Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1C02A6242011F09C9179A8DAE4EC9C.roa
File: EB1C02A6242011F09C9179A8DAE4EC9C.roa (raw, json)
Hash identifier: Za6Tg4UUJmi1LH+gbCwYi/OEZZC6DHleYo4VsxM8GLU=
Subject key identifier: 51:E1:81:89:33:B4:6B:A5:2B:94:3D:B7:F6:7F:BA:E8:65:E0:43:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1C02A6242011F09C9179A8DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 11:07:05 +0000
ROA not before: Mon 28 Apr 2025 11:07:01 +0000
ROA not after: Mon 13 Mar 2028 11:07:01 +0000
asID: 17561
IP address blocks: 156.231.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85746 (0x14ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 11:07:01 2025 GMT
Not After : Mar 13 11:07:01 2028 GMT
Subject: CN=680f6159-8f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:5c:91:75:19:cd:30:9f:c2:b7:a9:5a:c3:
0b:d3:bd:32:3f:e5:b4:31:0c:f2:3d:1d:0d:7c:f7:
1b:35:01:b2:99:1b:dc:af:ef:bf:90:5a:52:ba:fe:
73:53:1d:71:76:1e:48:9a:35:c0:50:ca:95:be:9c:
36:bb:73:67:9c:25:c5:89:bc:31:63:d4:26:68:95:
75:19:36:a8:66:09:e0:95:90:51:08:89:a2:56:bf:
f0:15:a5:d0:91:7c:6f:48:ab:08:a2:e4:ab:1f:09:
df:a8:3e:68:e6:f0:af:39:3e:9b:92:8e:c0:76:9b:
96:2d:d9:c0:82:64:f5:75:93:c1:26:7f:4f:4b:43:
8b:e6:fd:fa:7b:3a:cb:30:f1:fa:76:a2:2d:3e:6d:
18:ad:f7:79:d1:04:1b:d6:12:b0:8c:ae:ea:22:5f:
5a:40:5d:ce:36:3e:76:82:07:2c:dc:5c:7c:8a:da:
7e:4f:3f:69:50:92:26:b5:91:6e:8a:6a:82:f8:b8:
5d:39:81:15:9c:f2:26:41:af:3e:48:b8:63:1f:63:
95:04:19:ff:50:fc:bf:bf:ae:c9:52:17:31:7b:53:
ba:ea:4e:29:22:73:f2:0c:2e:79:07:a7:72:be:d8:
8c:1c:da:e6:c2:4e:b4:99:8e:d1:75:2b:2d:4a:1a:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:81:89:33:B4:6B:A5:2B:94:3D:B7:F6:7F:BA:E8:65:E0:43:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1C02A6242011F09C9179A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d4:f3:77:b0:ba:e4:19:77:9c:26:37:81:16:2c:43:60:f6:
fa:cb:f0:ff:2f:23:e3:40:e5:1b:97:5b:53:a7:15:db:56:6f:
b7:1d:25:88:54:7b:66:2d:d0:59:e4:c6:b2:73:4f:d7:5a:d0:
d5:b3:ce:9b:b4:4c:7e:ff:8d:81:d9:b4:08:9c:3a:2e:19:30:
72:9f:3d:09:bd:e1:59:0e:2c:d5:24:f6:70:82:9f:69:8a:8d:
7d:7e:18:0c:8a:10:04:f3:f3:84:1b:88:43:9c:25:b9:7c:93:
49:24:ae:08:58:86:98:7a:35:f1:2b:04:04:0f:fa:1f:0a:0e:
05:e0:1e:da:83:94:10:5a:ca:48:f0:17:96:fb:c8:5a:18:de:
c3:3e:70:f9:c3:30:ff:2a:d9:72:a8:69:03:3d:91:ea:a6:08:
a5:38:cd:98:93:d9:4e:3c:51:7a:29:ce:59:46:73:af:27:b4:
c8:e7:38:75:bc:5c:1f:95:6e:f7:5b:c0:19:06:0b:f9:12:20:
b5:18:93:ae:59:27:ea:ed:b8:7b:1e:91:51:2d:24:b4:57:7a:
7c:1f:ca:4b:f2:6c:27:ed:2d:47:6d:d4:bd:8d:95:82:dc:61:
92:b6:81:03:b4:b1:76:f1:54:56:74:fe:f3:53:b6:0b:d8:5f:
63:c8:7d:ae
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU7yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MTEwNzAxWhcNMjgwMzEzMTEwNzAxWjAYMRYw
FAYDVQQDEw02ODBmNjE1OS04ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2DtckXUZzTCfwrepWsML070yP+W0MQzyPR0NfPcbNQGymRvcr++/kFpS
uv5zUx1xdh5ImjXAUMqVvpw2u3NnnCXFibwxY9QmaJV1GTaoZgnglZBRCImiVr/w
FaXQkXxvSKsIouSrHwnfqD5o5vCvOT6bko7AdpuWLdnAgmT1dZPBJn9PS0OL5v36
ezrLMPH6dqItPm0Yrfd50QQb1hKwjK7qIl9aQF3ONj52ggcs3Fx8itp+Tz9pUJIm
tZFuimqC+LhdOYEVnPImQa8+SLhjH2OVBBn/UPy/v67JUhcxe1O66k4pInPyDC55
B6dyvtiMHNrmwk60mY7RdSstShpuJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFHh
gYkztGulK5Q9t/Z/uuhl4EMYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQjFDMDJBNjI0MjAxMUYwOUM5MTc5QThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOezMA0GCSqGSIb3DQEBCwUA
A4IBAQAs1PN3sLrkGXecJjeBFixDYPb6y/D/LyPjQOUbl1tTpxXbVm+3HSWIVHtm
LdBZ5Mayc0/XWtDVs86btEx+/42B2bQInDouGTBynz0JveFZDizVJPZwgp9pio19
fhgMihAE8/OEG4hDnCW5fJNJJK4IWIaYejXxKwQED/ofCg4F4B7ag5QQWspI8BeW
+8haGN7DPnD5wzD/KtlyqGkDPZHqpgilOM2Yk9lOPFF6Kc5ZRnOvJ7TI5zh1vFwf
lW73W8AZBgv5EiC1GJOuWSfq7bh7HpFRLSS0V3p8H8pL8mwn7S1HbdS9jZWC3GGS
toEDtLF28VRWdP7zU7YL2F9jyH2u
-----END CERTIFICATE-----
Generated at Wed May 7 21:51:35 2025 by rpki-client