Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8B31FFCF47A11EFB0028760762E951A.roa
File: E8B31FFCF47A11EFB0028760762E951A.roa (raw, json)
Hash identifier: pESPhG1eG7dtqR82urTc0wgoaQMNDrE9cyoAzgafW40=
Subject key identifier: C6:49:25:21:45:DC:5E:E1:E0:D0:C6:6F:4B:60:2A:1A:11:F9:73:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01373B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8B31FFCF47A11EFB0028760762E951A.roa
Signing time: Wed 26 Feb 2025 19:50:20 +0000
ROA not before: Wed 26 Feb 2025 19:50:16 +0000
ROA not after: Thu 19 Feb 2026 19:50:16 +0000
asID: 984
IP address blocks: 156.247.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79675 (0x1373b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 19:50:16 2025 GMT
Not After : Feb 19 19:50:16 2026 GMT
Subject: CN=67bf707c-529b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:e5:09:16:42:ee:de:7b:fd:dd:cc:17:c4:
95:50:28:3d:c6:6f:f8:0d:3b:56:8c:60:ca:62:01:
38:06:f7:87:53:6a:2c:d3:0d:90:e2:d6:d8:e2:52:
bc:22:cc:0f:a7:d7:fb:a1:98:de:94:58:46:69:dd:
f0:e5:21:20:52:26:4e:16:06:f0:5e:0e:d4:98:f7:
92:35:d2:f7:90:fe:20:b4:f1:46:8b:84:ed:6e:b3:
6e:86:b4:91:a5:8b:dc:db:e5:ba:af:a4:96:9a:2c:
e8:6a:61:3a:24:15:49:e0:8a:f1:b8:c9:48:30:24:
1b:cb:cb:e2:03:26:e6:cb:84:90:cc:ee:5f:7b:7f:
0d:be:46:37:3f:91:ef:69:e4:13:69:4b:79:2f:17:
3e:03:d8:89:93:f5:8b:c1:67:db:b9:30:09:ad:20:
8d:25:01:b4:9c:38:b6:f4:c4:16:98:88:bb:9f:39:
39:e0:5e:45:fd:84:1d:38:1b:57:8c:61:28:10:b7:
24:9f:c0:3e:9e:16:63:a3:16:5a:d1:83:6d:9a:6d:
f6:d6:75:02:1a:05:db:10:9a:ee:d2:21:c6:09:9c:
67:09:80:e6:13:eb:6a:43:29:bc:a1:14:32:75:55:
cc:f5:06:4d:f3:9f:29:29:7a:cc:ad:a0:f5:f9:1f:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:25:21:45:DC:5E:E1:E0:D0:C6:6F:4B:60:2A:1A:11:F9:73:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8B31FFCF47A11EFB0028760762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:46:16:26:95:08:0a:e2:18:39:0d:07:cb:5a:46:b8:dc:d3:
58:1a:3d:3d:86:c9:dd:7c:e1:e1:89:da:92:9a:c9:16:12:20:
c0:12:85:1e:58:a9:00:5c:24:87:f0:f6:98:ee:a1:7b:96:71:
1b:3c:f5:96:24:31:a9:5f:e2:b0:88:04:98:fe:77:49:c7:11:
88:97:90:44:5c:ba:86:f3:b2:24:dc:d8:4e:94:9f:41:71:47:
49:c3:4b:db:06:b1:3e:45:f6:e6:de:35:d3:59:7d:88:1b:be:
95:d5:0c:0b:fa:36:1c:36:e3:41:97:37:32:af:09:35:07:e2:
eb:18:63:6f:3e:e0:94:cd:91:a4:8a:00:d5:0c:44:d6:94:1c:
e8:d5:71:25:2a:f1:57:a3:d6:17:a0:a4:a2:13:73:08:52:01:
94:f6:8f:d5:c2:5d:82:cc:f5:24:f3:65:65:67:ab:2f:9a:be:
04:05:e3:50:85:60:3f:82:6b:96:e8:ae:56:cd:2f:26:a2:1f:
7f:a9:96:d7:45:21:fb:42:fe:c9:83:8e:b3:1c:ae:84:55:f4:
c9:4f:db:a2:75:29:c5:e7:67:89:64:3c:31:62:b7:11:8d:0b:
d4:a2:60:3e:69:3c:84:56:36:af:f9:68:3f:77:27:b1:8a:10:
48:43:f1:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATc7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTk1MDE2WhcNMjYwMjE5MTk1MDE2WjAYMRYw
FAYDVQQDEw02N2JmNzA3Yy01MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoSTlCRZC7t57/d3MF8SVUCg9xm/4DTtWjGDKYgE4BveHU2os0w2Q4tbY
4lK8IswPp9f7oZjelFhGad3w5SEgUiZOFgbwXg7UmPeSNdL3kP4gtPFGi4TtbrNu
hrSRpYvc2+W6r6SWmizoamE6JBVJ4IrxuMlIMCQby8viAybmy4SQzO5fe38NvkY3
P5HvaeQTaUt5Lxc+A9iJk/WLwWfbuTAJrSCNJQG0nDi29MQWmIi7nzk54F5F/YQd
OBtXjGEoELckn8A+nhZjoxZa0YNtmm321nUCGgXbEJru0iHGCZxnCYDmE+tqQym8
oRQydVXM9QZN858pKXrMraD1+R9I+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMZJ
JSFF3F7h4NDGb0tgKhoR+XNkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOEIzMUZGQ0Y0N0ExMUVGQjAwMjg3NjA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcoMA0GCSqGSIb3DQEBCwUA
A4IBAQCmRhYmlQgK4hg5DQfLWka43NNYGj09hsndfOHhidqSmskWEiDAEoUeWKkA
XCSH8PaY7qF7lnEbPPWWJDGpX+KwiASY/ndJxxGIl5BEXLqG87Ik3NhOlJ9BcUdJ
w0vbBrE+Rfbm3jXTWX2IG76V1QwL+jYcNuNBlzcyrwk1B+LrGGNvPuCUzZGkigDV
DETWlBzo1XElKvFXo9YXoKSiE3MIUgGU9o/Vwl2CzPUk82VlZ6svmr4EBeNQhWA/
gmuW6K5WzS8moh9/qZbXRSH7Qv7Jg46zHK6EVfTJT9uidSnF52eJZDwxYrcRjQvU
omA+aTyEVjav+Wg/dyexihBIQ/H0
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:48 2025 by rpki-client