Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044E1CE600C211F0B03EB750762E951A.roa
File: 044E1CE600C211F0B03EB750762E951A.roa (raw, json)
Hash identifier: 7w6EdwRHyfAzp3iEwqxjVDL3f5b9A0guRPcmq3fXZlI=
Subject key identifier: FA:B4:89:E9:9A:12:FA:39:18:BF:FE:EE:57:FA:2B:14:C6:36:FB:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0145F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044E1CE600C211F0B03EB750762E951A.roa
Signing time: Fri 14 Mar 2025 10:49:34 +0000
ROA not before: Fri 14 Mar 2025 10:49:31 +0000
ROA not after: Tue 08 Apr 2025 10:49:31 +0000
asID: 55714
IP address blocks: 156.238.72.0/24 maxlen: 24
156.238.73.0/24 maxlen: 24
156.238.74.0/24 maxlen: 24
156.238.75.0/24 maxlen: 24
156.238.76.0/24 maxlen: 24
156.238.77.0/24 maxlen: 24
156.238.78.0/24 maxlen: 24
156.238.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83446 (0x145f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 14 10:49:31 2025 GMT
Not After : Apr 8 10:49:31 2025 GMT
Subject: CN=67d409be-585f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:b3:b7:cc:aa:75:b8:48:6d:48:a2:40:9f:
51:38:d1:87:94:40:f0:d8:6f:a3:3c:b2:22:fa:4a:
b9:20:d1:16:c2:25:b8:b4:44:6c:bc:4f:f6:b9:04:
62:63:7d:e7:7c:d3:0f:1a:17:64:97:90:de:39:3e:
f9:58:ff:ab:53:0b:97:b0:02:88:74:9d:65:fc:83:
4d:b3:b5:8f:93:df:99:47:f4:62:20:69:bf:0e:c1:
81:f0:f6:80:b1:28:67:f7:dd:8e:bc:8f:95:0c:f7:
4b:e7:84:02:fc:ca:f0:e2:0e:9a:df:58:3d:bc:24:
6d:78:b9:7d:7f:de:a2:99:38:bc:ac:ac:50:d6:50:
72:77:70:3e:3a:b5:0e:69:cd:38:4b:6e:df:59:f8:
02:cd:51:2e:60:31:4d:19:96:16:45:18:51:84:eb:
cc:69:39:ba:93:ec:f5:1f:83:d0:d6:ed:32:e0:e1:
33:6a:de:5b:f8:6d:0d:ba:77:b7:b2:f5:45:3d:11:
9b:72:41:70:0f:65:0e:4f:34:72:67:8f:d0:d2:73:
8e:94:6b:8e:4e:1a:2d:86:b4:52:4d:c0:56:06:16:
b3:3a:2b:58:87:79:3f:41:39:ee:4a:c2:58:4e:ef:
08:74:62:30:58:8d:3d:8e:f7:81:95:e2:c5:60:cc:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B4:89:E9:9A:12:FA:39:18:BF:FE:EE:57:FA:2B:14:C6:36:FB:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/044E1CE600C211F0B03EB750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:0b:cf:f0:fa:67:2f:06:ca:d1:70:84:2c:2f:12:00:72:ce:
4e:ec:a2:da:38:c9:56:c2:3d:ff:66:a3:6a:dd:b4:eb:eb:05:
9c:f3:9d:3f:fb:48:7c:63:95:bc:2f:c1:8f:a9:0e:b5:b3:42:
31:23:42:c3:8c:77:7e:00:cd:31:e7:d4:18:e1:ee:b3:37:9d:
86:7c:b2:ab:72:a3:0c:9d:6e:27:12:58:96:9f:19:2e:6a:43:
27:81:82:50:aa:ba:75:7f:f4:7a:cf:e2:0d:ee:45:2e:3c:a9:
99:76:34:d5:e3:5f:24:f2:f2:c3:b8:76:da:b6:28:b2:5c:2c:
cd:70:9c:e8:b0:a3:d2:1e:78:7d:88:8e:fd:af:45:f3:9b:ec:
67:00:2d:a0:54:66:fd:15:79:87:00:1c:78:27:62:1f:0a:42:
32:b6:c4:03:c9:2b:4a:e5:31:f5:b4:40:bd:62:c6:9c:df:8c:
e2:3d:7a:4e:c3:06:12:c6:63:89:75:1b:86:d3:3b:f1:2e:73:
3a:ba:8b:b1:66:74:90:ee:ac:a8:5e:20:c0:e0:fa:fc:1a:3f:
cf:ec:cf:c3:9a:b2:a7:8a:15:22:90:26:10:52:a9:78:37:e5:
6a:75:73:3b:4c:5a:0b:5c:bd:0b:7a:68:96:23:e7:80:49:47:
d9:05:06:57
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUX2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzE0MTA0OTMxWhcNMjUwNDA4MTA0OTMxWjAYMRYw
FAYDVQQDEw02N2Q0MDliZS01ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxS+zt8yqdbhIbUiiQJ9RONGHlEDw2G+jPLIi+kq5INEWwiW4tERsvE/2
uQRiY33nfNMPGhdkl5DeOT75WP+rUwuXsAKIdJ1l/INNs7WPk9+ZR/RiIGm/DsGB
8PaAsShn992OvI+VDPdL54QC/Mrw4g6a31g9vCRteLl9f96imTi8rKxQ1lByd3A+
OrUOac04S27fWfgCzVEuYDFNGZYWRRhRhOvMaTm6k+z1H4PQ1u0y4OEzat5b+G0N
une3svVFPRGbckFwD2UOTzRyZ4/Q0nOOlGuOThothrRSTcBWBhazOitYh3k/QTnu
SsJYTu8IdGIwWI09jveBleLFYMw9BQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPq0
iemaEvo5GL/+7lf6KxTGNvu5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDRFMUNFNjAwQzIxMUYwQjAzRUI3NTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnO5IMA0GCSqGSIb3DQEBCwUA
A4IBAQCaC8/w+mcvBsrRcIQsLxIAcs5O7KLaOMlWwj3/ZqNq3bTr6wWc850/+0h8
Y5W8L8GPqQ61s0IxI0LDjHd+AM0x59QY4e6zN52GfLKrcqMMnW4nEliWnxkuakMn
gYJQqrp1f/R6z+IN7kUuPKmZdjTV418k8vLDuHbatiiyXCzNcJzosKPSHnh9iI79
r0Xzm+xnAC2gVGb9FXmHABx4J2IfCkIytsQDyStK5TH1tEC9Ysac34ziPXpOwwYS
xmOJdRuG0zvxLnM6uouxZnSQ7qyoXiDA4Pr8Gj/P7M/DmrKnihUikCYQUql4N+Vq
dXM7TFoLXL0LemiWI+eASUfZBQZX
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:16 2025 by rpki-client