Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6DBEA6216B511F090356E156EB8BCC6.roa
File: E6DBEA6216B511F090356E156EB8BCC6.roa (raw, json)
Hash identifier: rWx2RqYg0uM/VlnPpT5hkOooCElfAJnZTnCtXVx7vd8=
Subject key identifier: 87:30:30:07:92:36:BA:0E:2B:98:AF:0F:59:F4:F9:DA:80:32:AE:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6DBEA6216B511F090356E156EB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:18:17 +0000
ROA not before: Fri 11 Apr 2025 09:18:12 +0000
ROA not after: Sat 17 May 2025 09:18:12 +0000
asID: 12849
IP address blocks: 156.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84913 (0x14bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 09:18:12 2025 GMT
Not After : May 17 09:18:12 2025 GMT
Subject: CN=67f8de59-f3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:48:6b:ce:74:5e:ad:71:4f:28:69:de:9f:
de:f2:64:2f:14:c9:56:f0:8a:c7:c2:2a:8b:b4:36:
5c:d9:1a:c0:6c:21:c5:e3:2c:8e:32:4d:90:08:78:
bd:ca:1f:ff:98:9b:69:d3:92:d1:cc:63:ec:b2:fb:
0c:84:69:bf:16:f5:85:a3:a8:0a:3e:fa:0a:ee:a8:
8c:17:d3:70:70:38:c2:e1:80:c6:cc:27:d0:54:6c:
23:48:5a:07:6d:ab:f3:32:2c:23:65:d5:c6:f6:47:
cb:56:d7:b3:49:ea:84:53:b0:76:78:a4:11:45:86:
25:b4:45:3f:32:cf:ef:bf:22:8e:62:b0:c8:51:33:
49:5f:22:74:55:54:b5:fe:62:30:c5:55:1b:fc:8a:
5d:75:cd:52:f6:1b:bc:db:83:34:67:78:f1:ca:14:
ff:bf:4b:30:97:aa:eb:2a:f7:c8:99:32:66:3a:f9:
53:fb:3e:84:b5:64:0a:c1:a4:92:a4:c3:5d:ac:0e:
38:8d:5d:c4:c9:8e:fe:c0:46:73:25:d8:9d:ff:1f:
6c:36:a1:79:97:9b:ec:c6:6b:d7:1e:fd:93:ed:1a:
22:08:d5:b4:3e:82:b9:09:99:4f:55:7c:dc:3e:15:
d6:43:a9:59:07:ed:cd:22:db:5f:6f:6d:55:23:0d:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:30:30:07:92:36:BA:0E:2B:98:AF:0F:59:F4:F9:DA:80:32:AE:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6DBEA6216B511F090356E156EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d7:96:22:49:db:a3:2d:e9:b7:dd:50:7e:66:4e:00:c5:aa:
50:90:cf:55:f4:ee:94:f9:37:07:ee:98:c3:39:fc:0d:b2:d2:
b6:2b:8b:ff:d5:01:97:ef:07:97:96:14:90:f4:98:39:a9:79:
30:a0:e7:d8:ac:a3:15:50:78:2b:b5:0c:18:e5:4b:16:fd:77:
29:06:34:53:b0:1a:e3:5b:e3:2b:62:c0:cf:71:c3:0f:ab:2d:
9e:29:94:b7:56:58:0f:1b:0b:e7:aa:d3:31:f4:75:4e:92:8a:
6b:39:cb:79:f7:79:38:8d:8e:2a:b1:ab:47:7d:b7:e8:51:69:
c6:5d:01:1b:78:35:8e:b7:4e:33:54:75:cd:db:7c:d5:5a:70:
c0:e2:6b:e3:3a:3f:87:7a:f7:20:a3:94:99:a8:06:92:48:02:
1a:88:94:ea:f2:43:2c:da:ac:a4:ac:03:db:5a:a5:e1:ed:88:
bd:2d:6b:14:8b:3e:72:ba:85:ad:1f:f3:b1:08:18:72:3c:d8:
38:00:0c:93:1e:8c:cc:e9:8f:87:fc:23:28:ce:bb:a2:af:eb:
a8:39:e7:1f:95:09:4a:13:dd:4f:08:d9:a6:cb:42:80:8f:72:
9d:44:d9:b6:60:3c:76:c2:06:d2:68:bb:9f:b7:b1:9e:f4:51:
f9:0c:f3:a7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUuxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDExMDkxODEyWhcNMjUwNTE3MDkxODEyWjAYMRYw
FAYDVQQDEw02N2Y4ZGU1OS1mM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuyhIa850Xq1xTyhp3p/e8mQvFMlW8IrHwiqLtDZc2RrAbCHF4yyOMk2Q
CHi9yh//mJtp05LRzGPssvsMhGm/FvWFo6gKPvoK7qiMF9NwcDjC4YDGzCfQVGwj
SFoHbavzMiwjZdXG9kfLVtezSeqEU7B2eKQRRYYltEU/Ms/vvyKOYrDIUTNJXyJ0
VVS1/mIwxVUb/Ipddc1S9hu824M0Z3jxyhT/v0swl6rrKvfImTJmOvlT+z6EtWQK
waSSpMNdrA44jV3EyY7+wEZzJdid/x9sNqF5l5vsxmvXHv2T7RoiCNW0PoK5CZlP
VXzcPhXWQ6lZB+3NIttfb21VIw38cQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIcw
MAeSNroOK5ivD1n0+dqAMq7SMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNkRCRUE2MjE2QjUxMUYwOTAzNTZFMTU2RUI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOV2MA0GCSqGSIb3DQEBCwUA
A4IBAQCk15YiSdujLem33VB+Zk4AxapQkM9V9O6U+TcH7pjDOfwNstK2K4v/1QGX
7weXlhSQ9Jg5qXkwoOfYrKMVUHgrtQwY5UsW/XcpBjRTsBrjW+MrYsDPccMPqy2e
KZS3VlgPGwvnqtMx9HVOkoprOct593k4jY4qsatHfbfoUWnGXQEbeDWOt04zVHXN
23zVWnDA4mvjOj+Hevcgo5SZqAaSSAIaiJTq8kMs2qykrAPbWqXh7Yi9LWsUiz5y
uoWtH/OxCBhyPNg4AAyTHozM6Y+H/CMozruir+uoOecflQlKE91PCNmmy0KAj3Kd
RNm2YDx2wgbSaLuft7Ge9FH5DPOn
-----END CERTIFICATE-----
Generated at Mon May 12 18:15:20 2025 by rpki-client