Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/016252B0F34611EFB3ABA696762E951A.roa
File: 016252B0F34611EFB3ABA696762E951A.roa (raw, json)
Hash identifier: Od1+f0fva5OOuhWHHPva1cGHUDXtBSSHSc28B9Gn6wE=
Subject key identifier: 81:1D:CF:B2:96:FB:60:1A:17:2C:05:5C:90:BA:E3:6C:10:7D:4F:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/016252B0F34611EFB3ABA696762E951A.roa
Signing time: Tue 25 Feb 2025 06:59:07 +0000
ROA not before: Tue 25 Feb 2025 06:59:03 +0000
ROA not after: Sat 19 Feb 2028 06:59:03 +0000
asID: 17561
IP address blocks: 156.249.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77206 (0x12d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 06:59:03 2025 GMT
Not After : Feb 19 06:59:03 2028 GMT
Subject: CN=67bd6a3b-9b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:72:df:f9:53:08:49:a4:25:c3:e2:c5:47:
4b:21:61:3c:69:55:89:07:ff:c2:a2:23:0c:cd:b3:
aa:04:61:14:35:0a:82:61:8c:cf:eb:d0:ea:e1:47:
83:d8:39:d4:f8:7b:f2:c6:20:10:82:71:58:60:4f:
9e:d3:31:d7:d6:c4:4e:c3:2e:cd:5a:86:d3:b6:ab:
96:bf:22:c1:ce:73:40:0d:10:22:07:69:83:3b:ca:
b5:e3:0d:39:95:cc:aa:6e:68:33:e4:e7:e6:ef:a8:
5e:ab:9e:45:03:5f:87:a3:c1:6a:d9:da:33:2f:8f:
4c:67:4d:59:83:43:b1:9b:53:66:f1:b4:c1:b1:a2:
04:60:42:51:ec:71:78:0e:66:33:38:b8:da:36:0b:
29:ed:bf:40:1b:f2:43:2e:04:ec:a2:c4:50:02:58:
e2:b6:c1:38:26:7a:b4:0a:cb:a3:63:e1:a0:9b:22:
ff:b6:f7:4c:ed:0a:f2:3d:50:e2:e2:ad:15:7e:8c:
b5:30:57:1c:b5:d7:bc:a3:11:fb:d0:d1:fb:79:e3:
08:ee:32:55:ca:79:12:b5:44:64:75:43:05:5b:b3:
e5:78:9d:7f:ca:aa:45:38:f5:9a:56:12:2b:cf:d1:
13:d4:15:66:42:0d:83:54:33:c3:ad:2d:ce:9a:f4:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:CF:B2:96:FB:60:1A:17:2C:05:5C:90:BA:E3:6C:10:7D:4F:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/016252B0F34611EFB3ABA696762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
72:df:a2:7f:fe:88:16:8c:b1:3a:d9:aa:9d:00:58:ed:c8:d0:
ce:4f:c5:84:02:5c:80:c5:49:34:32:19:96:b7:2a:5a:f9:fe:
c5:c6:9e:e7:26:05:dc:62:18:a8:3c:3f:b6:ce:3f:e9:8e:3e:
df:e4:f5:de:7e:9c:22:61:0a:4a:b6:77:93:cd:0d:f4:d7:ae:
5b:69:ee:c5:1e:43:09:b7:8c:c7:5c:19:7e:af:6c:89:e3:ac:
ad:82:ab:89:4e:dc:62:dc:cd:27:96:49:8b:58:1c:b2:db:f3:
5d:04:05:92:c6:1a:f8:fe:da:5b:0d:ae:e1:ef:ee:f2:be:01:
ae:36:eb:0c:a2:79:3c:2c:ff:d2:bb:43:79:fc:0f:8b:9c:6f:
a1:f5:a0:46:9e:8f:a4:0c:66:e9:9b:57:c3:e9:0e:37:bf:bf:
f1:6f:0b:12:1c:b3:f8:00:b9:28:93:8c:e9:0d:d1:85:04:76:
e6:2d:dc:0a:71:fe:5a:07:68:5b:5a:1f:6d:c2:58:2b:41:cc:
f7:16:a7:26:9d:0d:d5:ac:7e:07:37:7e:62:ef:7b:b5:65:d1:
c0:e6:85:37:77:f1:69:43:e5:28:4c:24:b6:79:cd:c6:1b:a6:
72:87:cf:c5:3a:23:9b:76:fc:36:72:77:90:fc:a8:a8:4c:f1:
74:aa:f0:85
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAS2WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI1MDY1OTAzWhcNMjgwMjE5MDY1OTAzWjAYMRYw
FAYDVQQDEw02N2JkNmEzYi05Yjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA175y3/lTCEmkJcPixUdLIWE8aVWJB//CoiMMzbOqBGEUNQqCYYzP69Dq
4UeD2DnU+HvyxiAQgnFYYE+e0zHX1sROwy7NWobTtquWvyLBznNADRAiB2mDO8q1
4w05lcyqbmgz5Ofm76heq55FA1+Ho8Fq2dozL49MZ01Zg0Oxm1Nm8bTBsaIEYEJR
7HF4DmYzOLjaNgsp7b9AG/JDLgTsosRQAljitsE4Jnq0CsujY+GgmyL/tvdM7Qry
PVDi4q0Vfoy1MFcctde8oxH70NH7eeMI7jJVynkStURkdUMFW7PleJ1/yqpFOPWa
VhIrz9ET1BVmQg2DVDPDrS3OmvTdMwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIEd
z7KW+2AaFywFXJC642wQfU+QMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMTYyNTJCMEYzNDYxMUVGQjNBQkE2OTY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPnXMA0GCSqGSIb3DQEBCwUA
A4IBAQBy36J//ogWjLE62aqdAFjtyNDOT8WEAlyAxUk0MhmWtypa+f7Fxp7nJgXc
YhioPD+2zj/pjj7f5PXefpwiYQpKtneTzQ30165bae7FHkMJt4zHXBl+r2yJ46yt
gquJTtxi3M0nlkmLWByy2/NdBAWSxhr4/tpbDa7h7+7yvgGuNusMonk8LP/Su0N5
/A+LnG+h9aBGno+kDGbpm1fD6Q43v7/xbwsSHLP4ALkok4zpDdGFBHbmLdwKcf5a
B2hbWh9twlgrQcz3FqcmnQ3VrH4HN35i73u1ZdHA5oU3d/FpQ+UoTCS2ec3GG6Zy
h8/FOiObdvw2cneQ/KioTPF0qvCF
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:47 2025 by rpki-client