Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/596CBF8221A311F09B527D85DAE4EC9C.roa
File: 596CBF8221A311F09B527D85DAE4EC9C.roa (raw, json)
Hash identifier: iMFhiilXn2ysWe0TjYxMfkIQYy5tt5JvUveniNHko6s=
Subject key identifier: 70:70:B9:D1:7C:B6:BA:CD:8E:7D:CC:5D:90:5C:9F:B3:AC:F0:A0:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/596CBF8221A311F09B527D85DAE4EC9C.roa
Signing time: Fri 25 Apr 2025 07:03:12 +0000
ROA not before: Fri 25 Apr 2025 07:03:07 +0000
ROA not after: Fri 09 May 2025 07:03:07 +0000
asID: 135097
IP address blocks: 156.224.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85672 (0x14ea8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 07:03:07 2025 GMT
Not After : May 9 07:03:07 2025 GMT
Subject: CN=680b33af-5a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:48:b9:8f:ee:48:e9:88:47:91:4d:8d:21:
2a:75:d0:25:fc:9a:5e:f2:33:44:e4:52:ea:cd:78:
9d:6c:78:ce:97:16:65:4e:13:6b:a5:7f:4b:f8:34:
89:f0:69:0a:dd:18:d9:37:91:85:2d:25:3e:fc:c8:
c9:78:db:6f:16:96:a2:53:7c:6b:7c:28:2b:55:48:
ba:1d:f5:86:76:6b:40:b2:88:b2:3f:b0:a3:89:a8:
7d:73:24:e9:d1:2b:c7:b5:56:bc:80:e5:10:c3:c6:
54:aa:9b:22:c2:da:d1:b7:cf:6a:fe:76:c8:77:6b:
5d:fa:3d:72:2e:64:78:61:f9:f4:a5:c0:e0:95:51:
31:1a:32:d7:ad:70:d9:81:1c:9c:3f:ec:17:0d:fd:
79:aa:d8:2d:4e:df:ae:78:27:11:ec:34:31:91:a1:
c6:ed:35:d4:f8:52:42:66:04:cd:83:82:23:99:18:
47:25:df:cc:6d:f9:c2:47:fb:02:c0:3d:f1:ad:1a:
3e:ef:2e:f5:8c:49:3a:1e:80:be:b6:c8:c6:c5:48:
f7:fd:97:e5:3f:e0:d7:60:f7:7c:82:a8:15:c7:4c:
c7:4f:9d:7c:4c:fb:b4:0d:16:0b:39:d0:c7:9c:bb:
f0:34:99:fd:ca:bf:8b:80:64:9d:74:6b:92:15:c6:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:70:B9:D1:7C:B6:BA:CD:8E:7D:CC:5D:90:5C:9F:B3:AC:F0:A0:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/596CBF8221A311F09B527D85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:28:83:23:0b:15:03:cc:54:a8:e6:2f:05:5f:cf:24:3b:26:
55:62:e2:55:e4:29:31:3f:dc:f4:5a:83:db:4d:a6:33:ba:28:
ce:a5:f6:db:bd:b9:12:be:ac:62:0d:46:b4:6b:91:58:02:03:
98:f6:75:7a:b9:c9:4d:58:80:df:c5:fe:85:f2:f8:65:d1:8e:
90:da:a4:fd:2d:aa:9e:24:11:5d:1d:36:b1:a8:02:a3:6f:27:
ea:1f:1c:93:d4:f1:fb:75:40:58:19:f1:88:0f:64:20:03:c7:
4f:bc:10:e3:65:69:d6:05:58:57:72:51:60:74:7a:3e:ce:eb:
b4:f5:2b:37:21:a8:8f:e3:04:fb:9d:74:a5:54:ed:f6:65:9e:
ac:6c:47:fb:aa:6b:60:4d:be:a4:dc:fa:00:a8:11:f5:8e:41:
98:08:f7:32:67:e0:49:8c:d3:9f:ee:ef:ae:5e:1a:b3:e9:c3:
7f:9e:69:3d:36:49:91:62:de:04:4c:31:c5:cd:14:70:5f:6e:
06:10:82:69:26:d6:11:fb:83:be:b0:35:3b:80:74:2d:45:08:
f5:6c:2e:0e:b2:98:53:a7:43:e1:59:c1:32:1f:bd:96:65:f7:
6a:0b:de:b8:57:24:26:ac:9c:09:ab:30:4c:51:91:80:b1:79:
48:32:29:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU6oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI1MDcwMzA3WhcNMjUwNTA5MDcwMzA3WjAYMRYw
FAYDVQQDEw02ODBiMzNhZi01YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmBtIuY/uSOmIR5FNjSEqddAl/Jpe8jNE5FLqzXidbHjOlxZlThNrpX9L
+DSJ8GkK3RjZN5GFLSU+/MjJeNtvFpaiU3xrfCgrVUi6HfWGdmtAsoiyP7Cjiah9
cyTp0SvHtVa8gOUQw8ZUqpsiwtrRt89q/nbId2td+j1yLmR4Yfn0pcDglVExGjLX
rXDZgRycP+wXDf15qtgtTt+ueCcR7DQxkaHG7TXU+FJCZgTNg4IjmRhHJd/MbfnC
R/sCwD3xrRo+7y71jEk6HoC+tsjGxUj3/ZflP+DXYPd8gqgVx0zHT518TPu0DRYL
OdDHnLvwNJn9yr+LgGSddGuSFcZc/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHBw
udF8trrNjn3MXZBcn7Os8KAPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OTZDQkY4MjIxQTMxMUYwOUI1MjdEODVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnOCAMA0GCSqGSIb3DQEBCwUA
A4IBAQCnKIMjCxUDzFSo5i8FX88kOyZVYuJV5CkxP9z0WoPbTaYzuijOpfbbvbkS
vqxiDUa0a5FYAgOY9nV6uclNWIDfxf6F8vhl0Y6Q2qT9LaqeJBFdHTaxqAKjbyfq
HxyT1PH7dUBYGfGID2QgA8dPvBDjZWnWBVhXclFgdHo+zuu09Ss3IaiP4wT7nXSl
VO32ZZ6sbEf7qmtgTb6k3PoAqBH1jkGYCPcyZ+BJjNOf7u+uXhqz6cN/nmk9NkmR
Yt4ETDHFzRRwX24GEIJpJtYR+4O+sDU7gHQtRQj1bC4OsphTp0PhWcEyH72WZfdq
C964VyQmrJwJqzBMUZGAsXlIMilo
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:47 2025 by rpki-client