Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162AF554F42611EFB7631890762E951A.roa
File: 162AF554F42611EFB7631890762E951A.roa (raw, json)
Hash identifier: Zu1S7To7BNoi/zXqPr2LRgkHZfVSUbVJk6qEq6f1wz4=
Subject key identifier: 41:E3:F1:71:AA:8B:CC:0C:CB:4A:12:69:8D:56:C7:60:0E:5A:DC:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013097
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162AF554F42611EFB7631890762E951A.roa
Signing time: Wed 26 Feb 2025 09:43:09 +0000
ROA not before: Wed 26 Feb 2025 09:43:05 +0000
ROA not after: Thu 19 Feb 2026 09:43:05 +0000
asID: 984
IP address blocks: 156.252.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77975 (0x13097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 09:43:05 2025 GMT
Not After : Feb 19 09:43:05 2026 GMT
Subject: CN=67bee22d-fd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4e:df:39:38:cc:25:ff:0c:24:fa:49:ac:e2:
b2:d9:7c:60:24:53:79:67:59:44:5f:78:c4:fd:bb:
58:18:31:93:af:51:f5:79:96:2d:69:6b:51:a6:44:
4f:26:64:ee:fa:91:3a:72:59:0f:81:b1:6b:af:a9:
64:77:2b:42:f9:91:99:d9:6a:82:3c:82:34:c2:14:
50:1b:1e:b9:2e:bd:39:7b:ff:72:5e:9d:b9:dc:1b:
0c:6d:53:57:97:10:dd:4f:bb:82:a5:2c:c3:5e:4a:
99:02:7d:1c:62:6b:89:fd:d8:e7:d1:0e:c5:ac:8c:
30:ae:7b:d6:f5:7d:94:5c:b5:fe:36:5f:87:12:b0:
c9:14:43:c5:f5:97:8b:66:d8:75:58:80:8c:4e:52:
53:15:9b:a7:2e:60:93:59:ba:f8:f8:c3:af:06:94:
69:06:d9:f8:2b:59:a8:33:03:db:b7:6a:de:00:5e:
e6:71:ab:c5:21:c8:d2:99:41:ea:62:f3:c6:56:cd:
1a:f6:3c:37:68:b2:fc:2a:b8:45:c4:e6:b3:55:b1:
19:bf:8e:b6:f9:da:cf:98:ef:73:04:a4:59:b1:bb:
bf:5f:5e:91:6e:3b:6b:5c:57:46:fc:8f:59:8f:95:
7b:35:8f:0f:08:b5:56:32:cd:6f:4e:e6:de:85:17:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:F1:71:AA:8B:CC:0C:CB:4A:12:69:8D:56:C7:60:0E:5A:DC:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/162AF554F42611EFB7631890762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d6:ec:52:a4:95:54:f9:2a:01:c1:82:a7:fa:56:64:44:8e:
a7:0c:52:81:ae:0f:b5:6e:46:76:a9:bd:3c:49:dc:d4:dc:89:
85:7e:78:e0:5e:0d:66:cb:b9:d3:50:d3:4d:08:1d:74:57:20:
94:fc:b1:22:4d:55:84:47:a5:ec:eb:68:f0:45:94:e7:b9:3d:
6b:bf:4a:12:91:42:b5:9d:f0:4f:31:13:d9:61:87:f8:97:74:
19:4f:93:a5:5f:f4:19:e9:e3:c3:bc:97:df:49:33:cb:fe:47:
a8:8e:4f:6a:54:78:51:08:d1:e0:36:a7:de:da:45:f4:c6:36:
df:74:9c:8f:23:96:b6:da:99:a2:dc:73:b5:61:92:30:4c:23:
b9:07:19:be:5f:5e:6c:1f:1f:22:86:f4:40:b9:7a:ea:40:2a:
f0:6a:d1:98:86:42:ae:fe:47:55:2b:1e:b1:3d:e4:a8:b1:1a:
3b:59:26:3d:90:c6:e8:01:4c:5b:24:15:c4:92:7d:0c:90:18:
6e:c6:60:75:09:94:e2:d7:80:ae:00:2a:ac:c1:22:9e:89:f7:
a2:70:c4:4d:62:0e:64:e5:a4:13:7d:6c:57:04:f3:03:c3:7c:
c8:6d:74:3c:79:44:b8:29:1c:57:bc:91:41:c3:c3:5b:d5:cd:
a3:82:ac:7a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATCXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MDk0MzA1WhcNMjYwMjE5MDk0MzA1WjAYMRYw
FAYDVQQDEw02N2JlZTIyZC1mZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4E7fOTjMJf8MJPpJrOKy2XxgJFN5Z1lEX3jE/btYGDGTr1H1eZYtaWtR
pkRPJmTu+pE6clkPgbFrr6lkdytC+ZGZ2WqCPII0whRQGx65Lr05e/9yXp253BsM
bVNXlxDdT7uCpSzDXkqZAn0cYmuJ/djn0Q7FrIwwrnvW9X2UXLX+Nl+HErDJFEPF
9ZeLZth1WICMTlJTFZunLmCTWbr4+MOvBpRpBtn4K1moMwPbt2reAF7mcavFIcjS
mUHqYvPGVs0a9jw3aLL8KrhFxOazVbEZv462+drPmO9zBKRZsbu/X16RbjtrXFdG
/I9Zj5V7NY8PCLVWMs1vTubehRdGbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEHj
8XGqi8wMy0oSaY1Wx2AOWtyaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNjJBRjU1NEY0MjYxMUVGQjc2MzE4OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPxEMA0GCSqGSIb3DQEBCwUA
A4IBAQA71uxSpJVU+SoBwYKn+lZkRI6nDFKBrg+1bkZ2qb08SdzU3ImFfnjgXg1m
y7nTUNNNCB10VyCU/LEiTVWER6Xs62jwRZTnuT1rv0oSkUK1nfBPMRPZYYf4l3QZ
T5OlX/QZ6ePDvJffSTPL/keojk9qVHhRCNHgNqfe2kX0xjbfdJyPI5a22pmi3HO1
YZIwTCO5Bxm+X15sHx8ihvRAuXrqQCrwatGYhkKu/kdVKx6xPeSosRo7WSY9kMbo
AUxbJBXEkn0MkBhuxmB1CZTi14CuACqswSKeifeicMRNYg5k5aQTfWxXBPMDw3zI
bXQ8eUS4KRxXvJFBw8Nb1c2jgqx6
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:57 2025 by rpki-client