a4:
85:67:57:e6:d2:d2:7e:72:ff:87:60:b6:cf:23:d5:12:f8:1f:
9c:a2:92:93
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATD3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTAyMTQ1WhcNMjYwMjE5MTAyMTQ1WjAYMRYw
FAYDVQQDEw02N2JlZWIzZC03N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3LiI4f1vJhfAGxFRl1WtPzY7CYht0P6msN2sN1lhJYMicP9qLyZGQaZM
TFiVFedNdJi4gEkH4ZUsovKjEHG0XolNjfTOWD2RKr0SdHi339OoREn8jP9l5r7d
rJi4ldzOBuMyxImzeeR9Rb0i9dGYivRf5GARRAdYCXvl9o7b0tWsY4J6znqhyiJm
3vCT65dobH1qe5oz6FFb31TksmUNMY1ewAaoy131F5dAmvwdSuTusCyaI/8BbpAt
95qNgIFSaYkpTXb+u8BX5Dp5LZBzfSQW4IaZ6FEocR1Txf6v3Mg7UcxY48RevIKR
YzntqCDnDR2MLyKd754jj2KPP0HwPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHS2
+RkwEUeJeg9Gs/KoSJ5zZ+rAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Q0Y0MjE4NEY0MkIxMUVGOUE1M0MwQjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOaUMA0GCSqGSIb3DQEBCwUA
A4IBAQAhdlqR18X6joNzt0Jm4h0lFJCdGHXI7qCnPzKLli2ucB9tvSUq2yOfzU/S
0sl7+v3x+O2pK94KYRUaterbWv1EfT9fq93Lsuf0rSADLyrxxComeu1kmc1fLN9c
0XLP/y5+sOx8tyeNokmY8+cYO6y4sKyO4zBxrA0S3v8LqvCTk8hb651gWXgDGosa
qRL8e1SECOLwgPYiUtLjKKEeGLdXc9uBYVQyvsaVyJCsKTIu5F16GNJQB0vQVMN+
bW97oBqTVcQ3rukobgkY0JMrDAqHTo5BCi5Q4yN6l1A27nsXLNgeud9NyvOwAKSF
Z1fm0tJ+cv+HYLbPI9US+B+copKT
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:00 2025 by rpki-client