Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3935486E0ED511F0B6BA395D762E951A.roa
File: 3935486E0ED511F0B6BA395D762E951A.roa (raw, json)
Hash identifier: neHuV6VoANcg1A8RHyHn/mBUNZtnjhPLzXGKqmuLtbM=
Subject key identifier: 72:C8:8C:4C:61:86:96:59:EF:F4:D8:C2:A9:2C:2A:E8:16:64:8A:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01494E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3935486E0ED511F0B6BA395D762E951A.roa
Signing time: Tue 01 Apr 2025 08:42:20 +0000
ROA not before: Tue 01 Apr 2025 08:42:16 +0000
ROA not after: Wed 01 Oct 2025 08:42:16 +0000
asID: 328608
IP address blocks: 156.229.100.0/24 maxlen: 24
156.229.101.0/24 maxlen: 24
156.229.102.0/24 maxlen: 24
156.229.103.0/24 maxlen: 24
156.229.104.0/24 maxlen: 24
156.229.105.0/24 maxlen: 24
156.229.106.0/24 maxlen: 24
156.229.107.0/24 maxlen: 24
156.229.108.0/24 maxlen: 24
156.229.109.0/24 maxlen: 24
156.229.110.0/24 maxlen: 24
156.229.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84302 (0x1494e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Apr 1 08:42:16 2025 GMT
Not After : Oct 1 08:42:16 2025 GMT
Subject: CN=67eba6ec-ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:e2:16:18:73:8b:3c:dc:bb:ae:0d:7c:4b:
63:03:cd:30:57:f9:1f:a7:a6:4f:bb:34:05:ff:7e:
8d:1d:b1:47:d6:ae:02:0a:82:8c:ca:2e:ca:18:36:
dc:0e:35:cd:32:ca:f1:84:54:79:f2:3e:31:58:f7:
00:2c:82:a5:34:73:c7:0e:1a:5c:bf:58:91:fd:60:
f8:4e:b9:53:91:11:54:02:cb:74:1c:8a:84:52:84:
74:37:92:9d:57:f7:67:ec:52:bc:6d:cd:e5:fd:54:
02:33:ab:a8:13:26:78:1c:ec:6a:c0:61:2d:bd:05:
d8:c0:80:8d:ac:18:d1:3e:6d:a7:78:be:7a:80:2f:
4e:83:d2:72:34:ac:04:6b:9e:ff:76:a8:c1:d4:41:
73:09:44:46:f1:80:80:d3:c1:1c:b9:28:bf:31:de:
5e:51:02:25:f3:76:f3:4b:ea:1b:db:3b:38:8b:50:
93:bd:f3:83:e0:13:71:f0:a0:19:5a:db:b3:6b:00:
1d:67:05:ba:2f:e7:b6:4c:89:13:26:38:77:b1:42:
42:45:47:56:0a:04:2c:21:10:fe:68:7f:05:ff:b4:
13:47:3b:ef:1c:13:3c:88:04:f7:68:eb:53:df:26:
c7:38:8b:ff:85:a9:da:ce:35:98:52:51:1f:c5:20:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:8C:4C:61:86:96:59:EF:F4:D8:C2:A9:2C:2A:E8:16:64:8A:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3935486E0ED511F0B6BA395D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.100.0-156.229.111.255
Signature Algorithm: sha256WithRSAEncryption
0f:07:c9:84:a2:20:a2:e4:9a:e5:9a:4f:02:13:d0:e0:e2:6f:
26:0e:29:bb:f3:7c:43:a7:40:ba:99:72:fd:a5:56:2e:f3:0f:
91:fb:db:15:e2:55:b8:69:68:39:8e:82:fd:be:41:72:1c:99:
c4:d5:b9:80:9d:24:ec:20:6e:64:36:ed:5b:9a:7b:71:79:bc:
30:3e:0c:4a:66:51:d3:aa:6d:a8:e9:61:1c:3a:6b:c0:2c:3f:
dd:5d:d7:87:05:67:e6:87:de:5b:70:e0:05:88:59:2d:1b:c6:
36:fe:47:d8:e3:2c:9c:6e:ae:cc:5d:67:e1:53:b7:bc:21:78:
ce:a4:3c:bb:37:23:11:db:90:59:43:9d:e0:eb:35:7b:8d:27:
6b:32:4f:18:88:bd:cf:63:b1:91:27:9f:5e:d5:bc:f8:73:25:
86:e7:91:8e:86:63:33:3d:79:53:84:a4:a4:77:c0:fd:55:08:
58:51:db:bc:24:be:62:e7:35:e2:ce:53:ba:30:48:eb:b9:6c:
38:f2:5a:68:6e:20:3a:81:85:0e:d7:08:99:1f:a4:c5:85:2e:
d5:f1:5a:9d:2b:7f:9a:3f:34:5c:58:b7:2c:0d:83:3b:ba:6f:
93:7d:db:67:e3:49:86:35:13:df:f4:2f:c0:5a:52:38:43:1c:
e8:1a:e9:97
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUlOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDAxMDg0MjE2WhcNMjUxMDAxMDg0MjE2WjAYMRYw
FAYDVQQDEw02N2ViYTZlYy1lZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtfziFhhzizzcu64NfEtjA80wV/kfp6ZPuzQF/36NHbFH1q4CCoKMyi7K
GDbcDjXNMsrxhFR58j4xWPcALIKlNHPHDhpcv1iR/WD4TrlTkRFUAst0HIqEUoR0
N5KdV/dn7FK8bc3l/VQCM6uoEyZ4HOxqwGEtvQXYwICNrBjRPm2neL56gC9Og9Jy
NKwEa57/dqjB1EFzCURG8YCA08EcuSi/Md5eUQIl83bzS+ob2zs4i1CTvfOD4BNx
8KAZWtuzawAdZwW6L+e2TIkTJjh3sUJCRUdWCgQsIRD+aH8F/7QTRzvvHBM8iAT3
aOtT3ybHOIv/hanazjWYUlEfxSA2zQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHLI
jExhhpZZ7/TYwqksKugWZIqWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOTM1NDg2RTBFRDUxMUYwQjZCQTM5NUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc5WQDBASc5WAwDQYJKoZI
hvcNAQELBQADggEBAA8HyYSiIKLkmuWaTwIT0ODibyYOKbvzfEOnQLqZcv2lVi7z
D5H72xXiVbhpaDmOgv2+QXIcmcTVuYCdJOwgbmQ27Vuae3F5vDA+DEpmUdOqbajp
YRw6a8AsP91d14cFZ+aH3ltw4AWIWS0bxjb+R9jjLJxursxdZ+FTt7wheM6kPLs3
IxHbkFlDneDrNXuNJ2syTxiIvc9jsZEnn17VvPhzJYbnkY6GYzM9eVOEpKR3wP1V
CFhR27wkvmLnNeLOU7owSOu5bDjyWmhuIDqBhQ7XCJkfpMWFLtXxWp0rf5o/NFxY
tywNgzu6b5N922fjSYY1E9/0L8BaUjhDHOga6Zc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:32 2025 by rpki-client