Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA9DA5C34B611F090929CA1DAE4EC9C.roa
File: 5BA9DA5C34B611F090929CA1DAE4EC9C.roa (raw, json)
Hash identifier: nObeVhziXTWE0uWu4CVqdA7pQ1Bph41+xl6S40vwQjk=
Subject key identifier: E4:52:9B:7A:C1:30:BC:35:B7:14:46:E1:5E:BB:0E:B5:0E:FC:0B:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0155C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA9DA5C34B611F090929CA1DAE4EC9C.roa
Signing time: Mon 19 May 2025 13:37:08 +0000
ROA not before: Mon 19 May 2025 13:37:03 +0000
ROA not after: Wed 18 Jun 2025 13:37:03 +0000
asID: 54801
IP address blocks: 156.226.208.0/23 maxlen: 24
156.233.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87491 (0x155c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 13:37:03 2025 GMT
Not After : Jun 18 13:37:03 2025 GMT
Subject: CN=682b3404-64d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:2c:4f:95:4d:0c:85:62:05:07:5b:22:8e:
4c:da:66:6c:82:21:44:cc:11:36:26:b0:fa:b1:1b:
a9:16:aa:2f:de:a3:74:77:3a:1d:ed:b2:43:27:b5:
27:75:d4:37:67:77:59:4b:4c:ef:72:5d:db:32:cf:
13:aa:7b:4e:12:8f:97:c9:97:d9:57:21:a3:82:ac:
59:8d:2a:31:9d:a1:08:d4:c1:52:f9:01:91:dd:19:
23:f6:10:41:ea:ea:15:6f:2d:5a:b9:aa:78:f7:e4:
80:4f:69:aa:59:9d:a9:c3:89:d2:dd:fd:62:e3:52:
5c:ae:99:97:f0:09:7b:38:2e:fc:51:87:35:a6:43:
28:7e:f0:ec:8f:de:b8:0a:25:31:d3:de:fe:6f:a9:
c1:fa:6c:e9:d0:ff:01:22:a8:c3:22:3c:ae:13:c1:
c6:8c:ac:80:8b:95:46:cc:f2:f0:d6:e8:2e:42:3e:
a6:a5:ee:14:f3:0b:66:33:2e:d0:e5:b4:e1:35:99:
ae:3a:7d:24:ae:a6:8a:1a:9b:4e:b6:f4:21:d9:c3:
49:26:18:13:33:dc:60:95:46:6f:74:da:7b:38:d5:
4a:8e:65:d6:9c:d3:04:0c:c0:c3:bd:dc:a9:fc:94:
47:67:a6:8b:68:7e:57:bd:36:b4:f1:6c:bd:f2:85:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:9B:7A:C1:30:BC:35:B7:14:46:E1:5E:BB:0E:B5:0E:FC:0B:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA9DA5C34B611F090929CA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.208.0/23
156.233.206.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b2:50:57:e5:b9:65:41:de:95:8e:92:ed:a3:fa:6a:a8:a3:
16:5c:ca:ee:64:29:05:ce:7e:b0:53:f7:97:67:5c:73:bc:a1:
8d:d7:1d:98:bf:32:3c:fb:44:81:13:50:69:b0:7a:b8:0c:2b:
73:55:88:03:19:13:28:1e:cd:76:d4:bf:59:7f:78:61:18:ea:
a3:bf:12:0d:c0:b8:0f:70:4e:83:b6:fc:b7:b8:08:f8:ef:a2:
77:d9:9e:a5:f3:89:d0:d9:c3:77:0d:73:0e:93:e2:27:2a:7d:
fa:9d:10:92:9b:e3:df:16:2d:93:e5:f2:86:05:d7:18:fc:d6:
0b:22:ec:68:45:6f:ac:7a:19:25:ee:a5:53:cf:a1:6d:a0:63:
19:93:3a:6a:7f:2c:3c:98:ca:8b:82:d9:70:1d:c8:7e:ee:9f:
63:d7:67:e8:9c:09:68:87:2f:b0:08:38:2d:74:24:f2:36:61:
91:ec:ea:9d:a1:42:cc:97:33:0f:b5:4f:1a:2a:56:17:e9:8b:
dc:ae:a6:2f:30:66:78:7b:ae:49:4e:cd:ea:61:b3:d6:70:fb:
0c:ce:31:15:47:87:34:dc:8a:e6:30:da:59:0b:aa:41:0e:ec:
b2:8c:f6:8e:9a:91:7c:39:32:93:9f:24:6f:ea:90:c8:ee:a1:
c0:a0:0f:96
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAVXDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTE5MTMzNzAzWhcNMjUwNjE4MTMzNzAzWjAYMRYw
FAYDVQQDEw02ODJiMzQwNC02NGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvMssT5VNDIViBQdbIo5M2mZsgiFEzBE2JrD6sRupFqov3qN0dzod7bJD
J7UnddQ3Z3dZS0zvcl3bMs8TqntOEo+XyZfZVyGjgqxZjSoxnaEI1MFS+QGR3Rkj
9hBB6uoVby1auap49+SAT2mqWZ2pw4nS3f1i41JcrpmX8Al7OC78UYc1pkMofvDs
j964CiUx097+b6nB+mzp0P8BIqjDIjyuE8HGjKyAi5VGzPLw1uguQj6mpe4U8wtm
My7Q5bThNZmuOn0krqaKGptOtvQh2cNJJhgTM9xglUZvdNp7ONVKjmXWnNMEDMDD
vdyp/JRHZ6aLaH5XvTa08Wy98oVVbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORS
m3rBMLw1txRG4V67DrUO/AtNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81QkE5REE1QzM0QjYxMUYwOTA5MjlDQTFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnOLQAwQBnOnOMA0GCSqGSIb3
DQEBCwUAA4IBAQAkslBX5bllQd6VjpLto/pqqKMWXMruZCkFzn6wU/eXZ1xzvKGN
1x2YvzI8+0SBE1BpsHq4DCtzVYgDGRMoHs121L9Zf3hhGOqjvxINwLgPcE6Dtvy3
uAj476J32Z6l84nQ2cN3DXMOk+InKn36nRCSm+PfFi2T5fKGBdcY/NYLIuxoRW+s
ehkl7qVTz6FtoGMZkzpqfyw8mMqLgtlwHch+7p9j12fonAlohy+wCDgtdCTyNmGR
7OqdoULMlzMPtU8aKlYX6YvcrqYvMGZ4e65JTs3qYbPWcPsMzjEVR4c03IrmMNpZ
C6pBDuyyjPaOmpF8OTKTnyRv6pDI7qHAoA+W
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:23 2025 by rpki-client