Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC098870F34A11EFA57B72B6762E951A.roa
File: EC098870F34A11EFA57B72B6762E951A.roa (raw, json)
Hash identifier: XqPbsVP+cPS2u5eKVHV1Y+gj89gllvgsH6/VhBHwb28=
Subject key identifier: 11:F4:96:80:46:52:2D:97:A6:11:B7:08:F8:35:D2:51:5C:F2:87:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012DB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC098870F34A11EFA57B72B6762E951A.roa
Signing time: Tue 25 Feb 2025 07:34:18 +0000
ROA not before: Tue 25 Feb 2025 07:34:15 +0000
ROA not after: Sat 19 Feb 2028 07:34:15 +0000
asID: 17561
IP address blocks: 156.249.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77234 (0x12db2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 07:34:15 2025 GMT
Not After : Feb 19 07:34:15 2028 GMT
Subject: CN=67bd727a-5fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:09:c4:39:f8:a6:d4:1e:33:81:38:02:53:
7c:bf:65:09:71:49:d4:75:c1:23:c7:62:6a:d7:a1:
d2:7c:05:5a:fe:61:6f:c6:37:97:20:3b:1f:6d:28:
e5:a9:58:ca:f6:c8:cc:c7:66:91:23:3b:40:da:d8:
c7:99:b9:4e:00:c7:77:e6:59:c3:dd:32:7b:b9:1b:
88:64:5d:1e:39:a5:42:a1:8d:6f:1d:cb:5c:03:fd:
fc:21:62:85:c0:ab:bf:1f:f9:c3:9f:a7:41:05:c9:
f8:0d:e0:e0:30:77:be:8b:b1:b1:96:e3:e1:93:3d:
18:a1:9e:15:33:3a:f3:4a:4b:b4:07:26:2c:e6:ef:
cd:2a:aa:c0:db:48:bf:a4:9c:1d:1c:eb:47:13:a9:
4a:16:d4:91:33:ad:bf:ac:41:00:49:74:aa:4b:b1:
66:38:90:c9:17:65:69:82:e8:8a:7b:e8:77:ce:3c:
4b:90:19:ce:fe:ed:6a:79:bb:93:3c:92:99:a3:20:
a0:8e:49:21:24:3e:6c:56:00:53:d0:1b:93:fd:24:
1d:30:12:78:9a:1a:c1:43:c6:24:1a:0a:aa:bf:5c:
e5:bd:ea:50:ec:79:92:77:fe:9a:76:f9:d9:a4:b0:
bd:e2:81:ea:b5:66:ad:5d:53:18:ad:9e:18:c2:53:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:96:80:46:52:2D:97:A6:11:B7:08:F8:35:D2:51:5C:F2:87:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC098870F34A11EFA57B72B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.229.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ce:61:50:2e:c3:fc:55:26:1f:41:3d:3e:18:c8:0a:eb:11:
cf:fd:0e:30:1b:9e:e5:2a:85:37:e0:fe:6c:64:8f:86:9e:10:
13:01:df:cc:84:dd:49:75:4e:d2:64:f9:1b:51:85:b0:bf:45:
05:27:13:f9:9c:04:fb:02:ee:13:e2:60:e0:e6:e5:0a:b0:aa:
0c:21:54:17:9e:0c:6d:9e:fc:7d:99:4f:0a:47:f3:61:d1:79:
25:9f:c7:5f:60:53:ba:a4:db:fa:89:58:13:e5:f2:a8:9d:7c:
84:78:35:cf:f1:e4:80:85:37:4f:55:40:ea:11:d4:99:9d:5b:
9a:f3:5d:2a:32:4d:41:12:2f:59:9d:a6:d0:4b:c1:f8:b5:74:
a1:ab:c6:ab:43:25:32:21:80:d0:4d:33:44:5f:6b:c0:78:d9:
ae:ce:f5:6e:c9:13:62:0d:27:c3:a1:cf:37:2c:b8:20:95:e9:
ec:54:07:2b:76:ee:a5:4c:83:6a:6a:29:df:68:b6:fb:39:74:
61:4e:f0:b1:0d:60:e8:30:b3:fb:10:22:6a:41:8e:a0:80:b6:
65:f1:a6:a5:ed:da:17:b2:c7:b3:f9:21:34:22:9e:94:76:54:
bb:c3:38:24:db:9f:5c:47:90:bc:78:d7:ac:c4:24:78:79:ae:
ae:23:96:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS2yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MDczNDE1WhcNMjgwMjE5MDczNDE1WjAYMRYw
FAYDVQQDEw02N2JkNzI3YS01ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAroIJxDn4ptQeM4E4AlN8v2UJcUnUdcEjx2Jq16HSfAVa/mFvxjeXIDsf
bSjlqVjK9sjMx2aRIztA2tjHmblOAMd35lnD3TJ7uRuIZF0eOaVCoY1vHctcA/38
IWKFwKu/H/nDn6dBBcn4DeDgMHe+i7GxluPhkz0YoZ4VMzrzSku0ByYs5u/NKqrA
20i/pJwdHOtHE6lKFtSRM62/rEEASXSqS7FmOJDJF2VpguiKe+h3zjxLkBnO/u1q
ebuTPJKZoyCgjkkhJD5sVgBT0BuT/SQdMBJ4mhrBQ8YkGgqqv1zlvepQ7HmSd/6a
dvnZpLC94oHqtWatXVMYrZ4YwlPZewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBH0
loBGUi2XphG3CPg10lFc8oerMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQzA5ODg3MEYzNEExMUVGQTU3QjcyQjY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPnlMA0GCSqGSIb3DQEBCwUA
A4IBAQADzmFQLsP8VSYfQT0+GMgK6xHP/Q4wG57lKoU34P5sZI+GnhATAd/MhN1J
dU7SZPkbUYWwv0UFJxP5nAT7Au4T4mDg5uUKsKoMIVQXngxtnvx9mU8KR/Nh0Xkl
n8dfYFO6pNv6iVgT5fKonXyEeDXP8eSAhTdPVUDqEdSZnVua810qMk1BEi9ZnabQ
S8H4tXShq8arQyUyIYDQTTNEX2vAeNmuzvVuyRNiDSfDoc83LLgglensVAcrdu6l
TINqainfaLb7OXRhTvCxDWDoMLP7ECJqQY6ggLZl8aal7doXssez+SE0Ip6UdlS7
wzgk259cR5C8eNesxCR4ea6uI5Zn
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:44:19 2025 by rpki-client