Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F401E8F4B011EF826CF853762E951A.roa
File: 30F401E8F4B011EF826CF853762E951A.roa (raw, json)
Hash identifier: 4vsJ93xc/QnlPPpdpYmDuHKPL2C7mPEYv6EmrBD4Ayw=
Subject key identifier: 4E:E0:E4:7A:46:14:41:92:DA:C7:8A:E4:AD:2E:83:BB:85:D8:C0:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0138A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F401E8F4B011EF826CF853762E951A.roa
Signing time: Thu 27 Feb 2025 02:11:45 +0000
ROA not before: Thu 27 Feb 2025 02:11:40 +0000
ROA not after: Thu 19 Feb 2026 02:11:40 +0000
asID: 984
IP address blocks: 156.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80038 (0x138a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 02:11:40 2025 GMT
Not After : Feb 19 02:11:40 2026 GMT
Subject: CN=67bfc9e0-313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:d9:37:33:77:61:be:a2:b1:16:86:a0:da:
ee:af:7d:92:79:e4:b7:29:cd:95:81:d8:c0:57:d7:
da:0e:85:6e:90:a3:1e:9a:1a:ec:08:22:3a:49:ec:
f4:ae:62:7d:57:14:58:14:2d:b5:66:99:85:02:49:
a9:4d:58:96:cd:0b:97:4b:f9:ab:61:58:68:9a:a4:
de:15:af:e3:7d:fe:d6:3e:07:73:e8:f6:28:5b:a8:
68:3b:a7:29:c7:9f:6b:b5:a4:bd:f1:65:e2:53:2e:
54:e2:fd:5b:cc:c8:bb:88:8b:c3:a3:e6:b7:93:4d:
5f:de:a8:5b:a1:2e:e8:37:79:e5:cc:c9:3a:9a:ad:
3b:04:df:bb:0b:d8:47:29:7a:eb:65:aa:e8:8f:41:
02:5a:64:35:bb:8d:17:c6:46:59:08:83:f1:ba:ad:
2c:79:50:3c:e8:79:a7:6c:9c:c4:2a:6a:5c:25:2f:
b6:7b:f1:96:a3:8e:0d:50:58:99:83:97:e3:dd:e5:
20:0e:25:fd:0f:9b:21:7d:d5:77:b3:c3:70:a7:6b:
de:88:c8:b5:31:5d:b1:76:4d:40:6a:c4:ec:ba:3e:
f4:a0:be:3b:33:16:ea:d7:ae:6d:06:f7:b3:67:1e:
43:5f:9e:59:44:6e:bf:d5:ab:d3:fe:48:90:c6:13:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E0:E4:7A:46:14:41:92:DA:C7:8A:E4:AD:2E:83:BB:85:D8:C0:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F401E8F4B011EF826CF853762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c8:d7:7d:b9:9f:f0:34:9c:50:d8:a3:d2:1e:43:7c:04:49:
c8:56:09:c5:1d:4e:77:88:17:97:5c:92:1d:14:92:20:c8:08:
77:dc:c2:bb:62:8a:18:0e:e6:b3:7e:ba:a9:83:99:19:c9:7f:
b3:db:45:78:9b:92:8f:47:7a:bc:6c:11:4e:0a:53:c1:23:78:
52:d2:9b:12:8f:41:a2:0e:ad:d1:83:16:55:af:78:ee:6f:f7:
f3:c8:cd:7d:ac:80:41:3c:c2:38:5f:22:ee:a4:98:dd:e1:40:
c9:0a:47:cb:f6:d4:62:72:6f:90:16:bc:82:c2:77:24:cb:f8:
4e:88:e1:96:83:71:5a:42:f2:cf:ad:ea:cd:7e:11:4f:72:1e:
d5:c7:74:ee:c1:d4:e2:07:99:56:48:d4:14:b4:a4:cc:cb:18:
87:7c:04:0f:a4:87:5a:17:f9:13:45:53:17:b1:c9:c7:42:4a:
12:2b:5f:ed:c7:09:4d:7b:44:85:63:51:b9:0f:cb:45:2c:b2:
1e:dd:57:71:2b:b4:40:16:84:d7:3e:d3:1c:44:b4:b0:42:9e:
1e:45:c4:41:ee:7b:4d:6e:b9:0e:5b:3b:e3:a3:12:93:43:4f:
b0:19:5e:01:1d:38:b3:3b:ea:9d:8e:e1:f7:52:a4:c0:30:2b:
b3:e5:5c:01
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATimMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI3MDIxMTQwWhcNMjYwMjE5MDIxMTQwWjAYMRYw
FAYDVQQDEw02N2JmYzllMC0zMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1qzZNzN3Yb6isRaGoNrur32SeeS3Kc2VgdjAV9faDoVukKMemhrsCCI6
Sez0rmJ9VxRYFC21ZpmFAkmpTViWzQuXS/mrYVhomqTeFa/jff7WPgdz6PYoW6ho
O6cpx59rtaS98WXiUy5U4v1bzMi7iIvDo+a3k01f3qhboS7oN3nlzMk6mq07BN+7
C9hHKXrrZaroj0ECWmQ1u40XxkZZCIPxuq0seVA86HmnbJzEKmpcJS+2e/GWo44N
UFiZg5fj3eUgDiX9D5shfdV3s8Nwp2veiMi1MV2xdk1AasTsuj70oL47Mxbq165t
BvezZx5DX55ZRG6/1avT/kiQxhNNlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE7g
5HpGFEGS2seK5K0ug7uF2MD+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMEY0MDFFOEY0QjAxMUVGODI2Q0Y4NTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPc2MA0GCSqGSIb3DQEBCwUA
A4IBAQCFyNd9uZ/wNJxQ2KPSHkN8BEnIVgnFHU53iBeXXJIdFJIgyAh33MK7YooY
Duazfrqpg5kZyX+z20V4m5KPR3q8bBFOClPBI3hS0psSj0GiDq3RgxZVr3jub/fz
yM19rIBBPMI4XyLupJjd4UDJCkfL9tRicm+QFryCwncky/hOiOGWg3FaQvLPrerN
fhFPch7Vx3TuwdTiB5lWSNQUtKTMyxiHfAQPpIdaF/kTRVMXscnHQkoSK1/txwlN
e0SFY1G5D8tFLLIe3VdxK7RAFoTXPtMcRLSwQp4eRcRB7ntNbrkOWzvjoxKTQ0+w
GV4BHTizO+qdjuH3UqTAMCuz5VwB
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:28 2025 by rpki-client