Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D093994F43711EF8E8F758A762E951A.roa
File: 9D093994F43711EF8E8F758A762E951A.roa (raw, json)
Hash identifier: hLk96/wYJOqXFUMFpjqWyRxRSKE+TNAcLqq0EGC0sk8=
Subject key identifier: 90:20:A6:AE:4D:5E:43:B4:A7:AF:3F:C2:A6:87:43:4A:30:82:2A:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0131F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D093994F43711EF8E8F758A762E951A.roa
Signing time: Wed 26 Feb 2025 11:48:37 +0000
ROA not before: Wed 26 Feb 2025 11:48:33 +0000
ROA not after: Thu 19 Feb 2026 11:48:33 +0000
asID: 984
IP address blocks: 156.252.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78322 (0x131f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 11:48:33 2025 GMT
Not After : Feb 19 11:48:33 2026 GMT
Subject: CN=67beff95-9ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:a3:b7:7c:78:80:89:e3:a5:31:2e:27:4e:
34:1f:7a:cd:ac:50:b1:ec:1b:ad:f6:9e:71:c9:5e:
1e:ac:f4:59:22:24:b3:7a:08:e1:0a:5b:b0:4c:a9:
9c:0a:7f:f3:85:92:2a:d3:0b:b8:d5:96:dd:d8:3b:
ba:01:ee:7b:c7:12:f1:87:2b:b0:9e:a8:4b:3d:70:
58:f0:63:04:43:e5:96:83:52:31:66:a3:f8:5a:c4:
37:e5:42:e1:fb:65:c7:ff:08:9a:64:f0:8f:0d:6e:
90:c5:39:22:64:94:25:f8:cb:ce:79:69:05:eb:c7:
53:74:45:4e:e8:89:25:7f:0d:d8:30:9c:64:77:a3:
33:0d:0f:93:a3:66:b3:c8:1d:76:c2:d5:b5:79:c3:
45:16:6f:0d:ac:13:00:02:35:1c:e2:c4:21:e6:17:
99:f4:84:84:98:b7:bf:b5:e9:ac:01:3f:88:42:9e:
63:52:75:51:f9:f5:30:7a:98:e0:5c:68:bb:a4:ee:
7f:15:7c:63:58:af:8c:df:35:ab:5e:95:a3:01:56:
39:ae:0d:32:ed:9c:62:93:20:c5:fd:2b:26:d8:42:
f0:b7:94:bd:ee:b4:27:07:63:dc:a3:b3:8b:33:6e:
22:28:fa:30:7b:72:95:38:e8:58:a4:89:05:00:a3:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:A6:AE:4D:5E:43:B4:A7:AF:3F:C2:A6:87:43:4A:30:82:2A:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D093994F43711EF8E8F758A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:f2:4d:d9:89:03:59:35:11:27:4a:f3:35:fb:30:2a:b0:
76:72:1d:2b:0f:c6:7d:18:fa:58:81:6d:5e:21:68:ac:48:8d:
55:5e:27:13:0c:84:1c:5a:b7:82:26:1e:ae:e4:86:d2:f1:79:
31:2f:aa:e0:46:82:9f:cf:76:72:ad:b8:72:69:72:f4:9d:9e:
17:d4:18:1f:5f:15:fb:f7:0b:1d:16:02:ad:e9:91:61:f4:b9:
26:57:d0:9b:ad:50:39:15:5c:33:70:9e:1b:a4:5b:1d:ee:1d:
be:07:9d:f4:a1:fe:31:c7:f6:23:26:9a:a3:a5:ea:53:12:52:
fe:d6:3a:6c:e9:47:f1:e1:7f:1b:a2:61:40:57:af:92:61:4b:
bf:a8:9c:69:88:21:61:4f:7e:fc:c4:eb:b6:ff:33:6b:f8:d9:
af:31:40:4d:52:f5:67:22:8b:62:44:a7:46:8c:23:b7:ca:c4:
11:6e:0f:40:1a:60:ef:3e:a1:53:c8:98:57:f6:c8:38:b8:1e:
f8:ca:a7:74:7d:bf:be:fa:30:24:c7:cb:cd:9c:f3:c3:dc:53:
ed:12:4f:20:57:33:e5:44:d1:30:0a:f6:29:80:69:aa:5b:f7:
c0:31:65:38:c3:53:58:32:ed:32:d5:3f:a9:09:6a:b5:2e:f8:
17:95:46:27
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATHyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTE0ODMzWhcNMjYwMjE5MTE0ODMzWjAYMRYw
FAYDVQQDEw02N2JlZmY5NS05ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz8Sjt3x4gInjpTEuJ040H3rNrFCx7But9p5xyV4erPRZIiSzegjhCluw
TKmcCn/zhZIq0wu41Zbd2Du6Ae57xxLxhyuwnqhLPXBY8GMEQ+WWg1IxZqP4WsQ3
5ULh+2XH/wiaZPCPDW6QxTkiZJQl+MvOeWkF68dTdEVO6Iklfw3YMJxkd6MzDQ+T
o2azyB12wtW1ecNFFm8NrBMAAjUc4sQh5heZ9ISEmLe/temsAT+IQp5jUnVR+fUw
epjgXGi7pO5/FXxjWK+M3zWrXpWjAVY5rg0y7ZxikyDF/Ssm2ELwt5S97rQnB2Pc
o7OLM24iKPowe3KVOOhYpIkFAKMUbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJAg
pq5NXkO0p68/wqaHQ0owgipoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RDA5Mzk5NEY0MzcxMUVGOEU4Rjc1OEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPx6MA0GCSqGSIb3DQEBCwUA
A4IBAQBaxfJN2YkDWTURJ0rzNfswKrB2ch0rD8Z9GPpYgW1eIWisSI1VXicTDIQc
WreCJh6u5IbS8XkxL6rgRoKfz3ZyrbhyaXL0nZ4X1BgfXxX79wsdFgKt6ZFh9Lkm
V9CbrVA5FVwzcJ4bpFsd7h2+B530of4xx/YjJpqjpepTElL+1jps6Ufx4X8bomFA
V6+SYUu/qJxpiCFhT378xOu2/zNr+NmvMUBNUvVnIotiRKdGjCO3ysQRbg9AGmDv
PqFTyJhX9sg4uB74yqd0fb+++jAkx8vNnPPD3FPtEk8gVzPlRNEwCvYpgGmqW/fA
MWU4w1NYMu0y1T+pCWq1LvgXlUYn
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:44 2025 by rpki-client