Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E86E5C1CFF3011EFA2B6D0BC762E951A.roa
File: E86E5C1CFF3011EFA2B6D0BC762E951A.roa (raw, json)
Hash identifier: nqHyOx7WiNCfrmdf3VHVy5tcQwhzMlHjNnd+6V5aN7I=
Subject key identifier: B6:C0:81:57:AA:F6:6C:6F:7C:14:C7:FC:3C:B9:22:E4:0A:E3:2F:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01454E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E86E5C1CFF3011EFA2B6D0BC762E951A.roa
Signing time: Wed 12 Mar 2025 10:58:20 +0000
ROA not before: Wed 12 Mar 2025 10:58:16 +0000
ROA not after: Thu 24 Apr 2025 10:58:16 +0000
asID: 8796
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83278 (0x1454e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 12 10:58:16 2025 GMT
Not After : Apr 24 10:58:16 2025 GMT
Subject: CN=67d168cb-2354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:93:59:b3:6b:0b:6f:a1:a4:c2:5d:da:82:
f3:a7:80:1a:3f:5e:b6:7e:19:b3:8b:46:11:31:56:
77:cf:ff:f8:bc:1e:d7:2d:1f:29:da:69:cf:bf:6b:
28:02:9e:41:c1:7d:49:3f:00:c2:50:87:ff:3d:db:
94:40:79:99:a8:3c:2e:17:71:8c:20:87:e0:88:56:
15:80:92:3f:eb:d4:6d:d3:fe:40:4d:07:87:e0:71:
e5:0a:84:2c:0d:1f:f3:f5:a2:b1:6c:c7:82:aa:c5:
d7:12:9e:ec:05:3e:88:d8:fc:50:88:d4:66:32:b0:
d6:68:48:a8:fb:41:ce:31:e8:5d:80:a2:53:67:e8:
f7:62:a5:bd:f1:4c:14:4a:d1:57:8e:b3:06:c2:18:
5d:06:8f:f0:36:15:4f:1a:e8:c8:6a:18:6f:a5:98:
01:4a:17:de:f2:9b:5e:a9:b8:4a:3a:48:23:d3:9d:
6f:0b:de:0f:ea:b2:47:60:13:83:a9:1c:21:9c:bc:
68:88:4a:77:12:7d:81:b5:61:c8:70:35:08:5c:85:
67:67:89:7b:ee:83:ff:f2:e3:14:21:a0:e4:9c:c2:
08:99:a4:a5:6c:c8:f3:cd:ae:24:01:e4:18:2d:db:
46:75:96:cb:0c:3b:fc:c3:dd:9a:e3:5a:49:bd:1b:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:81:57:AA:F6:6C:6F:7C:14:C7:FC:3C:B9:22:E4:0A:E3:2F:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E86E5C1CFF3011EFA2B6D0BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.53.255
Signature Algorithm: sha256WithRSAEncryption
48:ee:8c:6a:1c:ec:f6:65:d9:bb:13:d9:51:35:f7:cd:03:fc:
bb:40:5d:aa:40:cf:1e:29:45:97:5f:00:23:f1:02:28:e8:7c:
27:5c:03:51:73:80:b2:fa:8b:61:e1:31:78:5b:e7:f2:86:99:
e9:73:cb:de:3c:3d:6e:7a:cd:7f:4c:48:48:de:f4:76:9c:cb:
93:93:74:51:5a:5a:9c:2b:21:9d:b6:31:c2:5b:0a:d7:df:86:
1d:3c:7a:44:1e:d9:ac:85:3f:6c:8a:ec:bb:94:be:2f:ff:e4:
8f:de:d4:ce:8b:f4:ab:20:6c:c3:f4:ff:2a:dd:a1:e5:1a:96:
1e:b5:dd:48:20:29:29:81:ac:cf:a8:86:3f:7c:1f:1d:86:29:
f3:02:1c:09:e4:6e:b3:00:55:16:94:47:0f:a4:56:69:65:0a:
0b:44:cc:fe:13:f7:41:b8:26:62:c2:04:9b:e6:2f:d4:a4:e8:
52:ac:d4:49:ce:af:78:cd:cf:1c:88:6a:23:73:ac:ff:1f:8a:
c8:7d:40:5c:e6:79:c5:a2:f2:0c:66:04:2e:fe:7c:ce:c6:7c:
a2:44:40:25:50:db:6e:db:32:8c:6e:9b:43:0b:c6:84:1e:51:
53:86:d2:3f:e7:13:2a:aa:e7:d5:c6:3c:8a:fa:ec:cf:19:44:
de:8f:ec:da
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUVOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEyMTA1ODE2WhcNMjUwNDI0MTA1ODE2WjAYMRYw
FAYDVQQDEw02N2QxNjhjYi0yMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo2WTWbNrC2+hpMJd2oLzp4AaP162fhmzi0YRMVZ3z//4vB7XLR8p2mnP
v2soAp5BwX1JPwDCUIf/PduUQHmZqDwuF3GMIIfgiFYVgJI/69Rt0/5ATQeH4HHl
CoQsDR/z9aKxbMeCqsXXEp7sBT6I2PxQiNRmMrDWaEio+0HOMehdgKJTZ+j3YqW9
8UwUStFXjrMGwhhdBo/wNhVPGujIahhvpZgBShfe8pteqbhKOkgj051vC94P6rJH
YBODqRwhnLxoiEp3En2BtWHIcDUIXIVnZ4l77oP/8uMUIaDknMIImaSlbMjzza4k
AeQYLdtGdZbLDDv8w92a41pJvRtDdQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLbA
gVeq9mxvfBTH/Dy5IuQK4y+oMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FODZFNUMxQ0ZGMzAxMUVGQTJCNkQwQkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOc7xgDBAGc7zQwDQYJKoZI
hvcNAQELBQADggEBAEjujGoc7PZl2bsT2VE1980D/LtAXapAzx4pRZdfACPxAijo
fCdcA1FzgLL6i2HhMXhb5/KGmelzy948PW56zX9MSEje9Hacy5OTdFFaWpwrIZ22
McJbCtffhh08ekQe2ayFP2yK7LuUvi//5I/e1M6L9KsgbMP0/yrdoeUalh613Ugg
KSmBrM+ohj98Hx2GKfMCHAnkbrMAVRaURw+kVmllCgtEzP4T90G4JmLCBJvmL9Sk
6FKs1EnOr3jNzxyIaiNzrP8fish9QFzmecWi8gxmBC7+fM7GfKJEQCVQ227bMoxu
m0MLxoQeUVOG0j/nEyqq59XGPIr67M8ZRN6P7No=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:17 2025 by rpki-client