Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CADC02F4A411EF9BFEEA7A762E951A.roa
File: C1CADC02F4A411EF9BFEEA7A762E951A.roa (raw, json)
Hash identifier: vQXhXpoA+aUa2zK9UKl5XBWq3KeCj5lNo3xo+/sUYXY=
Subject key identifier: 76:04:C6:63:5B:FC:8E:45:19:F7:BE:7F:28:93:BC:09:7D:46:2E:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013892
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CADC02F4A411EF9BFEEA7A762E951A.roa
Signing time: Thu 27 Feb 2025 00:49:53 +0000
ROA not before: Thu 27 Feb 2025 00:00:50 +0000
ROA not after: Thu 19 Feb 2026 00:00:50 +0000
asID: 984
IP address blocks: 156.232.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80018 (0x13892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:50 2025 GMT
Not After : Feb 19 00:00:50 2026 GMT
Subject: CN=67bfb6b1-1d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:b0:fc:2c:f9:98:0b:78:92:32:00:56:67:
5e:fa:1a:0c:f6:85:01:1b:6c:07:85:85:3a:8d:9e:
88:67:79:71:4a:d3:ee:12:92:88:2a:96:ce:b6:07:
b7:54:5e:b9:7d:c8:77:be:77:51:6d:30:36:01:d8:
1f:19:79:b6:f3:35:af:c2:7a:40:52:28:87:05:03:
d9:83:0e:6b:b5:e1:9b:1a:af:02:97:7b:b7:a7:df:
80:64:c0:9e:0b:52:7c:bc:b1:36:5f:2b:dd:dd:00:
06:c7:4f:c4:a3:6b:dd:96:ae:4f:3d:6d:7b:6f:7f:
e7:88:e2:69:2f:74:f9:df:38:a3:da:b7:56:4b:7e:
ab:68:53:34:65:c9:82:87:8d:96:4d:af:de:fd:19:
e2:0b:c1:36:30:25:6f:23:0b:34:95:c0:8e:67:ab:
e3:46:94:5b:f2:53:7e:20:63:0b:23:0c:45:8b:ff:
69:7d:8d:d3:56:de:f6:29:24:7e:df:e1:2b:ef:da:
94:a8:38:3f:fd:01:a7:99:61:16:5a:f7:7e:c8:06:
6b:c5:53:d8:f2:62:6e:bd:e4:37:08:dd:58:94:85:
47:71:fe:89:b5:33:34:69:de:b4:67:74:12:22:9f:
0c:12:df:42:d3:b1:85:3d:b8:17:e7:cc:0b:d9:26:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:04:C6:63:5B:FC:8E:45:19:F7:BE:7F:28:93:BC:09:7D:46:2E:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1CADC02F4A411EF9BFEEA7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.102.0/24
Signature Algorithm: sha256WithRSAEncryption
01:20:83:da:b6:57:86:b2:69:db:59:d6:ed:a7:fc:88:8a:b3:
22:98:81:73:e2:af:ff:24:b3:59:be:2a:c6:2a:4b:44:b5:ac:
fa:31:99:2b:3b:ad:43:e9:f5:f8:da:55:4e:c5:2f:f3:e1:f5:
a0:af:88:80:02:82:56:23:41:b6:9e:e1:dd:a9:9d:ab:0c:93:
28:07:04:0c:d2:24:6b:14:57:3e:67:82:00:4d:6c:65:59:f7:
e6:57:c8:b3:bc:05:b0:0e:c7:45:f9:bf:83:49:02:ad:6d:59:
6b:1b:38:a3:04:1e:a7:26:e3:a5:05:33:7f:a2:af:be:e2:8f:
41:0f:e4:f9:61:c7:85:3b:52:07:59:f9:44:61:fa:84:95:02:
51:16:21:d1:9c:95:96:93:03:8e:33:0c:8f:fa:14:89:df:94:
02:38:fc:31:33:21:7f:11:53:c8:7c:92:6d:f3:17:1e:c7:16:
7c:a4:56:8c:17:a5:b2:c2:19:90:eb:d4:05:42:ef:0c:5e:c0:
0a:19:9c:85:f4:62:90:8f:7a:62:c1:35:62:07:ad:b9:74:45:
cb:18:74:e8:a3:10:f1:2a:26:ee:f1:35:1c:ea:d6:f4:0a:99:
76:68:25:79:dc:10:91:60:44:b9:8c:50:28:aa:4e:d6:a3:e1:
04:fb:ba:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATiSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDAwMDUwWhcNMjYwMjE5MDAwMDUwWjAYMRYw
FAYDVQQDEw02N2JmYjZiMS0xZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsuyw/Cz5mAt4kjIAVmde+hoM9oUBG2wHhYU6jZ6IZ3lxStPuEpKIKpbO
tge3VF65fch3vndRbTA2AdgfGXm28zWvwnpAUiiHBQPZgw5rteGbGq8Cl3u3p9+A
ZMCeC1J8vLE2Xyvd3QAGx0/Eo2vdlq5PPW17b3/niOJpL3T53zij2rdWS36raFM0
ZcmCh42WTa/e/RniC8E2MCVvIws0lcCOZ6vjRpRb8lN+IGMLIwxFi/9pfY3TVt72
KSR+3+Er79qUqDg//QGnmWEWWvd+yAZrxVPY8mJuveQ3CN1YlIVHcf6JtTM0ad60
Z3QSIp8MEt9C07GFPbgX58wL2SYEFQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHYE
xmNb/I5FGfe+fyiTvAl9Ri6ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMUNBREMwMkY0QTQxMUVGOUJGRUVBN0E3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOhmMA0GCSqGSIb3DQEBCwUA
A4IBAQABIIPatleGsmnbWdbtp/yIirMimIFz4q//JLNZvirGKktEtaz6MZkrO61D
6fX42lVOxS/z4fWgr4iAAoJWI0G2nuHdqZ2rDJMoBwQM0iRrFFc+Z4IATWxlWffm
V8izvAWwDsdF+b+DSQKtbVlrGzijBB6nJuOlBTN/oq++4o9BD+T5YceFO1IHWflE
YfqElQJRFiHRnJWWkwOOMwyP+hSJ35QCOPwxMyF/EVPIfJJt8xcexxZ8pFaMF6Wy
whmQ69QFQu8MXsAKGZyF9GKQj3piwTViB625dEXLGHTooxDxKibu8TUc6tb0Cpl2
aCV53BCRYES5jFAoqk7Wo+EE+7q6
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:44 2025 by rpki-client