Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA7A406E0CB011F0BCBDE052762E951A.roa
File: AA7A406E0CB011F0BCBDE052762E951A.roa (raw, json)
Hash identifier: BoIHoushMss4GTVZGh7WbVEWhxFofZnOme1TABuR+ss=
Subject key identifier: EA:37:F0:45:9C:48:F1:61:8D:81:99:15:C8:20:86:A7:B2:3B:9C:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014892
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA7A406E0CB011F0BCBDE052762E951A.roa
Signing time: Sat 29 Mar 2025 15:15:36 +0000
ROA not before: Sat 29 Mar 2025 15:15:32 +0000
ROA not after: Sun 20 Apr 2025 15:15:32 +0000
asID: 61461
IP address blocks: 156.247.128.0/17 maxlen: 24
156.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84114 (0x14892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 15:15:32 2025 GMT
Not After : Apr 20 15:15:32 2025 GMT
Subject: CN=67e80e98-b98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:c0:4a:62:f5:5e:8a:4e:5b:18:0e:7c:3d:
77:a3:cf:a4:15:89:8a:a8:4c:d2:7f:21:5a:a8:6f:
11:66:43:af:1d:7b:b6:cb:52:01:34:29:e7:9b:43:
60:93:6b:96:e4:f5:74:db:f1:fd:26:8b:25:62:87:
dc:7f:3e:3e:71:06:ae:f0:6a:bc:45:b8:4b:57:b9:
14:e7:42:b7:12:e9:8f:5c:59:32:5e:2d:f1:9f:86:
64:32:4a:a3:0f:b8:ba:46:c8:f7:2f:63:aa:d9:28:
e7:60:b8:6a:4b:48:25:11:87:92:0b:27:86:4e:34:
71:c5:bf:d3:ee:f5:00:be:bd:02:92:74:ed:b7:cd:
af:41:c7:3b:7b:4c:25:35:6a:ca:b6:ec:2d:17:02:
cd:87:3e:d6:8d:4d:b7:5f:dd:f4:ba:5f:2c:78:50:
af:1f:a7:da:08:8f:9b:fb:03:4e:2f:53:c1:ec:70:
d9:fe:1a:20:c9:17:df:39:ab:bb:98:51:46:57:39:
49:1b:f9:95:2d:9e:fb:e0:07:fc:e6:d3:bd:3b:06:
de:c2:9b:f1:1b:39:0c:ae:b1:72:82:67:14:d6:89:
13:cb:61:1b:66:86:a9:2d:27:47:88:b0:70:77:14:
04:04:9b:e8:98:c6:cd:e2:11:3c:a6:9b:f4:64:5e:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:37:F0:45:9C:48:F1:61:8D:81:99:15:C8:20:86:A7:B2:3B:9C:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA7A406E0CB011F0BCBDE052762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/17
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
64:af:e0:eb:14:42:96:90:5a:57:c7:d5:9e:17:b5:0f:4a:2a:
fc:e1:ac:e4:21:96:df:bd:c8:7f:ee:3b:c0:8b:38:5c:49:45:
20:b9:af:c0:56:ab:70:0d:6f:25:17:e6:5f:21:fd:62:06:e9:
34:df:8b:ae:1c:e2:39:f2:01:58:14:d7:9d:a9:13:36:93:4e:
1f:93:3b:ec:8d:79:b3:6b:79:e7:05:a2:98:df:82:b9:ef:d7:
42:bc:15:78:ea:91:b3:d5:3c:8f:54:f1:d7:db:22:10:d1:68:
46:23:8d:9f:f7:f2:cf:41:88:c7:4b:73:4a:ad:03:dd:91:32:
48:a3:61:aa:e7:0a:41:d8:2e:18:5e:a1:5f:e4:8f:ef:c7:a5:
d1:cf:55:65:48:2d:e1:8f:4a:ed:99:73:89:59:60:b4:a5:a6:
0c:21:40:70:49:a6:b3:9f:9b:5e:e9:76:9e:d4:e7:1f:27:3b:
e6:0d:44:6b:e9:61:88:57:ba:63:41:29:7f:45:12:ef:0c:8e:
5f:2b:ba:8f:e3:8f:d6:9f:5e:a4:a2:bc:9c:af:75:87:67:c0:
71:e9:15:c1:83:1b:63:5f:35:f7:6a:3c:5b:e2:16:e6:56:da:
c1:c3:b5:ed:88:75:40:f7:71:1e:84:74:c5:89:da:c6:5d:ed:
33:bb:53:3b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAUiSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI5MTUxNTMyWhcNMjUwNDIwMTUxNTMyWjAYMRYw
FAYDVQQDEw02N2U4MGU5OC1iOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoO3ASmL1XopOWxgOfD13o8+kFYmKqEzSfyFaqG8RZkOvHXu2y1IBNCnn
m0Ngk2uW5PV02/H9JoslYofcfz4+cQau8Gq8RbhLV7kU50K3EumPXFkyXi3xn4Zk
MkqjD7i6Rsj3L2Oq2SjnYLhqS0glEYeSCyeGTjRxxb/T7vUAvr0CknTtt82vQcc7
e0wlNWrKtuwtFwLNhz7WjU23X930ul8seFCvH6faCI+b+wNOL1PB7HDZ/hogyRff
Oau7mFFGVzlJG/mVLZ774Af85tO9OwbewpvxGzkMrrFygmcU1okTy2EbZoapLSdH
iLBwdxQEBJvomMbN4hE8ppv0ZF7zLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOo3
8EWcSPFhjYGZFcgghqeyO5zuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTdBNDA2RTBDQjAxMUYwQkNCREUwNTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnPeAAwQHnP+AMA0GCSqGSIb3
DQEBCwUAA4IBAQBkr+DrFEKWkFpXx9WeF7UPSir84azkIZbfvch/7jvAizhcSUUg
ua/AVqtwDW8lF+ZfIf1iBuk034uuHOI58gFYFNedqRM2k04fkzvsjXmza3nnBaKY
34K579dCvBV46pGz1TyPVPHX2yIQ0WhGI42f9/LPQYjHS3NKrQPdkTJIo2Gq5wpB
2C4YXqFf5I/vx6XRz1VlSC3hj0rtmXOJWWC0paYMIUBwSaazn5te6Xae1OcfJzvm
DURr6WGIV7pjQSl/RRLvDI5fK7qP44/Wn16korycr3WHZ8Bx6RXBgxtjXzX3ajxb
4hbmVtrBw7XtiHVA93EehHTFidrGXe0zu1M7
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:27 2025 by rpki-client