Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E14808204B411F0A7E48A80762E951A.roa
File: 8E14808204B411F0A7E48A80762E951A.roa (raw, json)
Hash identifier: fYN6/4vFHMvSOBeft7qAQC+Zj00WSPfXt7Lafmu29nI=
Subject key identifier: 95:F6:00:FE:E6:5B:5D:85:08:72:13:0A:67:14:AD:19:99:2C:EC:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0146DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E14808204B411F0A7E48A80762E951A.roa
Signing time: Wed 19 Mar 2025 11:23:17 +0000
ROA not before: Wed 19 Mar 2025 11:23:14 +0000
ROA not after: Tue 08 Apr 2025 11:23:14 +0000
asID: 213725
IP address blocks: 156.253.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83678 (0x146de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 19 11:23:14 2025 GMT
Not After : Apr 8 11:23:14 2025 GMT
Subject: CN=67daa925-82f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:34:14:20:14:0d:34:c2:cf:5d:e0:de:b0:
6e:a5:8a:76:16:47:7c:9c:cf:12:76:6e:e4:06:aa:
b8:b3:35:91:dc:0e:4e:15:f5:b4:df:d2:c8:da:97:
17:40:6d:ac:4f:cc:44:96:15:fd:55:af:f4:42:1d:
04:e5:31:25:44:8a:91:b1:c1:12:bf:4b:dd:5d:66:
0a:7c:06:1f:1c:ea:b1:b1:99:fe:27:ed:87:f0:74:
74:f1:48:bb:c8:72:30:c8:08:b6:62:c9:32:f8:a9:
d4:38:86:6a:b6:7d:46:cc:ba:d7:c1:f8:d9:fa:1d:
62:b4:e2:09:ed:c8:cf:a9:4f:74:70:0e:a8:8a:28:
9d:ab:3c:b1:2e:09:e8:da:87:d9:72:24:1c:39:63:
b5:a5:9d:40:4d:9e:6c:32:04:39:81:65:a6:2b:e2:
74:33:7a:43:43:e2:00:1a:ca:d2:a1:f8:7e:56:e5:
dd:ad:57:c3:76:f9:3e:37:48:93:93:ba:32:70:ef:
af:fb:5b:ea:f4:a5:47:10:bb:e1:11:ec:9e:e3:9d:
9f:54:91:3b:af:4d:2d:d5:ad:25:d5:e5:47:bb:5e:
b0:a0:a7:fd:b4:f9:84:0e:0a:7c:b9:95:25:eb:b8:
32:bb:74:12:a0:1f:fa:ef:e7:b1:26:05:f3:f8:ce:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:00:FE:E6:5B:5D:85:08:72:13:0A:67:14:AD:19:99:2C:EC:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E14808204B411F0A7E48A80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fc:e5:4e:aa:b1:6a:99:a5:f0:d0:05:a0:93:61:89:1b:69:
f3:d6:c0:03:9c:7b:0c:16:e1:56:55:c5:d8:cb:da:e3:61:44:
a9:a8:1f:94:cf:33:c5:27:21:cb:06:2f:5c:eb:a2:e7:89:2e:
c9:7c:74:f1:ed:19:5d:a9:91:31:a6:8f:b8:bf:50:e1:c3:15:
8e:a9:0e:5f:b9:88:ce:e7:b2:e8:a9:23:a7:f1:0d:87:bf:9b:
40:5e:82:16:74:d0:cb:ae:5d:c8:2b:c4:1b:ec:0e:a0:6a:b7:
a0:7f:b8:f6:db:e7:f6:a5:93:ba:af:26:c8:2e:38:4b:44:d0:
3b:5a:60:b6:54:ed:2a:26:0a:61:8d:55:f7:d7:1d:71:d3:af:
45:da:d4:f9:7d:81:85:11:8a:5d:e7:1a:fb:36:4a:76:d8:29:
75:67:f7:f3:87:7d:c9:e7:55:52:c8:7e:5c:5c:a9:cc:e8:c9:
b7:67:f1:8a:91:5c:5f:e0:58:a0:da:25:58:8a:74:49:31:40:
0e:d0:4f:64:e1:f1:ce:31:b7:93:32:8b:40:b1:da:30:d2:b0:
93:78:4f:00:82:9e:6f:47:5f:52:66:30:b7:12:22:48:f5:cf:
d1:11:12:e8:cf:3b:16:bd:e6:ef:f1:fe:00:37:54:dd:3a:4b:
03:27:89:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUbeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE5MTEyMzE0WhcNMjUwNDA4MTEyMzE0WjAYMRYw
FAYDVQQDEw02N2RhYTkyNS04MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsHs0FCAUDTTCz13g3rBupYp2Fkd8nM8Sdm7kBqq4szWR3A5OFfW039LI
2pcXQG2sT8xElhX9Va/0Qh0E5TElRIqRscESv0vdXWYKfAYfHOqxsZn+J+2H8HR0
8Ui7yHIwyAi2Ysky+KnUOIZqtn1GzLrXwfjZ+h1itOIJ7cjPqU90cA6oiiidqzyx
Lgno2ofZciQcOWO1pZ1ATZ5sMgQ5gWWmK+J0M3pDQ+IAGsrSofh+VuXdrVfDdvk+
N0iTk7oycO+v+1vq9KVHELvhEeye452fVJE7r00t1a0l1eVHu16woKf9tPmEDgp8
uZUl67gyu3QSoB/67+exJgXz+M7YMQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJX2
AP7mW12FCHITCmcUrRmZLOzzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RTE0ODA4MjA0QjQxMUYwQTdFNDhBODA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP36MA0GCSqGSIb3DQEBCwUA
A4IBAQBa/OVOqrFqmaXw0AWgk2GJG2nz1sADnHsMFuFWVcXYy9rjYUSpqB+UzzPF
JyHLBi9c66LniS7JfHTx7RldqZExpo+4v1DhwxWOqQ5fuYjO57LoqSOn8Q2Hv5tA
XoIWdNDLrl3IK8Qb7A6garegf7j22+f2pZO6rybILjhLRNA7WmC2VO0qJgphjVX3
1x1x069F2tT5fYGFEYpd5xr7Nkp22Cl1Z/fzh33J51VSyH5cXKnM6Mm3Z/GKkVxf
4Fig2iVYinRJMUAO0E9k4fHOMbeTMotAsdow0rCTeE8Agp5vR19SZjC3EiJI9c/R
ERLozzsWvebv8f4AN1TdOksDJ4nn
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:33 2025 by rpki-client