Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58EFA326F43011EF9BD8B257762E951A.roa
File: 58EFA326F43011EF9BD8B257762E951A.roa (raw, json)
Hash identifier: uWAVIuwW3wrmW89dN+zJGy4OeQ6KOdo28e5gykoUTPI=
Subject key identifier: 04:25:59:E1:06:F5:23:5B:F2:EF:A8:DA:14:93:4D:56:B1:00:35:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01317E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58EFA326F43011EF9BD8B257762E951A.roa
Signing time: Wed 26 Feb 2025 10:56:36 +0000
ROA not before: Wed 26 Feb 2025 10:56:32 +0000
ROA not after: Thu 19 Feb 2026 10:56:32 +0000
asID: 984
IP address blocks: 156.230.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 16 Apr 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78206 (0x1317e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 10:56:32 2025 GMT
Not After : Feb 19 10:56:32 2026 GMT
Subject: CN=67bef364-04b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9e:ea:26:ab:87:60:92:dc:9a:cc:2a:33:a6:
85:3b:96:0c:5a:86:6f:e9:00:20:35:40:f2:ec:6f:
a0:3a:12:81:51:d4:85:05:52:f3:c6:0e:f4:e5:0b:
a4:52:61:03:bc:be:3c:ad:88:a1:0c:38:1d:d5:88:
35:a2:ca:3e:4f:f3:a0:51:79:9b:61:b6:b8:f5:6f:
76:ae:ec:d7:95:28:8b:c1:7a:7c:b1:da:1c:4c:53:
1c:9b:42:56:c1:c5:7b:71:93:cc:29:31:f9:6c:52:
33:34:42:fb:75:f7:fd:48:e2:54:74:76:80:cc:38:
16:e2:68:62:36:d4:24:94:c6:46:25:71:83:35:b1:
8d:4b:1e:21:5b:98:18:3e:28:c2:01:fa:23:bf:2d:
0a:4e:20:05:69:28:19:83:e9:96:1b:dd:90:35:7f:
f5:e9:82:ff:9d:27:96:b1:6a:16:bb:ab:94:bd:f7:
03:eb:c2:50:00:a3:6d:60:30:f6:e7:2a:4a:58:aa:
e0:fa:df:7b:87:c2:5d:ef:2b:17:b9:fa:94:18:34:
17:c2:7f:e9:6f:4f:1d:58:04:2c:67:21:1b:52:a1:
b1:dc:8c:ad:3f:96:9e:b1:a4:0f:dc:5a:ff:af:2d:
24:e2:b9:47:f7:a5:b1:11:74:35:4f:44:42:58:51:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:59:E1:06:F5:23:5B:F2:EF:A8:DA:14:93:4D:56:B1:00:35:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58EFA326F43011EF9BD8B257762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.181.0/24
Signature Algorithm: sha256WithRSAEncryption
18:84:4a:42:61:67:80:a7:71:c9:c2:16:00:71:f2:6f:72:c4:
22:b8:c3:c1:f1:f6:8e:65:96:27:52:af:6a:6a:50:2e:ad:7a:
c9:e6:28:24:16:1d:e2:67:ec:60:d6:b0:5c:2f:9c:76:06:ed:
4a:1f:f7:cf:2b:46:12:74:c8:c7:f6:6c:25:af:fa:8c:eb:d1:
5a:ca:d8:87:75:9f:6c:46:8b:7f:c5:9f:f5:2b:06:0d:42:91:
0f:f8:08:57:3c:ef:d3:3e:47:b3:be:25:00:4a:8f:df:a7:39:
28:c1:29:41:24:fb:aa:98:b6:fd:23:af:9c:4d:ea:32:23:69:
0c:70:6e:49:00:65:eb:1d:8b:fd:b2:bd:e2:2c:bb:c8:46:b3:
3b:18:85:ac:b0:57:10:6e:c8:e7:6b:5a:59:f3:69:e9:5b:9f:
cf:b8:cb:bb:a6:81:ec:16:10:f5:f5:af:23:7b:ef:f7:c4:1c:
28:8f:e0:eb:a2:2e:b5:49:0f:c2:a4:2e:17:50:51:43:c2:16:
24:d9:b3:5c:bf:2b:31:d2:50:ee:b8:b2:78:fc:77:14:72:86:
46:14:90:76:c9:7f:62:69:a1:13:3e:ed:f9:5d:da:5e:0e:ec:
0a:d0:cf:bb:df:78:5b:dd:a7:6a:c8:dd:84:e9:5a:aa:16:84:
34:9d:5c:85
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATF+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTA1NjMyWhcNMjYwMjE5MTA1NjMyWjAYMRYw
FAYDVQQDEw02N2JlZjM2NC0wNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx57qJquHYJLcmswqM6aFO5YMWoZv6QAgNUDy7G+gOhKBUdSFBVLzxg70
5QukUmEDvL48rYihDDgd1Yg1oso+T/OgUXmbYba49W92ruzXlSiLwXp8sdocTFMc
m0JWwcV7cZPMKTH5bFIzNEL7dff9SOJUdHaAzDgW4mhiNtQklMZGJXGDNbGNSx4h
W5gYPijCAfojvy0KTiAFaSgZg+mWG92QNX/16YL/nSeWsWoWu6uUvfcD68JQAKNt
YDD25ypKWKrg+t97h8Jd7ysXufqUGDQXwn/pb08dWAQsZyEbUqGx3IytP5aesaQP
3Fr/ry0k4rlH96WxEXQ1T0RCWFEDmQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAQl
WeEG9SNb8u+o2hSTTVaxADW/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OEVGQTMyNkY0MzAxMUVGOUJEOEIyNTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOa1MA0GCSqGSIb3DQEBCwUA
A4IBAQAYhEpCYWeAp3HJwhYAcfJvcsQiuMPB8faOZZYnUq9qalAurXrJ5igkFh3i
Z+xg1rBcL5x2Bu1KH/fPK0YSdMjH9mwlr/qM69FaytiHdZ9sRot/xZ/1KwYNQpEP
+AhXPO/TPkezviUASo/fpzkowSlBJPuqmLb9I6+cTeoyI2kMcG5JAGXrHYv9sr3i
LLvIRrM7GIWssFcQbsjna1pZ82npW5/PuMu7poHsFhD19a8je+/3xBwoj+Droi61
SQ/CpC4XUFFDwhYk2bNcvysx0lDuuLJ4/HcUcoZGFJB2yX9iaaETPu35XdpeDuwK
0M+733hb3adqyN2E6VqqFoQ0nVyF
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:36 2025 by rpki-client