Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3D3160FFE511EF979CF947762E951A.roa
File: 2D3D3160FFE511EF979CF947762E951A.roa (raw, json)
Hash identifier: zIqdNbSZL2w9DtoKbxDKtLYsPGWmOoUbcn6h30sq5Fs=
Subject key identifier: C6:D6:73:30:D7:23:17:63:DE:2A:BE:31:8F:9D:07:11:F4:90:FF:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01459C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3D3160FFE511EF979CF947762E951A.roa
Signing time: Thu 13 Mar 2025 08:28:44 +0000
ROA not before: Thu 13 Mar 2025 08:28:40 +0000
ROA not after: Sat 19 Apr 2025 08:28:40 +0000
asID: 273478
IP address blocks: 156.232.103.0/24 maxlen: 24
156.232.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83356 (0x1459c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 13 08:28:40 2025 GMT
Not After : Apr 19 08:28:40 2025 GMT
Subject: CN=67d2973c-c5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:ea:13:6e:2e:2f:91:23:f2:56:b0:ff:ec:
68:a9:d0:81:f0:62:5c:b5:c5:db:aa:9a:e4:c7:04:
bb:8f:c0:65:25:99:a8:88:48:dc:ee:e7:78:7a:db:
fe:7e:4d:f0:c3:3e:53:0c:63:2b:33:6a:c0:b7:a4:
4b:b8:8d:26:03:7a:bc:a5:10:f1:a4:8c:86:2e:1c:
4e:3c:5a:2a:10:7b:3f:51:89:ab:57:12:ba:f1:ad:
12:21:da:9c:8d:55:bb:cf:1c:ad:f3:4a:29:3c:f9:
b4:7d:49:96:df:fb:a6:ad:d3:21:2a:04:57:a6:6d:
ce:48:73:51:3c:13:df:a5:1e:69:1d:23:51:33:83:
fd:38:81:91:59:9e:2d:71:ac:2c:1d:32:63:d7:5e:
22:3c:c1:3a:3f:73:97:1d:28:cc:c0:2d:8b:7e:c9:
e8:19:72:86:4d:bd:9f:f4:1b:34:9d:ce:de:7a:59:
93:cd:4c:5a:01:25:84:80:d9:6d:62:4e:dc:43:70:
5e:f5:ab:7d:f6:da:85:d7:d4:36:20:3d:08:4e:b0:
89:cc:52:ce:d7:ad:45:f3:6b:05:1a:09:1a:c8:63:
43:2e:a7:e1:d4:e7:45:bc:30:48:5d:14:ed:81:56:
b6:84:ec:c2:e0:95:3c:62:09:71:10:77:99:34:8e:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:73:30:D7:23:17:63:DE:2A:BE:31:8F:9D:07:11:F4:90:FF:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D3D3160FFE511EF979CF947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.103.0-156.232.104.255
Signature Algorithm: sha256WithRSAEncryption
40:42:44:08:eb:ab:a8:e5:0b:12:78:67:d8:5c:3b:72:1c:00:
a3:f6:e4:cf:1a:2e:8b:22:28:2a:3d:93:af:61:99:c8:84:2f:
53:0b:59:33:8d:e5:dd:54:fd:e4:b9:53:8f:84:e7:ff:5d:ad:
9d:af:2a:09:2e:16:09:40:ce:b3:19:75:d3:6f:6e:10:76:90:
06:49:06:ee:4c:84:09:2c:4d:8d:d1:40:08:af:72:f8:28:33:
45:ef:a9:a3:6f:26:f4:5a:fe:ca:5b:f2:c1:c3:6a:44:a8:f4:
d8:ab:a1:f0:03:8f:24:37:a1:ae:18:0f:99:f6:5b:49:eb:9d:
5f:27:9e:9a:99:b8:bb:d6:ec:91:70:ff:4b:b1:cb:3b:04:c8:
f7:3b:00:19:e0:4e:99:2c:19:8d:8c:ae:ef:8a:24:5e:11:ba:
c5:39:45:a0:1c:26:7d:0c:37:b0:a1:fd:11:ae:b9:7f:a8:63:
f3:e1:3e:b5:94:82:18:dd:fa:33:48:c6:91:6e:59:8b:81:51:
6b:02:b6:b1:c7:da:12:55:d3:69:74:64:38:ba:6f:7e:47:a4:
0a:ab:57:c0:67:ee:a6:1f:ca:01:2d:a5:4c:d6:00:1e:c9:2e:
76:74:09:53:f6:ba:39:9f:1d:08:b3:6a:41:0c:83:7b:d8:93:
cd:53:63:72
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUWcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzEzMDgyODQwWhcNMjUwNDE5MDgyODQwWjAYMRYw
FAYDVQQDEw02N2QyOTczYy1jNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoxnqE24uL5Ej8law/+xoqdCB8GJctcXbqprkxwS7j8BlJZmoiEjc7ud4
etv+fk3wwz5TDGMrM2rAt6RLuI0mA3q8pRDxpIyGLhxOPFoqEHs/UYmrVxK68a0S
IdqcjVW7zxyt80opPPm0fUmW3/umrdMhKgRXpm3OSHNRPBPfpR5pHSNRM4P9OIGR
WZ4tcawsHTJj114iPME6P3OXHSjMwC2LfsnoGXKGTb2f9Bs0nc7eelmTzUxaASWE
gNltYk7cQ3Be9at99tqF19Q2ID0ITrCJzFLO161F82sFGgkayGNDLqfh1OdFvDBI
XRTtgVa2hOzC4JU8YglxEHeZNI4mPwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMbW
czDXIxdj3iq+MY+dBxH0kP9BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRDNEMzE2MEZGRTUxMUVGOTc5Q0Y5NDc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc6GcDBACc6GgwDQYJKoZI
hvcNAQELBQADggEBAEBCRAjrq6jlCxJ4Z9hcO3IcAKP25M8aLosiKCo9k69hmciE
L1MLWTON5d1U/eS5U4+E5/9drZ2vKgkuFglAzrMZddNvbhB2kAZJBu5MhAksTY3R
QAivcvgoM0XvqaNvJvRa/spb8sHDakSo9NirofADjyQ3oa4YD5n2W0nrnV8nnpqZ
uLvW7JFw/0uxyzsEyPc7ABngTpksGY2Mru+KJF4RusU5RaAcJn0MN7Ch/RGuuX+o
Y/PhPrWUghjd+jNIxpFuWYuBUWsCtrHH2hJV02l0ZDi6b35HpAqrV8Bn7qYfygEt
pUzWAB7JLnZ0CVP2ujmfHQizakEMg3vYk81TY3I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:27 2025 by rpki-client