Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F09E9CE6F45C11EF8A51BC8F762E951A.roa
File: F09E9CE6F45C11EF8A51BC8F762E951A.roa (raw, json)
Hash identifier: OL7bTWMSbkCpoMKEUPayV4Ba+XLL/0XcxAz3A2ZRP1g=
Subject key identifier: 41:95:FB:BD:77:FC:61:F8:97:21:AD:EF:99:8F:3B:AE:AD:58:C1:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0134A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F09E9CE6F45C11EF8A51BC8F762E951A.roa
Signing time: Wed 26 Feb 2025 16:15:48 +0000
ROA not before: Wed 26 Feb 2025 16:15:45 +0000
ROA not after: Thu 19 Feb 2026 16:15:45 +0000
asID: 984
IP address blocks: 156.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79012 (0x134a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 16:15:45 2025 GMT
Not After : Feb 19 16:15:45 2026 GMT
Subject: CN=67bf3e34-95b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:b1:01:2f:87:70:c2:1d:6d:85:8e:22:47:
e8:03:bd:f9:c4:f1:b5:cf:5e:a6:2a:8b:ba:ca:b4:
e0:a2:9d:12:c7:d2:b2:16:0d:82:84:47:81:32:99:
83:54:e9:5d:3b:a0:61:93:5e:e5:2f:63:c5:28:49:
c3:83:13:a0:ac:69:92:5c:4c:75:fc:06:e4:20:ff:
2b:e8:7e:9f:d3:ee:ca:3e:da:a4:09:af:0c:d8:db:
20:b2:13:22:d4:78:78:56:70:14:2a:7f:65:a2:9e:
a9:4a:c7:9f:90:e4:00:26:bb:1a:6e:f7:65:41:fa:
12:93:be:a8:03:f4:dd:c5:c9:a5:ac:21:5f:e1:03:
d9:f9:3a:ca:a2:50:67:69:06:c3:d7:29:53:22:d7:
a0:e8:e0:7a:57:c0:b6:c5:68:70:75:79:74:81:3a:
8c:05:27:0b:bc:22:69:33:b6:e0:80:8b:0d:c9:47:
5d:b6:0f:3b:06:f9:ca:7a:04:de:b3:5e:55:82:1b:
2a:f0:66:c9:a2:3f:3c:28:dd:06:39:14:aa:8a:b4:
09:fd:88:05:2f:73:0a:9a:64:c6:a9:03:f5:be:e3:
87:71:f0:71:77:59:d3:9f:8e:8d:77:2a:4e:aa:b3:
b0:41:4c:c4:3f:8a:1e:68:52:5f:7b:4c:5f:e8:af:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:FB:BD:77:FC:61:F8:97:21:AD:EF:99:8F:3B:AE:AD:58:C1:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F09E9CE6F45C11EF8A51BC8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e8:ef:ab:f0:33:7d:b1:27:89:d3:32:38:96:e5:b6:e0:f6:
07:07:e7:e1:04:5d:38:dc:bd:4b:86:cb:a4:f1:50:35:d5:39:
85:5c:db:18:c8:28:b9:aa:c8:b0:90:b2:e7:64:e1:3c:1c:cc:
44:96:a6:c7:55:48:c8:ba:e8:df:36:ea:62:af:5b:02:ce:52:
db:ab:c6:9b:62:8f:ba:23:03:1f:ff:d3:e0:c9:96:e0:70:38:
7f:72:c4:f3:e4:a9:2f:46:68:01:aa:18:f2:0a:06:c9:93:1f:
0b:94:f9:26:a7:d1:b7:f8:15:dd:0e:63:91:1a:18:15:f6:16:
ff:11:7c:6b:28:4c:9f:00:eb:73:d0:cc:31:01:be:ca:73:cf:
8a:9f:40:37:96:c5:d4:f0:9d:ca:0b:02:76:d9:25:3c:d0:77:
e2:88:3a:95:f8:40:93:65:ea:8e:e9:98:52:4e:d0:8c:09:62:
21:66:91:0a:ae:52:0b:bf:34:f6:7f:36:a9:80:ee:90:f7:4a:
22:a6:da:9c:b8:33:12:cc:14:f7:c8:7e:99:d2:f6:68:31:5f:
dd:f9:e5:d1:0e:62:20:6e:7e:93:7a:cf:b4:c4:ae:2b:9f:38:
56:0b:78:64:16:9f:e4:bc:6d:43:cc:26:cd:cc:7f:ba:6b:1a:
49:05:98:76
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATSkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTYxNTQ1WhcNMjYwMjE5MTYxNTQ1WjAYMRYw
FAYDVQQDEw02N2JmM2UzNC05NWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzW2xAS+HcMIdbYWOIkfoA735xPG1z16mKou6yrTgop0Sx9KyFg2ChEeB
MpmDVOldO6Bhk17lL2PFKEnDgxOgrGmSXEx1/AbkIP8r6H6f0+7KPtqkCa8M2Nsg
shMi1Hh4VnAUKn9lop6pSsefkOQAJrsabvdlQfoSk76oA/TdxcmlrCFf4QPZ+TrK
olBnaQbD1ylTIteg6OB6V8C2xWhwdXl0gTqMBScLvCJpM7bggIsNyUddtg87BvnK
egTes15Vghsq8GbJoj88KN0GORSqirQJ/YgFL3MKmmTGqQP1vuOHcfBxd1nTn46N
dypOqrOwQUzEP4oeaFJfe0xf6K8j0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEGV
+713/GH4lyGt75mPO66tWMFdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMDlFOUNFNkY0NUMxMUVGOEE1MUJDOEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOflMA0GCSqGSIb3DQEBCwUA
A4IBAQCN6O+r8DN9sSeJ0zI4luW24PYHB+fhBF043L1Lhsuk8VA11TmFXNsYyCi5
qsiwkLLnZOE8HMxElqbHVUjIuujfNupir1sCzlLbq8abYo+6IwMf/9PgyZbgcDh/
csTz5KkvRmgBqhjyCgbJkx8LlPkmp9G3+BXdDmORGhgV9hb/EXxrKEyfAOtz0Mwx
Ab7Kc8+Kn0A3lsXU8J3KCwJ22SU80HfiiDqV+ECTZeqO6ZhSTtCMCWIhZpEKrlIL
vzT2fzapgO6Q90oiptqcuDMSzBT3yH6Z0vZoMV/d+eXRDmIgbn6Tes+0xK4rnzhW
C3hkFp/kvG1DzCbNzH+6axpJBZh2
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:11 2025 by rpki-client