Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82ECE9F0F44311EF9AA8EA5E762E951A.roa
File: 82ECE9F0F44311EF9AA8EA5E762E951A.roa (raw, json)
Hash identifier: 8tmhZfRjB5Qks4hIyd2SDZngDhuJZP0u5qSPEIShBQc=
Subject key identifier: 76:8A:8D:31:77:14:B6:22:AE:A6:23:C9:EA:54:CE:BE:75:3E:72:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0132FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82ECE9F0F44311EF9AA8EA5E762E951A.roa
Signing time: Wed 26 Feb 2025 13:13:47 +0000
ROA not before: Wed 26 Feb 2025 13:13:40 +0000
ROA not after: Thu 19 Feb 2026 13:13:40 +0000
asID: 984
IP address blocks: 156.231.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78587 (0x132fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:13:40 2025 GMT
Not After : Feb 19 13:13:40 2026 GMT
Subject: CN=67bf138b-c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:28:ed:04:fa:f1:94:81:4c:cc:04:4c:e9:39:
f7:c3:e4:2d:bd:56:d7:88:ff:32:b4:05:8e:d2:15:
e6:a5:ed:3c:b9:c8:60:29:f1:e8:50:f8:2e:1d:17:
34:5e:71:0f:f9:0e:cb:d8:22:40:0f:1d:d8:d9:ee:
43:37:2e:98:30:0b:98:95:fb:6d:4d:89:cb:bb:19:
ca:19:80:b5:62:de:e1:49:eb:bc:6e:27:b8:94:a3:
41:39:c4:ac:ae:72:e5:a7:98:b5:eb:1c:cd:74:a5:
5d:15:ba:6d:b4:d6:9d:bc:41:de:1d:26:b1:0f:16:
33:fa:b6:9a:89:96:94:f2:ed:a2:f4:97:94:85:ce:
12:4e:14:58:a2:2e:fc:2c:d3:b3:a1:91:f9:6d:16:
1f:61:4b:42:2c:99:47:75:3b:03:7f:3a:44:bf:bb:
8d:ec:35:8f:9b:7e:27:ea:4e:80:af:e9:d5:71:2f:
67:73:38:71:55:f0:16:86:ea:40:84:24:6d:e0:f1:
f6:68:57:1d:ae:8a:94:e7:c8:e5:92:6e:14:4f:de:
68:0d:14:8c:f7:3d:09:b4:d1:68:20:f9:d0:c9:c8:
45:db:38:79:eb:8d:0b:50:5b:08:7a:2d:17:e5:8e:
1a:04:c5:a9:98:00:44:c5:c3:ed:41:8f:ec:e4:07:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8A:8D:31:77:14:B6:22:AE:A6:23:C9:EA:54:CE:BE:75:3E:72:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82ECE9F0F44311EF9AA8EA5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4a:6f:94:d5:22:2e:6a:1d:73:02:5d:9e:7a:5d:4b:df:85:
63:8c:41:94:c0:f6:7e:4a:b7:48:21:3f:79:86:cb:f2:33:36:
7f:f3:a2:76:70:0b:6b:3b:f5:64:41:9a:8b:c5:ca:32:41:ea:
52:14:ba:72:9d:1e:13:32:b1:6e:5e:4f:54:f9:13:06:6a:39:
55:66:ae:32:be:d4:30:96:df:aa:32:af:19:a9:ce:9d:95:72:
59:67:e5:8d:b9:0c:6c:24:6a:4e:6b:80:b0:ac:f3:5c:9b:90:
26:23:05:0c:13:24:fc:84:8a:55:dd:d2:f7:a6:f8:29:aa:4d:
d4:b4:84:ee:61:e2:98:2a:1c:26:00:b5:82:ca:21:19:b0:7d:
36:dc:ce:bc:7b:7a:31:b5:06:ff:ef:7d:fa:ec:6b:82:f7:06:
3e:cb:47:e7:72:d4:65:1e:c6:5a:ab:f5:94:4f:8f:6a:95:22:
8e:e5:3d:f3:da:eb:d3:9f:38:c9:29:c2:e5:42:60:29:96:8b:
bd:fe:d4:e9:e5:f4:35:bc:1e:37:65:22:a8:8b:58:51:ca:e4:
e4:13:12:0a:a4:8e:d9:f9:d4:8e:f2:cf:2a:f0:1f:39:87:f0:
13:f7:4c:3c:f3:84:9e:e7:06:2e:6f:9f:dc:01:ce:be:f5:d0:
72:75:24:db
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATL7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTMxMzQwWhcNMjYwMjE5MTMxMzQwWjAYMRYw
FAYDVQQDEw02N2JmMTM4Yi1jOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6SjtBPrxlIFMzARM6Tn3w+QtvVbXiP8ytAWO0hXmpe08uchgKfHoUPgu
HRc0XnEP+Q7L2CJADx3Y2e5DNy6YMAuYlfttTYnLuxnKGYC1Yt7hSeu8bie4lKNB
OcSsrnLlp5i16xzNdKVdFbpttNadvEHeHSaxDxYz+raaiZaU8u2i9JeUhc4SThRY
oi78LNOzoZH5bRYfYUtCLJlHdTsDfzpEv7uN7DWPm34n6k6Ar+nVcS9nczhxVfAW
hupAhCRt4PH2aFcdroqU58jlkm4UT95oDRSM9z0JtNFoIPnQychF2zh5640LUFsI
ei0X5Y4aBMWpmABExcPtQY/s5Af92QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHaK
jTF3FLYirqYjyepUzr51PnI6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MkVDRTlGMEY0NDMxMUVGOUFBOEVBNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOdBMA0GCSqGSIb3DQEBCwUA
A4IBAQBtSm+U1SIuah1zAl2eel1L34VjjEGUwPZ+SrdIIT95hsvyMzZ/86J2cAtr
O/VkQZqLxcoyQepSFLpynR4TMrFuXk9U+RMGajlVZq4yvtQwlt+qMq8Zqc6dlXJZ
Z+WNuQxsJGpOa4CwrPNcm5AmIwUMEyT8hIpV3dL3pvgpqk3UtITuYeKYKhwmALWC
yiEZsH023M68e3oxtQb/73367GuC9wY+y0fnctRlHsZaq/WUT49qlSKO5T3z2uvT
nzjJKcLlQmAplou9/tTp5fQ1vB43ZSKoi1hRyuTkExIKpI7Z+dSO8s8q8B85h/AT
90w884Se5wYub5/cAc6+9dBydSTb
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:11:32 2025 by rpki-client