Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF12788AF44511EFAF4DA66D762E951A.roa
File: BF12788AF44511EFAF4DA66D762E951A.roa (raw, json)
Hash identifier: 3BtyDfWXSh60f3YW2E4/71EbBZh/zZ+qYkGUguaGgFA=
Subject key identifier: 8B:41:AA:4B:C5:77:D0:F2:55:08:D0:5C:67:4C:85:0C:ED:8D:45:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01332A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF12788AF44511EFAF4DA66D762E951A.roa
Signing time: Wed 26 Feb 2025 13:29:47 +0000
ROA not before: Wed 26 Feb 2025 13:29:42 +0000
ROA not after: Thu 19 Feb 2026 13:29:42 +0000
asID: 984
IP address blocks: 156.252.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78634 (0x1332a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:29:42 2025 GMT
Not After : Feb 19 13:29:42 2026 GMT
Subject: CN=67bf174b-7299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:e2:16:bd:1d:1b:31:b7:8f:90:73:d3:23:
40:6e:87:5d:cd:b6:61:2c:3c:dc:3d:ea:f5:0c:fe:
c2:1b:c7:9e:cd:e9:ca:66:fb:7a:43:e4:5b:5f:b8:
7a:57:f4:7a:f1:19:3c:2f:f1:08:2f:3a:2c:97:ff:
78:b5:58:da:75:47:a0:16:03:a2:c5:45:b9:e1:75:
8d:0f:4f:63:11:ef:31:19:ef:cf:be:78:e5:49:18:
5f:d0:cc:fb:9c:68:df:4c:5c:25:5a:1f:aa:8e:43:
df:17:31:5c:67:7f:f7:b6:cd:f0:ed:2a:41:ab:b9:
5d:f5:d0:c6:52:58:d4:ee:14:9e:a7:0e:bf:d1:65:
e5:46:07:0d:b6:5d:2d:7b:f6:a7:37:5f:34:f9:9e:
1e:a6:68:e0:76:22:d1:9b:e2:96:9d:0a:8f:f4:4c:
54:3a:07:97:6e:c3:5c:a2:56:4d:0b:e8:48:ff:62:
41:e0:30:e8:9a:69:81:13:3c:b7:69:6e:4c:3b:3d:
ed:28:9a:e4:4b:0f:24:98:6c:de:05:09:28:2b:0c:
ce:15:27:4e:6e:1c:96:05:55:3f:34:51:18:0f:76:
8c:79:93:6c:39:dc:01:1e:b3:f1:fd:72:85:e8:32:
fb:25:26:5e:83:4c:2b:2c:8e:26:cf:07:06:2a:c8:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:AA:4B:C5:77:D0:F2:55:08:D0:5C:67:4C:85:0C:ED:8D:45:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF12788AF44511EFAF4DA66D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.169.0/24
Signature Algorithm: sha256WithRSAEncryption
39:05:07:0e:94:8a:44:20:b4:3b:b6:d4:b0:ee:6b:7c:ef:45:
d6:3d:d8:19:d7:7a:51:17:83:02:b4:e2:8a:7f:7e:86:77:08:
c7:fd:a9:f0:36:3d:21:2c:1b:d3:2b:50:98:13:8c:01:29:28:
46:f8:4a:9a:db:dc:e3:5f:7e:0b:77:fb:fc:64:12:ff:86:de:
59:11:77:80:73:13:e2:37:e0:1a:10:fe:13:67:d2:13:c5:17:
eb:70:07:d8:3f:99:6c:1c:97:2d:2b:22:67:5e:ce:6f:d5:c1:
af:78:08:28:76:b6:41:90:b1:5f:9c:1d:80:60:fd:3d:6f:ab:
86:c0:0e:a6:63:06:01:0a:f4:2b:21:65:65:58:c2:e3:ac:8a:
0f:7f:32:2c:51:4a:da:7e:6f:b5:ca:e9:73:b2:a1:da:da:8e:
5a:60:62:80:2b:25:8d:1e:09:b8:52:98:c6:83:21:bd:c6:c6:
6d:46:70:0b:6c:7a:0c:27:c2:ac:30:d6:42:58:59:91:7b:a8:
16:45:23:25:90:3d:6a:84:dc:ef:66:3e:c4:38:6a:88:2b:bf:
51:6d:f9:a8:c5:09:49:b7:db:41:f6:b4:fa:41:1b:13:c8:5a:
6c:1f:0a:a2:6f:8f:e4:85:2c:e8:79:57:c5:f3:92:7e:12:e7:
fd:a7:cb:96
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATMqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTMyOTQyWhcNMjYwMjE5MTMyOTQyWjAYMRYw
FAYDVQQDEw02N2JmMTc0Yi03Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1HziFr0dGzG3j5Bz0yNAboddzbZhLDzcPer1DP7CG8eezenKZvt6Q+Rb
X7h6V/R68Rk8L/EILzosl/94tVjadUegFgOixUW54XWND09jEe8xGe/PvnjlSRhf
0Mz7nGjfTFwlWh+qjkPfFzFcZ3/3ts3w7SpBq7ld9dDGUljU7hSepw6/0WXlRgcN
tl0te/anN180+Z4epmjgdiLRm+KWnQqP9ExUOgeXbsNcolZNC+hI/2JB4DDommmB
Ezy3aW5MOz3tKJrkSw8kmGzeBQkoKwzOFSdObhyWBVU/NFEYD3aMeZNsOdwBHrPx
/XKF6DL7JSZeg0wrLI4mzwcGKsjw+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFItB
qkvFd9DyVQjQXGdMhQztjUXwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRjEyNzg4QUY0NDUxMUVGQUY0REE2NkQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPypMA0GCSqGSIb3DQEBCwUA
A4IBAQA5BQcOlIpEILQ7ttSw7mt870XWPdgZ13pRF4MCtOKKf36GdwjH/anwNj0h
LBvTK1CYE4wBKShG+Eqa29zjX34Ld/v8ZBL/ht5ZEXeAcxPiN+AaEP4TZ9ITxRfr
cAfYP5lsHJctKyJnXs5v1cGveAgodrZBkLFfnB2AYP09b6uGwA6mYwYBCvQrIWVl
WMLjrIoPfzIsUUrafm+1yulzsqHa2o5aYGKAKyWNHgm4UpjGgyG9xsZtRnALbHoM
J8KsMNZCWFmRe6gWRSMlkD1qhNzvZj7EOGqIK79RbfmoxQlJt9tB9rT6QRsTyFps
Hwqib4/khSzoeVfF85J+Euf9p8uW
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:25:01 2025 by rpki-client