Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5639974F46711EF846B3C5C762E951A.roa
File: A5639974F46711EF846B3C5C762E951A.roa (raw, json)
Hash identifier: zZUKWRFh+CBf1f3NoqQqc3tP4/TqioZGML2TbsiDxYw=
Subject key identifier: D4:30:EA:CD:C9:7A:B2:1B:4B:E5:7A:3C:13:73:B7:47:03:26:5F:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0135A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5639974F46711EF846B3C5C762E951A.roa
Signing time: Wed 26 Feb 2025 17:32:27 +0000
ROA not before: Wed 26 Feb 2025 17:32:23 +0000
ROA not after: Sat 19 Feb 2028 17:32:23 +0000
asID: 17561
IP address blocks: 156.233.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79268 (0x135a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 17:32:23 2025 GMT
Not After : Feb 19 17:32:23 2028 GMT
Subject: CN=67bf502a-fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:54:0d:18:c8:f2:01:8c:57:4e:a1:50:e0:
23:ed:83:35:5d:99:56:99:06:ca:e0:77:58:4a:91:
f7:37:f1:b2:09:45:04:cb:a3:ae:a8:36:58:f4:ea:
e1:1b:11:a0:ac:2b:f1:7c:31:0e:be:ce:eb:d5:cc:
5e:e8:ab:7f:37:b3:02:3d:a8:22:c9:b3:82:06:fe:
fe:b0:d4:37:0c:a9:11:ac:1d:58:d7:05:73:3c:de:
c0:37:39:b9:9a:c9:e9:60:93:fd:2c:20:6d:64:a3:
ac:41:7e:5f:db:97:8a:cb:96:d7:52:d1:3f:5f:2c:
90:6b:34:d6:28:b8:bc:df:09:27:c8:67:93:5a:21:
36:de:8f:37:65:08:85:0f:3d:fd:ba:bd:45:2c:ef:
d0:a5:5a:e2:b3:a5:24:0a:13:88:57:b3:13:06:c1:
08:33:f1:fc:d0:91:66:26:d9:a4:bf:5b:d4:42:61:
55:41:b4:ce:56:86:9a:02:50:e1:c7:ae:73:3d:8a:
f2:38:a2:4d:ba:e2:04:79:11:0e:f6:6a:58:09:e0:
7a:76:40:38:ed:84:2a:f9:06:5d:47:91:04:a7:f9:
0c:86:31:4d:33:b6:2b:1f:8f:b1:bd:b8:66:56:66:
c9:fa:75:e5:4b:bb:10:0e:fb:d0:9a:27:be:f3:08:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:EA:CD:C9:7A:B2:1B:4B:E5:7A:3C:13:73:B7:47:03:26:5F:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5639974F46711EF846B3C5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.81.0/24
Signature Algorithm: sha256WithRSAEncryption
71:80:87:f8:40:9b:1c:2b:69:5d:51:b1:f5:1e:46:00:c5:77:
47:9a:e4:b9:d7:60:f5:74:25:26:6e:50:ea:55:7c:5f:da:b3:
8e:8a:06:82:4c:93:ce:14:aa:22:02:ab:4b:84:62:c6:91:9f:
25:47:ba:22:91:0a:7c:5d:a8:fa:c1:a0:46:a2:c4:2d:6e:06:
b3:a6:1e:de:08:8f:f9:d2:65:55:cc:f2:ab:5d:de:96:fd:d2:
c2:ee:07:9c:ba:4a:80:9f:c5:f1:fa:1d:e1:f7:6e:6c:f9:71:
f1:c3:c3:82:68:b2:73:1c:81:cf:24:7f:11:45:e4:b7:32:e7:
9d:01:0f:d2:dc:52:d7:d8:c8:56:d6:68:e9:3c:f8:b3:24:d0:
5b:d5:88:d1:1a:f0:21:e0:2b:e3:4a:4f:ba:fe:25:7c:8d:32:
f0:82:4f:d7:49:55:27:04:0e:04:86:e4:f4:8c:2c:6b:96:52:
f4:f4:6f:e0:55:b7:6b:79:7e:ed:84:0d:ae:d6:b1:63:e4:94:
a6:e3:c7:c8:41:69:16:3b:cd:99:ff:2a:e5:f5:66:f1:66:b8:
0c:87:a8:34:62:0e:0a:0c:52:71:4e:b5:00:cd:49:c4:74:2c:
67:16:e3:ff:a0:4a:9b:20:55:7e:31:5b:3f:c5:67:4b:43:d3:
02:0b:52:2e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATWkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTczMjIzWhcNMjgwMjE5MTczMjIzWjAYMRYw
FAYDVQQDEw02N2JmNTAyYS1mYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvIlUDRjI8gGMV06hUOAj7YM1XZlWmQbK4HdYSpH3N/GyCUUEy6OuqDZY
9OrhGxGgrCvxfDEOvs7r1cxe6Kt/N7MCPagiybOCBv7+sNQ3DKkRrB1Y1wVzPN7A
Nzm5msnpYJP9LCBtZKOsQX5f25eKy5bXUtE/XyyQazTWKLi83wknyGeTWiE23o83
ZQiFDz39ur1FLO/QpVris6UkChOIV7MTBsEIM/H80JFmJtmkv1vUQmFVQbTOVoaa
AlDhx65zPYryOKJNuuIEeREO9mpYCeB6dkA47YQq+QZdR5EEp/kMhjFNM7YrH4+x
vbhmVmbJ+nXlS7sQDvvQmie+8wiyfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNQw
6s3JerIbS+V6PBNzt0cDJl/JMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNTYzOTk3NEY0NjcxMUVGODQ2QjNDNUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlRMA0GCSqGSIb3DQEBCwUA
A4IBAQBxgIf4QJscK2ldUbH1HkYAxXdHmuS512D1dCUmblDqVXxf2rOOigaCTJPO
FKoiAqtLhGLGkZ8lR7oikQp8Xaj6waBGosQtbgazph7eCI/50mVVzPKrXd6W/dLC
7gecukqAn8Xx+h3h925s+XHxw8OCaLJzHIHPJH8RReS3MuedAQ/S3FLX2MhW1mjp
PPizJNBb1YjRGvAh4CvjSk+6/iV8jTLwgk/XSVUnBA4EhuT0jCxrllL09G/gVbdr
eX7thA2u1rFj5JSm48fIQWkWO82Z/yrl9WbxZrgMh6g0Yg4KDFJxTrUAzUnEdCxn
FuP/oEqbIFV+MVs/xWdLQ9MCC1Iu
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:38 2025 by rpki-client