Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/433C10EAD24411EF8645DC9C762E951A.roa
File: 433C10EAD24411EF8645DC9C762E951A.roa (raw, json)
Hash identifier: rX9+kTFqiUA1wsBat69jZXQSyh9Cns+chLGWMVrGirs=
Subject key identifier: 43:80:21:CE:99:F3:80:85:CF:EA:63:F8:BD:44:52:F0:EF:61:BD:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/433C10EAD24411EF8645DC9C762E951A.roa
Signing time: Tue 14 Jan 2025 06:53:30 +0000
ROA not before: Tue 14 Jan 2025 06:53:26 +0000
ROA not after: Thu 15 May 2025 06:53:26 +0000
asID: 152705
IP address blocks: 156.224.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67268 (0x106c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 14 06:53:26 2025 GMT
Not After : May 15 06:53:26 2025 GMT
Subject: CN=678609ea-2d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:63:70:58:c1:f1:90:b7:2c:04:a1:b1:40:
c5:40:82:6e:d4:8e:3f:7f:bd:72:e1:aa:66:b3:9b:
6c:48:c4:56:a4:ef:ea:07:39:19:63:95:0a:68:f9:
05:f6:93:14:25:57:47:6d:90:6d:60:8c:6a:29:cc:
d3:e4:f7:b8:83:e2:8b:3b:2d:13:34:74:5c:28:60:
30:97:4a:45:56:5c:b3:13:7a:83:b7:e8:71:83:7b:
0c:a4:f4:ae:70:7a:08:53:16:b2:82:7e:89:64:82:
dc:79:b9:d2:24:6a:ed:a9:d9:72:63:dc:cc:05:7e:
a6:34:2b:22:72:80:40:4d:ad:7d:0d:72:d2:4b:cb:
28:af:1a:9e:a6:9a:97:32:c3:13:38:8e:c3:e7:26:
13:82:52:43:ef:85:a1:f8:f8:b6:55:f1:80:70:15:
d9:88:df:76:d8:68:80:1d:1c:9d:f9:a6:b2:32:24:
24:ef:b6:39:c0:39:87:19:b5:f4:32:2c:a6:ef:d3:
c5:43:22:47:03:1d:c4:5e:ed:dc:27:7e:5d:74:03:
b2:41:96:76:47:41:61:63:8f:12:9d:f5:88:d4:bb:
bd:45:a6:91:5f:66:2b:ad:99:45:c3:49:2c:e7:8f:
64:81:e7:f5:5c:a9:57:c6:a0:e8:59:64:3e:45:b4:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:21:CE:99:F3:80:85:CF:EA:63:F8:BD:44:52:F0:EF:61:BD:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/433C10EAD24411EF8645DC9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
Signature Algorithm: sha256WithRSAEncryption
18:33:86:cc:ea:3d:f8:9f:f5:5c:e9:50:05:66:b0:b9:08:d6:
cf:b4:7f:87:b3:7b:ef:33:4c:b8:7b:4c:32:45:b3:35:28:1d:
ea:50:c0:93:53:96:f9:cc:ef:34:25:a7:e3:ae:a6:86:3f:c0:
33:5e:c7:cc:df:1f:13:eb:d0:86:1a:79:a0:bf:77:a4:66:cc:
c8:a7:48:fe:b2:49:30:25:c0:48:df:6b:cb:5f:5e:6a:c0:5e:
7b:94:9a:77:3b:7f:83:11:38:6a:52:a0:8e:12:08:ff:89:a0:
31:e6:84:dc:a8:cb:60:7f:71:fe:61:5c:7a:ae:ba:b9:ef:68:
b4:2a:6e:b4:ca:a7:9f:bc:cf:63:a7:1b:36:f2:e9:76:87:90:
ad:69:04:65:47:35:e1:ce:e6:dc:85:10:c0:23:30:e8:8a:14:
ee:3d:f2:a8:a3:c5:5a:2e:6d:6a:13:eb:fe:d0:9b:2e:5a:53:
e6:fa:6e:62:f9:74:71:fe:f8:26:89:e8:80:73:32:cf:56:83:
94:2c:d4:1e:fb:ef:b4:b5:a9:d0:f9:60:c6:86:88:e3:41:6b:
e6:05:b3:a2:54:34:29:74:7e:32:3e:ce:e4:1f:d4:24:41:a0:
1a:fa:64:64:f3:8f:9c:83:3c:dd:5a:61:e0:a8:55:49:d7:20:
56:fe:ba:10
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQbEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE0MDY1MzI2WhcNMjUwNTE1MDY1MzI2WjAYMRYw
FAYDVQQDEw02Nzg2MDllYS0yZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsWtjcFjB8ZC3LAShsUDFQIJu1I4/f71y4apms5tsSMRWpO/qBzkZY5UK
aPkF9pMUJVdHbZBtYIxqKczT5Pe4g+KLOy0TNHRcKGAwl0pFVlyzE3qDt+hxg3sM
pPSucHoIUxaygn6JZILcebnSJGrtqdlyY9zMBX6mNCsicoBATa19DXLSS8sorxqe
ppqXMsMTOI7D5yYTglJD74Wh+Pi2VfGAcBXZiN922GiAHRyd+aayMiQk77Y5wDmH
GbX0Miym79PFQyJHAx3EXu3cJ35ddAOyQZZ2R0FhY48SnfWI1Lu9RaaRX2YrrZlF
w0ks549kgef1XKlXxqDoWWQ+RbTrIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEOA
Ic6Z84CFz+pj+L1EUvDvYb2zMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MzNDMTBFQUQyNDQxMUVGODY0NURDOUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOASMA0GCSqGSIb3DQEBCwUA
A4IBAQAYM4bM6j34n/Vc6VAFZrC5CNbPtH+Hs3vvM0y4e0wyRbM1KB3qUMCTU5b5
zO80JafjrqaGP8AzXsfM3x8T69CGGnmgv3ekZszIp0j+skkwJcBI32vLX15qwF57
lJp3O3+DEThqUqCOEgj/iaAx5oTcqMtgf3H+YVx6rrq572i0Km60yqefvM9jpxs2
8ul2h5CtaQRlRzXhzubchRDAIzDoihTuPfKoo8VaLm1qE+v+0JsuWlPm+m5i+XRx
/vgmieiAczLPVoOULNQe+++0tanQ+WDGhojjQWvmBbOiVDQpdH4yPs7kH9QkQaAa
+mRk84+cgzzdWmHgqFVJ1yBW/roQ
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:14:43 2025 by rpki-client