Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C103D00F9E11F0865C5F9F762E951A.roa
File: 84C103D00F9E11F0865C5F9F762E951A.roa (raw, json)
Hash identifier: 8Z7a32bskRYYYHY467/63w3lmTjiiNMxh93L3HknJzM=
Subject key identifier: DF:34:CA:25:74:1A:27:82:6F:FD:C9:E4:38:01:CC:5F:C3:81:52:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01496F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C103D00F9E11F0865C5F9F762E951A.roa
Signing time: Wed 02 Apr 2025 08:43:15 +0000
ROA not before: Wed 02 Apr 2025 08:43:12 +0000
ROA not after: Fri 11 Apr 2025 08:43:12 +0000
asID: 200373
IP address blocks: 156.253.170.0/24 maxlen: 24
156.253.171.0/24 maxlen: 24
156.253.172.0/24 maxlen: 24
156.253.173.0/24 maxlen: 24
156.253.174.0/24 maxlen: 24
156.253.175.0/24 maxlen: 24
156.253.176.0/24 maxlen: 24
156.253.177.0/24 maxlen: 24
156.253.178.0/24 maxlen: 24
156.253.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84335 (0x1496f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 2 08:43:12 2025 GMT
Not After : Apr 11 08:43:12 2025 GMT
Subject: CN=67ecf8a3-6eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:c3:e1:e5:d5:06:eb:85:44:e8:bc:93:c4:
ef:e0:07:d0:93:0d:77:d7:fa:68:7a:61:7d:57:c8:
17:1c:98:52:6f:df:c0:73:aa:46:05:bb:78:e6:6d:
93:06:ff:de:5e:0c:c8:b2:dd:eb:63:32:6d:bb:79:
f3:4e:91:bf:5e:d8:12:90:9c:09:8a:7b:4d:54:e4:
1d:90:66:8f:89:72:6c:f7:87:c8:55:8c:25:07:d4:
45:28:fb:3b:ff:b0:e0:d6:31:92:36:1e:a3:d3:e2:
5b:eb:0a:d6:ad:b7:56:ec:6c:ff:0d:3a:a6:86:bd:
55:4d:34:b5:94:b1:76:c8:13:0f:8a:e7:08:4b:01:
8c:74:e5:0f:39:bb:bf:44:18:52:71:1b:04:66:be:
f1:1c:ac:da:f6:a2:bc:0f:e8:af:46:3f:4b:c6:68:
6e:f8:83:8e:d5:d7:c2:b9:5f:0a:7c:b2:4c:46:8c:
b8:b6:5f:91:95:e4:8e:0f:a0:80:0e:d7:2d:39:b9:
f9:59:5b:41:c1:a4:fa:20:01:cb:aa:59:e4:d9:88:
be:35:15:72:3f:62:92:d9:f0:19:98:45:03:9d:f3:
5e:51:8d:83:89:f2:ed:be:3d:2e:29:1c:23:e6:5a:
e4:01:0f:71:c3:86:6a:44:04:9d:1c:3e:a1:6a:60:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:CA:25:74:1A:27:82:6F:FD:C9:E4:38:01:CC:5F:C3:81:52:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84C103D00F9E11F0865C5F9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.170.0-156.253.179.255
Signature Algorithm: sha256WithRSAEncryption
49:2e:c0:14:72:bc:06:04:d1:e6:6a:13:da:80:6f:b2:43:46:
67:d1:4e:12:84:3c:78:11:78:37:d2:a3:19:c8:84:9a:ef:06:
72:e0:27:f9:f4:89:e4:90:74:8f:81:70:7c:70:e1:13:20:5d:
0b:b6:2f:1c:a1:68:1d:e6:b2:db:3c:20:b4:77:80:b7:3a:8b:
cc:14:10:39:1f:ae:27:96:bc:8e:06:c4:43:1f:02:1d:0c:e5:
ef:ab:d2:bd:ec:d7:4a:8e:5d:b8:aa:28:78:2d:44:10:22:c4:
d8:40:59:78:77:21:e6:df:75:3f:df:7b:b2:53:5c:5a:17:c4:
42:e5:c3:41:7e:4f:95:41:d5:61:52:37:58:e2:82:98:81:c0:
fc:25:d1:e8:2a:6f:ad:18:52:e9:30:e9:94:66:cd:a1:6d:66:
45:98:5c:6d:92:60:b9:c4:14:6a:74:92:07:1d:73:8e:f5:24:
64:ba:89:da:45:c3:75:ab:7d:33:95:7c:6e:e9:d4:4c:02:b4:
26:c5:90:7a:d8:a1:59:5a:21:d6:0d:db:c6:70:3e:5b:f6:90:
b7:01:68:d1:0e:43:15:04:9b:cf:45:5d:d0:38:18:dd:7d:8c:
cf:40:44:60:c1:26:a0:cc:8b:ea:4a:76:d7:5a:83:d2:00:9d:
01:03:a9:23
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUlvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDAyMDg0MzEyWhcNMjUwNDExMDg0MzEyWjAYMRYw
FAYDVQQDEw02N2VjZjhhMy02ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs1zD4eXVBuuFROi8k8Tv4AfQkw131/poemF9V8gXHJhSb9/Ac6pGBbt4
5m2TBv/eXgzIst3rYzJtu3nzTpG/XtgSkJwJintNVOQdkGaPiXJs94fIVYwlB9RF
KPs7/7Dg1jGSNh6j0+Jb6wrWrbdW7Gz/DTqmhr1VTTS1lLF2yBMPiucISwGMdOUP
Obu/RBhScRsEZr7xHKza9qK8D+ivRj9Lxmhu+IOO1dfCuV8KfLJMRoy4tl+RleSO
D6CADtctObn5WVtBwaT6IAHLqlnk2Yi+NRVyP2KS2fAZmEUDnfNeUY2DifLtvj0u
KRwj5lrkAQ9xw4ZqRASdHD6hamA0JwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN80
yiV0GieCb/3J5DgBzF/DgVKjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NEMxMDNEMDBGOUUxMUYwODY1QzVGOUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc/aoDBAKc/bAwDQYJKoZI
hvcNAQELBQADggEBAEkuwBRyvAYE0eZqE9qAb7JDRmfRThKEPHgReDfSoxnIhJrv
BnLgJ/n0ieSQdI+BcHxw4RMgXQu2LxyhaB3msts8ILR3gLc6i8wUEDkfrieWvI4G
xEMfAh0M5e+r0r3s10qOXbiqKHgtRBAixNhAWXh3IebfdT/fe7JTXFoXxELlw0F+
T5VB1WFSN1jigpiBwPwl0egqb60YUukw6ZRmzaFtZkWYXG2SYLnEFGp0kgcdc471
JGS6idpFw3WrfTOVfG7p1EwCtCbFkHrYoVlaIdYN28ZwPlv2kLcBaNEOQxUEm89F
XdA4GN19jM9ARGDBJqDMi+pKdtdag9IAnQEDqSM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:09 2025 by rpki-client