Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/821DD0C6115211F0B4C91A6C762E951A.roa
File: 821DD0C6115211F0B4C91A6C762E951A.roa (raw, json)
Hash identifier: 3s1EqZkXXZt6V0LNV/YDwVCQezz3nyhzfFj4n+mkLMw=
Subject key identifier: 7A:62:5B:72:A9:DF:6F:72:00:1D:65:4D:39:B6:04:F6:E8:BC:CC:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/821DD0C6115211F0B4C91A6C762E951A.roa
Signing time: Fri 04 Apr 2025 12:44:12 +0000
ROA not before: Fri 04 Apr 2025 12:44:07 +0000
ROA not after: Fri 02 May 2025 12:44:07 +0000
asID: 214016
IP address blocks: 156.225.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84539 (0x14a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 4 12:44:07 2025 GMT
Not After : May 2 12:44:07 2025 GMT
Subject: CN=67efd41c-e53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:b0:6f:3e:b6:7e:32:10:3a:e1:90:d3:d8:
42:a0:73:92:ad:fe:cd:93:46:96:78:78:c8:68:80:
33:ea:a1:e9:f0:00:27:f7:50:a2:02:7d:c5:9b:79:
f4:08:24:eb:61:52:4e:c4:ed:87:54:f9:6c:07:26:
84:60:64:99:6e:6f:ab:06:63:a0:39:2a:17:70:46:
69:52:ee:aa:7a:f2:b1:f8:e8:93:6e:bd:3b:e3:9b:
a2:38:17:07:dc:fc:86:9c:c0:ed:bf:25:9b:f1:a2:
00:bb:23:02:9b:6c:27:58:1c:c9:c5:55:1a:c1:5d:
29:ac:0a:6c:ab:ed:95:24:1d:9d:4e:b6:e1:6f:4f:
c3:62:98:55:d6:7d:2f:fe:90:6a:ee:99:63:68:80:
d6:86:ce:61:eb:0b:f8:bd:a4:3c:f4:0c:5f:26:5e:
b9:98:8d:7c:b1:f2:cb:2f:8b:fe:6f:3f:ad:66:5a:
4b:2a:3e:73:05:e2:76:9a:ff:b0:0e:bc:e7:69:40:
2b:e6:89:7e:25:0f:a1:a5:7c:0f:d9:ba:38:04:10:
f0:cc:b2:48:d9:e8:86:4e:30:56:8e:94:0e:72:00:
c7:07:b3:42:ae:86:00:b3:0b:c6:c3:d5:22:47:5a:
e6:71:51:4e:37:a7:2b:a3:d9:78:b2:1d:e6:9f:71:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:5B:72:A9:DF:6F:72:00:1D:65:4D:39:B6:04:F6:E8:BC:CC:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/821DD0C6115211F0B4C91A6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c9:e9:6e:1c:f1:22:b8:03:ba:28:cb:8f:73:55:da:06:5d:
69:ea:a7:57:8e:52:51:ef:42:b4:d4:66:a1:4f:14:2b:f2:e5:
0d:bc:a1:9b:0f:5d:fb:9b:bc:8f:4f:48:c8:a6:54:a5:4a:fa:
f2:e3:33:83:21:15:79:51:41:76:87:77:b7:f3:57:00:f1:2d:
16:af:90:37:6d:0c:93:32:68:f9:ce:9c:1f:a4:80:db:31:3a:
34:a0:2c:97:3b:10:9b:54:f5:27:7f:e1:4e:00:56:19:09:6b:
90:04:c8:e2:b3:bd:fc:89:26:cb:a5:27:a9:53:f5:cf:11:d6:
b6:29:20:37:6b:e1:0d:59:5c:9c:40:10:d9:f4:5c:72:10:7a:
67:7b:c3:a9:47:1f:04:6e:fd:7f:8f:da:d6:4d:0d:6b:a0:d1:
77:4d:9b:d2:f3:05:17:f6:6d:73:c2:8e:6c:82:c9:16:0f:46:
61:26:3c:f5:e9:30:3e:a3:1c:e1:42:f9:25:cc:79:b4:b7:85:
21:cc:5b:5d:78:64:e5:43:db:fa:6f:48:4e:f8:22:3d:de:3d:
ac:52:49:22:0e:46:e1:dc:44:f7:3e:9d:be:82:a3:64:c7:d2:
e6:69:0a:56:d5:c4:6f:08:6d:d1:0b:1d:3e:b5:dc:83:d2:6d:
4b:c1:6b:44
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUo7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA0MTI0NDA3WhcNMjUwNTAyMTI0NDA3WjAYMRYw
FAYDVQQDEw02N2VmZDQxYy1lNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyESwbz62fjIQOuGQ09hCoHOSrf7Nk0aWeHjIaIAz6qHp8AAn91CiAn3F
m3n0CCTrYVJOxO2HVPlsByaEYGSZbm+rBmOgOSoXcEZpUu6qevKx+OiTbr0745ui
OBcH3PyGnMDtvyWb8aIAuyMCm2wnWBzJxVUawV0prApsq+2VJB2dTrbhb0/DYphV
1n0v/pBq7pljaIDWhs5h6wv4vaQ89AxfJl65mI18sfLLL4v+bz+tZlpLKj5zBeJ2
mv+wDrznaUAr5ol+JQ+hpXwP2bo4BBDwzLJI2eiGTjBWjpQOcgDHB7NCroYAswvG
w9UiR1rmcVFON6cro9l4sh3mn3F+9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHpi
W3Kp329yAB1lTTm2BPbovMyLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjFERDBDNjExNTIxMUYwQjRDOTFBNkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEqMA0GCSqGSIb3DQEBCwUA
A4IBAQAfyeluHPEiuAO6KMuPc1XaBl1p6qdXjlJR70K01GahTxQr8uUNvKGbD137
m7yPT0jIplSlSvry4zODIRV5UUF2h3e381cA8S0Wr5A3bQyTMmj5zpwfpIDbMTo0
oCyXOxCbVPUnf+FOAFYZCWuQBMjis738iSbLpSepU/XPEda2KSA3a+ENWVycQBDZ
9FxyEHpne8OpRx8Ebv1/j9rWTQ1roNF3TZvS8wUX9m1zwo5sgskWD0ZhJjz16TA+
oxzhQvklzHm0t4UhzFtdeGTlQ9v6b0hO+CI93j2sUkkiDkbh3ET3Pp2+gqNkx9Lm
aQpW1cRvCG3RCx0+tdyD0m1LwWtE
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:34 2025 by rpki-client