Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93FD696E0A2C11F0AF1F7563762E951A.roa
File: 93FD696E0A2C11F0AF1F7563762E951A.roa (raw, json)
Hash identifier: XGoajJ0OYzFktFdZLXt7JuzelSwE0kVAGzFpSDllbAE=
Subject key identifier: 1D:C8:B4:AC:3E:68:B3:2A:8B:C6:2C:56:49:FB:A1:2F:9C:B2:50:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01485C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93FD696E0A2C11F0AF1F7563762E951A.roa
Signing time: Wed 26 Mar 2025 10:25:03 +0000
ROA not before: Wed 26 Mar 2025 10:24:59 +0000
ROA not after: Mon 14 Apr 2025 10:24:59 +0000
asID: 138195
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84060 (0x1485c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 26 10:24:59 2025 GMT
Not After : Apr 14 10:24:59 2025 GMT
Subject: CN=67e3d5ff-a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:13:c3:ee:c8:1a:d0:19:43:13:6a:b8:7d:
74:e5:21:db:70:c8:26:51:c8:db:58:4d:93:b4:d6:
1d:98:c3:c0:ee:32:d0:99:26:53:c5:b4:63:23:ba:
07:f7:b6:42:ab:e7:fa:8a:6c:18:a8:a3:11:b2:47:
04:e0:5c:e2:50:11:22:4d:22:07:60:53:6d:0f:55:
1d:ac:99:dd:21:63:b0:2e:9a:30:58:d9:99:83:ee:
5a:99:03:ff:83:0c:2b:9e:73:d4:8c:9d:f4:e6:0d:
40:d7:29:e0:19:4c:ae:45:14:42:46:aa:d2:a5:30:
a6:4b:a9:69:0e:ac:99:b3:07:a5:01:81:af:c5:a7:
37:e0:58:6d:f0:43:c3:1e:43:de:f7:3c:88:6b:9f:
b1:1a:ee:0d:40:4a:54:61:12:e3:9e:19:a0:3b:7d:
f1:55:b6:1e:7e:d2:3d:85:0d:8f:07:f6:c1:59:af:
f4:96:75:6b:41:b7:8d:1b:c8:f5:ea:4d:8c:c6:a3:
f5:0e:a7:6d:4b:00:64:f1:cc:e4:b3:a8:e9:ca:d9:
b0:2f:fd:5a:bb:f4:6a:06:ad:fc:1c:f8:a0:9d:c2:
0c:cb:0c:1a:b6:25:46:d2:c8:9a:0e:3d:84:cb:40:
9c:fa:3e:15:0a:eb:c5:a3:ba:76:46:ec:a6:68:1c:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:B4:AC:3E:68:B3:2A:8B:C6:2C:56:49:FB:A1:2F:9C:B2:50:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93FD696E0A2C11F0AF1F7563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
73:2e:14:70:99:1e:6d:d7:84:10:3f:aa:e6:d1:14:0d:6d:1c:
49:4a:e4:b3:e8:e0:ef:39:00:ff:97:6c:21:b9:7b:eb:ad:20:
53:13:b3:88:87:59:5d:f1:d2:61:43:cc:96:23:37:31:e9:52:
71:05:6d:53:56:60:68:31:41:71:a2:d2:67:71:c6:f4:9f:77:
51:9c:c4:d3:12:5f:90:93:92:c0:d2:ee:13:bc:04:18:08:9d:
46:1e:14:89:be:3a:15:e9:e6:19:35:95:9c:05:37:d8:7c:76:
0d:0c:8a:23:35:bf:05:72:c3:7c:ba:1a:3d:bc:00:a2:a6:b5:
50:5c:7b:32:a7:2d:3a:75:ca:ee:e6:f2:98:05:ff:42:5b:29:
f2:5e:a2:5e:b2:cc:c0:1a:df:0c:2f:32:68:80:e1:6e:2d:bc:
82:33:e8:e6:89:7e:46:cc:d7:56:a5:be:45:28:8e:99:3c:74:
2b:57:e0:9d:2e:dd:4a:ea:e8:5c:29:81:27:20:4f:bd:4e:f2:
ba:ee:0c:0d:a3:4b:8f:4c:fe:ab:87:57:0f:a5:fd:e5:54:50:
41:c6:7a:72:64:d8:e6:4b:b5:1d:99:16:61:11:0a:21:cc:d8:
84:21:88:67:00:3c:bc:dd:b1:47:13:3c:b8:4a:d8:5d:83:ea:
ab:23:41:8b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUhcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI2MTAyNDU5WhcNMjUwNDE0MTAyNDU5WjAYMRYw
FAYDVQQDEw02N2UzZDVmZi1hODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwaoTw+7IGtAZQxNquH105SHbcMgmUcjbWE2TtNYdmMPA7jLQmSZTxbRj
I7oH97ZCq+f6imwYqKMRskcE4FziUBEiTSIHYFNtD1UdrJndIWOwLpowWNmZg+5a
mQP/gwwrnnPUjJ305g1A1yngGUyuRRRCRqrSpTCmS6lpDqyZswelAYGvxac34Fht
8EPDHkPe9zyIa5+xGu4NQEpUYRLjnhmgO33xVbYeftI9hQ2PB/bBWa/0lnVrQbeN
G8j16k2MxqP1DqdtSwBk8czks6jpytmwL/1au/RqBq38HPigncIMywwatiVG0sia
Dj2Ey0Cc+j4VCuvFo7p2RuymaByXcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB3I
tKw+aLMqi8YsVkn7oS+cslDyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85M0ZENjk2RTBBMkMxMUYwQUYxRjc1NjM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP4UMA0GCSqGSIb3DQEBCwUA
A4IBAQBzLhRwmR5t14QQP6rm0RQNbRxJSuSz6ODvOQD/l2whuXvrrSBTE7OIh1ld
8dJhQ8yWIzcx6VJxBW1TVmBoMUFxotJnccb0n3dRnMTTEl+Qk5LA0u4TvAQYCJ1G
HhSJvjoV6eYZNZWcBTfYfHYNDIojNb8FcsN8uho9vACiprVQXHsypy06dcru5vKY
Bf9CWynyXqJesszAGt8MLzJogOFuLbyCM+jmiX5GzNdWpb5FKI6ZPHQrV+CdLt1K
6uhcKYEnIE+9TvK67gwNo0uPTP6rh1cPpf3lVFBBxnpyZNjmS7UdmRZhEQohzNiE
IYhnADy83bFHEzy4Sthdg+qrI0GL
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:24 2025 by rpki-client