Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE24E0D8243911F0A7D3D6CBDAE4EC9C.roa
File: BE24E0D8243911F0A7D3D6CBDAE4EC9C.roa (raw, json)
Hash identifier: T9M85H3/lzggbHHKWjTONdxaVWzRPHXzSPDkw506AW4=
Subject key identifier: E6:D2:16:A0:E2:A0:78:6F:B0:1E:C5:55:EF:C0:2C:3A:31:2A:64:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014F54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE24E0D8243911F0A7D3D6CBDAE4EC9C.roa
Signing time: Mon 28 Apr 2025 14:04:47 +0000
ROA not before: Mon 28 Apr 2025 14:04:43 +0000
ROA not after: Sun 26 Mar 2028 14:04:43 +0000
asID: 17561
IP address blocks: 156.242.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 17 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85844 (0x14f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 14:04:43 2025 GMT
Not After : Mar 26 14:04:43 2028 GMT
Subject: CN=680f8aff-bab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:ed:44:54:66:c2:8a:ea:02:13:9f:9d:90:
55:a1:0f:a2:45:e1:09:d8:16:eb:0f:48:25:6b:e8:
78:20:39:f7:49:42:2a:cb:83:4a:16:cc:3e:74:e0:
da:af:94:e7:50:a0:19:d7:93:be:47:23:7e:9b:b7:
c9:a5:8a:4c:aa:32:dc:7b:3d:2f:ee:0d:8c:b4:7e:
96:26:a4:92:12:f2:ab:10:c1:22:f8:3b:4b:a3:99:
2c:fd:4a:ea:8c:05:15:f9:66:4b:d5:81:fd:ba:ad:
40:5b:9c:26:66:12:59:ae:c2:1e:6d:75:07:06:f2:
03:98:49:8a:d2:8b:66:2f:fa:20:3a:dc:00:d4:c8:
ca:34:cd:ab:16:76:78:b6:a9:85:ed:cf:12:a6:1e:
cc:d7:e3:0c:b1:e9:ee:4d:6e:9e:ac:ab:08:0c:b3:
d5:b8:b6:27:35:9a:8a:c7:e8:f7:8a:02:c3:12:8e:
1c:80:18:ad:63:b7:cd:e5:80:7e:18:44:9f:3b:3b:
16:4a:e5:c5:9d:31:a0:55:84:39:4a:6f:59:44:d7:
35:b5:10:0a:97:3f:fb:ed:2f:81:68:15:93:41:54:
b8:94:ab:15:2c:43:10:07:65:32:eb:d6:a7:6a:f4:
6c:cc:0f:84:4c:eb:71:84:67:b1:31:be:85:de:7e:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:16:A0:E2:A0:78:6F:B0:1E:C5:55:EF:C0:2C:3A:31:2A:64:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE24E0D8243911F0A7D3D6CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.58.0/24
Signature Algorithm: sha256WithRSAEncryption
87:7b:ae:14:7b:5d:99:77:ef:65:17:9a:c1:41:76:f8:18:eb:
03:2a:3b:46:b7:9b:62:1d:c6:59:97:3d:13:68:24:33:51:70:
2f:e3:40:d3:7c:60:ce:a5:f0:5c:52:32:5d:55:48:e5:3e:38:
94:a1:1b:11:ea:b7:6e:d4:88:ba:fa:1e:4a:f4:9b:ab:ca:b2:
91:81:f3:60:f4:d1:99:08:7b:fd:87:af:db:35:e7:94:9a:91:
43:e6:03:8c:62:9d:1e:53:ef:49:be:16:b0:19:2c:f0:3b:20:
77:45:eb:3b:58:8c:b1:d6:e0:87:1a:fa:87:c1:c3:e6:bf:6c:
6b:04:a1:dd:bd:9b:69:b6:c6:a1:3c:8a:cd:a0:c6:89:59:c1:
a0:c6:d3:5b:70:ee:b8:eb:3e:2d:c7:86:61:da:4b:ea:78:c1:
01:85:96:9b:84:5d:63:51:61:7f:97:a4:8c:44:2c:34:5a:37:
4b:03:89:5f:5d:6b:98:0b:92:37:72:90:d6:8d:09:e2:a3:02:
bd:1e:d0:76:12:d0:00:2f:5e:aa:33:8b:f5:3c:e3:a6:b5:3d:
e6:5e:19:10:77:64:a8:4f:de:09:91:bd:bb:cd:7c:28:5f:67:
ac:31:ae:80:6e:02:13:e7:ab:cb:e5:1c:5c:c6:1a:73:30:8a:
4f:4d:23:5b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU9UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTQwNDQzWhcNMjgwMzI2MTQwNDQzWjAYMRYw
FAYDVQQDEw02ODBmOGFmZi1iYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq3vtRFRmworqAhOfnZBVoQ+iReEJ2BbrD0gla+h4IDn3SUIqy4NKFsw+
dODar5TnUKAZ15O+RyN+m7fJpYpMqjLcez0v7g2MtH6WJqSSEvKrEMEi+DtLo5ks
/UrqjAUV+WZL1YH9uq1AW5wmZhJZrsIebXUHBvIDmEmK0otmL/ogOtwA1MjKNM2r
FnZ4tqmF7c8Sph7M1+MMsenuTW6erKsIDLPVuLYnNZqKx+j3igLDEo4cgBitY7fN
5YB+GESfOzsWSuXFnTGgVYQ5Sm9ZRNc1tRAKlz/77S+BaBWTQVS4lKsVLEMQB2Uy
69anavRszA+ETOtxhGexMb6F3n59mwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFObS
FqDioHhvsB7FVe/ALDoxKmQ4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTI0RTBEODI0MzkxMUYwQTdEM0Q2Q0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPI6MA0GCSqGSIb3DQEBCwUA
A4IBAQCHe64Ue12Zd+9lF5rBQXb4GOsDKjtGt5tiHcZZlz0TaCQzUXAv40DTfGDO
pfBcUjJdVUjlPjiUoRsR6rdu1Ii6+h5K9JuryrKRgfNg9NGZCHv9h6/bNeeUmpFD
5gOMYp0eU+9JvhawGSzwOyB3Res7WIyx1uCHGvqHwcPmv2xrBKHdvZtptsahPIrN
oMaJWcGgxtNbcO646z4tx4Zh2kvqeMEBhZabhF1jUWF/l6SMRCw0WjdLA4lfXWuY
C5I3cpDWjQniowK9HtB2EtAAL16qM4v1POOmtT3mXhkQd2SoT94Jkb27zXwoX2es
Ma6AbgIT56vL5RxcxhpzMIpPTSNb
-----END CERTIFICATE-----
Generated at Thu May 15 12:24:02 2025 by rpki-client