Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB461952328411F0A86118EEDAE4EC9C.roa
File: EB461952328411F0A86118EEDAE4EC9C.roa (raw, json)
Hash identifier: S+WgQElitzK7d5vrHtJXYEtb2/+N9zwSUq02XYV7Yj0=
Subject key identifier: 04:7C:60:28:1E:FE:8E:07:27:45:23:DC:B4:84:8C:0A:7E:6F:8A:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0154FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB461952328411F0A86118EEDAE4EC9C.roa
Signing time: Fri 16 May 2025 18:38:11 +0000
ROA not before: Fri 16 May 2025 18:38:07 +0000
ROA not after: Sun 22 Jun 2025 18:38:07 +0000
asID: 213448
IP address blocks: 156.253.229.0/24 maxlen: 24
156.253.230.0/23 maxlen: 24
156.253.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87292 (0x154fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 18:38:07 2025 GMT
Not After : Jun 22 18:38:07 2025 GMT
Subject: CN=68278613-493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:be:fc:c1:d6:a6:86:a6:52:a7:a4:fe:1d:
4a:e5:e2:9a:64:7e:5f:a7:cb:c5:b0:ec:89:42:50:
26:27:0d:a7:86:3d:a7:21:5b:96:11:50:77:0a:c9:
19:1a:23:31:54:75:41:d6:3e:fb:84:7f:7f:5b:ed:
07:bc:60:28:65:ac:d5:8e:e2:a1:7d:5a:0b:51:d5:
4b:7f:3c:f4:f0:45:bb:55:af:1e:68:7f:1b:88:3c:
27:b5:39:90:0b:3a:2f:ba:fa:6e:f6:bd:5e:40:4f:
1f:72:1b:f7:a8:27:2c:9f:93:9f:11:4d:ec:c5:a1:
4e:79:8a:4f:5d:f9:ad:fa:98:24:6a:f4:f6:37:88:
d7:a6:9a:83:e5:17:94:81:ea:79:21:55:6f:12:eb:
08:bf:1f:d1:42:77:a8:6b:cf:ce:ca:6d:f5:59:1f:
b3:a9:04:79:eb:f2:40:5f:34:82:05:71:14:49:11:
5c:af:e7:65:d0:98:0b:1d:b8:28:bf:e0:46:2a:8f:
bf:c7:2e:9b:b6:a3:3c:c9:19:5b:ad:65:65:bb:e9:
97:b5:02:86:48:19:1c:dd:c1:05:d0:6a:65:ee:72:
7f:18:a6:8e:b7:27:b4:31:10:3e:3a:f0:4f:3b:e0:
31:2f:37:4c:fc:b1:02:8e:15:32:1f:14:0f:88:ee:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:60:28:1E:FE:8E:07:27:45:23:DC:B4:84:8C:0A:7E:6F:8A:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB461952328411F0A86118EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.229.0-156.253.231.255
156.253.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8c:4e:ae:e9:02:8f:82:f9:c5:57:d2:24:f3:d9:82:1c:5f:
08:73:56:8a:a8:7e:a8:c6:55:f3:25:a6:36:f4:37:57:53:c9:
be:44:3d:20:31:1d:68:21:34:0c:58:f8:23:41:7e:6c:a8:ef:
4c:43:ca:cc:69:87:04:c8:02:5c:35:52:b2:fc:80:28:52:47:
7c:36:7b:2f:9b:f8:56:86:c8:12:8e:f4:45:13:a3:df:01:28:
76:f7:1d:b0:01:ad:69:49:00:a9:45:23:2b:0e:af:83:a1:ee:
13:06:a4:9f:e5:f8:3f:c3:10:bc:db:f9:13:a4:c7:9c:6c:11:
14:f6:98:b7:ec:f3:ae:f2:4f:3e:dd:78:4b:1e:60:ae:10:a2:
9c:6b:54:e3:38:2b:1c:d9:67:6e:15:0d:b4:87:e2:4e:77:60:
3a:ee:4c:3b:9f:0f:10:92:8c:b0:7e:20:79:05:ca:2a:8a:8f:
66:39:da:cf:b9:9d:c5:ed:ff:28:44:5d:a3:84:0d:6f:74:28:
04:10:e8:a1:37:4a:e7:42:7c:a3:76:ef:7a:00:73:c2:5b:30:
10:8b:c4:98:85:1c:fe:ae:24:18:f5:12:55:fd:62:a6:4b:b4:
47:72:c7:95:1c:17:19:28:d1:68:f9:eb:5c:ab:ad:db:54:97:
1c:47:47:0a
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAVT8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE2MTgzODA3WhcNMjUwNjIyMTgzODA3WjAYMRYw
FAYDVQQDEw02ODI3ODYxMy00OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsUe+/MHWpoamUqek/h1K5eKaZH5fp8vFsOyJQlAmJw2nhj2nIVuWEVB3
CskZGiMxVHVB1j77hH9/W+0HvGAoZazVjuKhfVoLUdVLfzz08EW7Va8eaH8biDwn
tTmQCzovuvpu9r1eQE8fchv3qCcsn5OfEU3sxaFOeYpPXfmt+pgkavT2N4jXppqD
5ReUgep5IVVvEusIvx/RQneoa8/Oym31WR+zqQR56/JAXzSCBXEUSRFcr+dl0JgL
Hbgov+BGKo+/xy6btqM8yRlbrWVlu+mXtQKGSBkc3cEF0Gpl7nJ/GKaOtye0MRA+
OvBPO+AxLzdM/LECjhUyHxQPiO7KdwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAR8
YCge/o4HJ0Uj3LSEjAp+b4qkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjQ2MTk1MjMyODQxMUYwQTg2MTE4RUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACc/eUDBAOc/eADBACc/e8w
DQYJKoZIhvcNAQELBQADggEBAGyMTq7pAo+C+cVX0iTz2YIcXwhzVoqofqjGVfMl
pjb0N1dTyb5EPSAxHWghNAxY+CNBfmyo70xDysxphwTIAlw1UrL8gChSR3w2ey+b
+FaGyBKO9EUTo98BKHb3HbABrWlJAKlFIysOr4Oh7hMGpJ/l+D/DELzb+ROkx5xs
ERT2mLfs867yTz7deEseYK4QopxrVOM4KxzZZ24VDbSH4k53YDruTDufDxCSjLB+
IHkFyiqKj2Y52s+5ncXt/yhEXaOEDW90KAQQ6KE3SudCfKN273oAc8JbMBCLxJiF
HP6uJBj1ElX9YqZLtEdyx5UcFxko0Wj561yrrdtUlxxHRwo=
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:50:51 2025 by rpki-client