Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F367BBEEF45511EF8475935F762E951A.roa
File: F367BBEEF45511EF8475935F762E951A.roa (raw, json)
Hash identifier: pIKszOcro1V220VwR32oEboi3gj0oD5h8l1b1yQ1cTs=
Subject key identifier: 5B:A4:50:D3:5F:F7:C2:95:5F:6C:78:41:A8:82:88:11:28:A9:D7:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013441
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F367BBEEF45511EF8475935F762E951A.roa
Signing time: Wed 26 Feb 2025 15:25:46 +0000
ROA not before: Wed 26 Feb 2025 15:25:43 +0000
ROA not after: Thu 19 Feb 2026 15:25:43 +0000
asID: 984
IP address blocks: 156.252.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78913 (0x13441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 15:25:43 2025 GMT
Not After : Feb 19 15:25:43 2026 GMT
Subject: CN=67bf327a-8709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:f8:ab:13:ff:85:93:12:3d:ed:36:26:95:
b2:fa:37:f0:3a:2d:36:b9:8d:fa:b5:03:98:67:b6:
be:17:c2:53:3e:86:f0:9e:87:4d:5c:70:d5:b5:cd:
4c:ce:32:a5:71:4a:e5:12:ae:4a:85:79:94:39:29:
35:32:26:75:0d:28:23:0b:7b:b2:ce:01:df:3b:21:
89:35:8e:7d:23:8d:2b:86:82:80:ab:72:c0:40:4e:
11:a8:e2:2e:25:eb:ee:27:40:4e:c9:90:06:ff:2a:
18:79:e2:24:3e:81:88:51:c4:95:2e:18:00:3f:6a:
31:86:e7:52:7e:ea:2a:46:2d:a8:20:5a:3a:9a:dc:
28:12:fd:bd:2b:26:61:72:b5:e0:13:79:99:ea:eb:
df:0e:56:b1:88:ba:11:73:67:61:bc:f6:e2:49:ca:
60:7e:7f:0f:4b:67:21:a1:74:6c:81:bd:24:d4:57:
6d:7d:1f:32:99:0f:47:bf:3d:f5:75:30:42:d9:31:
94:6d:ce:32:c1:f2:22:db:b2:c4:a5:5a:44:a6:92:
29:91:9b:f6:3b:73:c3:cb:8a:2d:62:bf:a4:c7:d1:
24:3a:b4:14:ba:82:11:44:a6:dd:85:fb:1b:92:e7:
68:d5:c9:e3:dd:10:ee:53:07:b4:6c:1d:99:9f:9f:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:50:D3:5F:F7:C2:95:5F:6C:78:41:A8:82:88:11:28:A9:D7:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F367BBEEF45511EF8475935F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.213.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8b:0b:74:a3:31:b3:42:a5:87:04:f2:88:68:2f:a4:e4:17:
df:95:fe:46:c5:44:31:ed:79:5e:5c:1a:07:4f:31:6c:57:11:
cf:dd:8c:d4:3e:6e:2b:b7:0a:4b:29:4e:a4:d4:d3:c3:9c:bb:
b8:b4:69:04:23:a1:07:1d:15:b3:85:6a:33:14:fa:75:86:1c:
3f:9d:b8:1b:d6:d2:86:65:e3:c8:85:64:3f:fa:b0:e4:92:c8:
1a:e3:e5:9b:04:a1:1a:4c:81:bc:15:5e:e9:c7:64:39:1c:18:
e6:b4:eb:13:66:b9:32:9f:56:af:34:3a:95:ba:fc:44:d8:65:
1a:31:fd:32:86:72:21:14:cd:6f:47:ff:63:e4:a7:8d:6d:3c:
63:7a:73:25:c4:fd:47:9b:57:d9:ec:ab:72:2e:49:24:33:08:
22:8e:c6:04:63:59:a9:4b:79:d2:61:4b:d9:d3:2d:47:7e:0f:
c9:71:a8:4f:a5:39:12:67:ed:12:4c:35:6c:35:b9:3b:fa:b2:
82:0a:d4:ec:0e:45:0b:e2:01:6a:79:ec:ca:5a:aa:0b:a7:93:
14:19:90:a6:fe:cc:d9:46:5a:2b:77:31:60:58:cc:ed:14:b6:
b5:67:fb:7a:38:32:fc:a4:65:06:cd:9a:8a:dd:6d:4f:5f:f4:
df:5d:72:d5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATRBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTUyNTQzWhcNMjYwMjE5MTUyNTQzWjAYMRYw
FAYDVQQDEw02N2JmMzI3YS04NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoLz4qxP/hZMSPe02JpWy+jfwOi02uY36tQOYZ7a+F8JTPobwnodNXHDV
tc1MzjKlcUrlEq5KhXmUOSk1MiZ1DSgjC3uyzgHfOyGJNY59I40rhoKAq3LAQE4R
qOIuJevuJ0BOyZAG/yoYeeIkPoGIUcSVLhgAP2oxhudSfuoqRi2oIFo6mtwoEv29
KyZhcrXgE3mZ6uvfDlaxiLoRc2dhvPbiScpgfn8PS2choXRsgb0k1FdtfR8ymQ9H
vz31dTBC2TGUbc4ywfIi27LEpVpEppIpkZv2O3PDy4otYr+kx9EkOrQUuoIRRKbd
hfsbkudo1cnj3RDuUwe0bB2Zn5/q4QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFuk
UNNf98KVX2x4QaiCiBEoqdcbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMzY3QkJFRUY0NTUxMUVGODQ3NTkzNUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPzVMA0GCSqGSIb3DQEBCwUA
A4IBAQCFiwt0ozGzQqWHBPKIaC+k5Bfflf5GxUQx7XleXBoHTzFsVxHP3YzUPm4r
twpLKU6k1NPDnLu4tGkEI6EHHRWzhWozFPp1hhw/nbgb1tKGZePIhWQ/+rDkksga
4+WbBKEaTIG8FV7px2Q5HBjmtOsTZrkyn1avNDqVuvxE2GUaMf0yhnIhFM1vR/9j
5KeNbTxjenMlxP1Hm1fZ7KtyLkkkMwgijsYEY1mpS3nSYUvZ0y1Hfg/JcahPpTkS
Z+0STDVsNbk7+rKCCtTsDkUL4gFqeezKWqoLp5MUGZCm/szZRlordzFgWMztFLa1
Z/t6ODL8pGUGzZqK3W1PX/TfXXLV
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:58 2025 by rpki-client