Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81540452F46111EF97DB48B0762E951A.roa
File: 81540452F46111EF97DB48B0762E951A.roa (raw, json)
Hash identifier: 3kzeOYkUW3Yg0UErxdJJEjVNLTQVG4Q0SbDbd0qNouY=
Subject key identifier: 5B:14:5A:62:69:3C:59:7F:FF:99:2E:3F:92:77:E0:0C:B1:27:C2:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013514
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81540452F46111EF97DB48B0762E951A.roa
Signing time: Wed 26 Feb 2025 16:48:29 +0000
ROA not before: Wed 26 Feb 2025 16:48:25 +0000
ROA not after: Thu 19 Feb 2026 16:48:25 +0000
asID: 984
IP address blocks: 156.252.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79124 (0x13514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:48:25 2025 GMT
Not After : Feb 19 16:48:25 2026 GMT
Subject: CN=67bf45dd-868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:29:04:8b:da:71:13:cb:a3:73:8d:b3:c7:
74:ff:43:be:06:2e:4a:ca:d9:5b:5a:68:b2:8a:e3:
a6:e5:b0:82:0d:a0:35:3f:31:e2:f7:f3:3d:7a:52:
35:11:3a:06:0d:cf:9c:70:77:2e:05:ea:37:d3:b2:
71:e3:ef:f4:25:1e:0a:19:1c:ef:95:77:ee:14:b9:
e6:95:c5:f5:4f:9a:c4:f8:52:d7:41:22:a2:b1:f6:
74:23:1d:7c:13:65:60:cd:11:67:17:0a:6e:ea:c8:
e9:67:89:8f:d3:4b:0e:86:5b:ab:b3:df:bc:c0:20:
f6:7f:91:a7:5e:a8:0f:58:41:50:02:ff:ba:06:a1:
88:37:30:72:c5:77:86:9e:07:e4:3c:e5:48:d9:8b:
06:52:cf:bf:fb:4e:4d:9d:db:40:84:6f:13:57:99:
19:5a:7a:12:0a:9f:40:8f:d6:64:cc:fa:b7:0a:fd:
30:8f:99:6b:94:35:27:50:1b:d9:91:ff:d1:b4:f4:
b1:71:e3:3e:d1:0c:b3:18:07:86:a2:21:19:3d:db:
59:8b:28:ce:de:55:20:64:31:04:de:0c:24:be:56:
37:0a:60:fb:f6:6c:01:67:ee:da:70:cf:1e:61:85:
b3:3b:3d:ba:3b:11:93:27:23:72:17:17:a7:e8:c9:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:14:5A:62:69:3C:59:7F:FF:99:2E:3F:92:77:E0:0C:B1:27:C2:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81540452F46111EF97DB48B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.255.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b9:b2:58:05:72:f6:fb:41:b8:ab:59:a9:4a:44:41:f9:be:
f7:08:4f:ff:ee:7a:46:6b:62:da:85:1b:a6:76:3c:c0:a7:a6:
4b:3d:1b:e5:37:f6:05:55:82:94:b2:ef:d9:bd:ee:ad:14:00:
73:73:1b:89:2b:db:ac:e1:4c:9c:f4:10:40:1f:13:bb:ce:d6:
37:e7:1c:fc:5a:1f:35:d6:34:3f:bc:24:7a:6d:a5:c2:eb:3b:
ae:14:6a:05:d8:8f:14:f8:43:4f:21:d9:b6:c2:d5:e5:49:2b:
eb:8d:74:5b:fc:c9:78:ef:1b:08:85:a0:8f:40:8d:95:89:c2:
0c:f8:68:4c:8f:7b:bd:ef:a7:5f:2a:61:ea:8d:36:ac:86:86:
55:40:f0:73:5c:b9:51:60:fb:5a:4e:0a:ca:51:17:e7:97:c1:
bc:9f:09:71:c5:6e:2f:38:bc:c3:3b:ee:14:bc:1d:c8:73:33:
19:8c:0b:cb:cc:75:57:e5:45:fb:56:cc:7d:f1:20:e0:82:62:
77:5a:02:b6:4f:98:eb:34:09:cb:59:04:15:46:c8:03:fd:06:
69:d3:97:59:24:66:20:35:89:d6:5d:ce:38:66:86:a6:6e:7c:
c1:52:23:77:eb:bd:b1:cc:fc:37:00:15:68:2f:dc:48:37:5b:
34:e4:75:7b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATUUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTY0ODI1WhcNMjYwMjE5MTY0ODI1WjAYMRYw
FAYDVQQDEw02N2JmNDVkZC04NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArfYpBIvacRPLo3ONs8d0/0O+Bi5KytlbWmiyiuOm5bCCDaA1PzHi9/M9
elI1EToGDc+ccHcuBeo307Jx4+/0JR4KGRzvlXfuFLnmlcX1T5rE+FLXQSKisfZ0
Ix18E2VgzRFnFwpu6sjpZ4mP00sOhlurs9+8wCD2f5GnXqgPWEFQAv+6BqGINzBy
xXeGngfkPOVI2YsGUs+/+05NndtAhG8TV5kZWnoSCp9Aj9ZkzPq3Cv0wj5lrlDUn
UBvZkf/RtPSxceM+0QyzGAeGoiEZPdtZiyjO3lUgZDEE3gwkvlY3CmD79mwBZ+7a
cM8eYYWzOz26OxGTJyNyFxen6MkVowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFsU
WmJpPFl//5kuP5J34AyxJ8K0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MTU0MDQ1MkY0NjExMUVGOTdEQjQ4QjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPz/MA0GCSqGSIb3DQEBCwUA
A4IBAQArubJYBXL2+0G4q1mpSkRB+b73CE//7npGa2LahRumdjzAp6ZLPRvlN/YF
VYKUsu/Zve6tFABzcxuJK9us4Uyc9BBAHxO7ztY35xz8Wh811jQ/vCR6baXC6zuu
FGoF2I8U+ENPIdm2wtXlSSvrjXRb/Ml47xsIhaCPQI2VicIM+GhMj3u976dfKmHq
jTashoZVQPBzXLlRYPtaTgrKURfnl8G8nwlxxW4vOLzDO+4UvB3IczMZjAvLzHVX
5UX7Vsx98SDggmJ3WgK2T5jrNAnLWQQVRsgD/QZp05dZJGYgNYnWXc44ZoambnzB
UiN3672xzPw3ABVoL9xIN1s05HV7
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:20 2025 by rpki-client