Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/956C4ADAF43411EF8C9ADB75762E951A.roa
File: 956C4ADAF43411EF8C9ADB75762E951A.roa (raw, json)
Hash identifier: f544Fy1DB5392Kzx/LvCz/HEwwgJ4L6V/B0Krn+Li2w=
Subject key identifier: 4C:8A:53:C7:A7:45:FF:69:FC:10:8F:A4:D8:21:E9:14:A3:54:AC:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/956C4ADAF43411EF8C9ADB75762E951A.roa
Signing time: Wed 26 Feb 2025 11:26:55 +0000
ROA not before: Wed 26 Feb 2025 11:26:52 +0000
ROA not after: Thu 19 Feb 2026 11:26:52 +0000
asID: 984
IP address blocks: 156.252.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78281 (0x131c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:26:52 2025 GMT
Not After : Feb 19 11:26:52 2026 GMT
Subject: CN=67befa7f-1bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:ce:49:c1:4e:1b:b6:d6:be:1f:2a:34:38:
6f:42:e0:29:39:ba:99:46:d7:60:b5:58:db:e2:54:
70:2b:ea:30:71:46:54:53:c9:db:2e:db:40:6f:61:
3b:8d:28:f4:d8:ea:41:ac:ea:5b:47:8c:47:30:bd:
06:fa:42:cb:ae:b1:0d:36:d9:cf:78:22:92:a4:91:
03:e1:13:cf:8e:8d:7e:3c:0e:98:4e:a7:03:67:71:
2a:b1:64:cc:d3:57:3a:9a:84:1c:b4:a0:d0:91:93:
3a:9e:8b:f2:4d:75:cc:a3:0e:3d:6f:b0:2f:88:bb:
94:8b:b6:56:56:72:ab:59:10:c4:02:fa:cf:71:a8:
35:3f:91:f2:c8:13:d7:eb:07:78:1f:0b:b9:e0:eb:
4a:d1:09:e1:c6:cb:1f:36:ff:32:cc:75:b1:e0:14:
31:d3:b8:8f:23:3b:ea:d4:77:5b:8a:e8:99:e6:d1:
b9:67:0f:57:ba:a9:73:07:76:88:b0:3c:da:ab:36:
ea:81:68:13:c2:be:6c:72:03:59:a9:d0:04:a5:c1:
95:7d:c6:78:13:f9:81:91:ba:0b:14:b9:52:5b:81:
67:d7:fd:c3:57:6b:03:1d:e0:5f:17:00:49:a1:87:
64:c6:ed:2b:41:38:80:c9:b9:9f:3a:65:07:1f:2c:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:53:C7:A7:45:FF:69:FC:10:8F:A4:D8:21:E9:14:A3:54:AC:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/956C4ADAF43411EF8C9ADB75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.115.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b7:99:52:52:6d:46:30:80:55:e1:5d:6a:c7:3f:4d:1d:d1:
d3:3a:3d:5c:1d:84:02:d7:ec:27:04:b2:7c:bd:fc:b2:85:d7:
e9:e3:5d:e4:15:d8:bf:5e:6f:1f:6e:fa:81:8e:a8:31:9c:be:
89:2a:fc:ed:6c:c5:50:26:3c:f2:32:4f:c4:b8:28:9d:99:1d:
44:ca:6e:b3:cf:8f:04:07:6b:b4:09:8d:b1:aa:2c:3c:f4:48:
39:5c:78:32:1b:fb:bf:71:18:de:b7:de:96:91:8b:e1:a6:1e:
91:8d:3e:bc:84:e2:8e:73:41:d1:c9:74:a5:ee:81:8c:be:65:
71:f1:d3:40:4b:8a:7d:2f:91:42:7c:50:4a:77:6c:86:98:78:
52:c6:7f:0e:20:c8:a4:35:98:c8:a9:c1:9c:aa:d3:58:f2:0e:
fe:c1:04:ed:db:d4:c6:23:c9:c1:bc:2e:d8:13:fa:a1:67:47:
51:f7:8a:38:c0:54:8e:07:3e:a7:e6:4e:70:1a:56:65:83:b8:
93:03:32:ba:7d:34:a1:c1:93:df:e0:a4:59:ad:a6:f8:6a:e6:
26:8d:0d:28:7d:f6:f9:68:01:ca:83:96:64:d2:cb:9d:2c:bc:
c5:dd:4d:ae:78:e9:42:4f:e5:ae:cb:e1:39:31:9b:5e:28:7a:
48:94:ff:ca
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATHJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTEyNjUyWhcNMjYwMjE5MTEyNjUyWjAYMRYw
FAYDVQQDEw02N2JlZmE3Zi0xYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAkknOScFOG7bWvh8qNDhvQuApObqZRtdgtVjb4lRwK+owcUZUU8nbLttA
b2E7jSj02OpBrOpbR4xHML0G+kLLrrENNtnPeCKSpJED4RPPjo1+PA6YTqcDZ3Eq
sWTM01c6moQctKDQkZM6novyTXXMow49b7AviLuUi7ZWVnKrWRDEAvrPcag1P5Hy
yBPX6wd4Hwu54OtK0QnhxssfNv8yzHWx4BQx07iPIzvq1HdbiuiZ5tG5Zw9Xuqlz
B3aIsDzaqzbqgWgTwr5scgNZqdAEpcGVfcZ4E/mBkboLFLlSW4Fn1/3DV2sDHeBf
FwBJoYdkxu0rQTiAybmfOmUHHyzflQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEyK
U8enRf9p/BCPpNgh6RSjVKxoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTZDNEFEQUY0MzQxMUVGOEM5QURCNzU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPxzMA0GCSqGSIb3DQEBCwUA
A4IBAQC7t5lSUm1GMIBV4V1qxz9NHdHTOj1cHYQC1+wnBLJ8vfyyhdfp413kFdi/
Xm8fbvqBjqgxnL6JKvztbMVQJjzyMk/EuCidmR1Eym6zz48EB2u0CY2xqiw89Eg5
XHgyG/u/cRjet96WkYvhph6RjT68hOKOc0HRyXSl7oGMvmVx8dNAS4p9L5FCfFBK
d2yGmHhSxn8OIMikNZjIqcGcqtNY8g7+wQTt29TGI8nBvC7YE/qhZ0dR94o4wFSO
Bz6n5k5wGlZlg7iTAzK6fTShwZPf4KRZrab4auYmjQ0offb5aAHKg5Zk0sudLLzF
3U2ueOlCT+Wuy+E5MZteKHpIlP/K
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:36 2025 by rpki-client