Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/971232760B1F11F0882C379E762E951A.roa
File: 971232760B1F11F0882C379E762E951A.roa (raw, json)
Hash identifier: 0O5u9sgJ8yPOhQYMHI5i+hqmfZsnTteMIzAVy2JViKE=
Subject key identifier: B5:6C:44:CD:B4:52:AE:7F:C3:4F:AB:62:EE:C6:3A:64:D7:CF:ED:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01486F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/971232760B1F11F0882C379E762E951A.roa
Signing time: Thu 27 Mar 2025 15:24:35 +0000
ROA not before: Thu 27 Mar 2025 15:24:31 +0000
ROA not after: Wed 16 Apr 2025 15:24:31 +0000
asID: 1938
IP address blocks: 156.225.132.0/22 maxlen: 24
156.225.136.0/21 maxlen: 24
156.225.144.0/20 maxlen: 24
156.226.24.0/21 maxlen: 24
156.244.64.0/18 maxlen: 24
156.250.4.0/22 maxlen: 24
156.250.8.0/21 maxlen: 24
156.250.16.0/20 maxlen: 24
156.250.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84079 (0x1486f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 27 15:24:31 2025 GMT
Not After : Apr 16 15:24:31 2025 GMT
Subject: CN=67e56db3-bc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:49:c9:6b:fb:6d:2b:32:9d:9e:eb:96:fe:
d2:59:9b:41:e0:08:88:7d:5e:99:dd:59:ae:9b:11:
12:89:38:a6:59:1d:70:96:3f:5f:4e:5b:56:cb:f8:
3b:b9:c8:aa:07:5c:aa:49:dc:f2:25:9d:4b:4e:2b:
30:f2:49:77:0b:8f:4f:62:e2:87:ae:90:af:dd:76:
2e:5a:0a:2d:8b:56:17:ad:3f:56:a3:d7:98:23:dd:
bc:34:66:6b:bb:67:52:69:cc:7f:20:9b:0c:85:e7:
f9:97:d9:4d:c2:14:43:54:3f:94:62:7a:29:d6:8c:
13:0c:6a:0e:7a:30:55:27:8f:91:f2:d0:e0:63:30:
5f:f7:96:3d:06:62:70:a2:ee:f4:25:a8:e1:dc:be:
bf:88:b1:2b:93:51:91:11:b0:01:02:e8:d7:ad:af:
ec:ef:8e:5e:bb:af:6b:f6:f1:52:2c:d2:6e:3a:11:
4a:e7:e3:e1:78:51:a8:60:41:80:0d:c2:2f:77:f6:
83:3b:b8:f6:11:3c:ae:f1:ab:7d:e3:2d:72:c5:df:
fa:46:11:e2:e5:60:45:95:5f:1f:a3:de:43:3e:a6:
d2:23:ee:26:50:96:8d:cd:c7:5c:ea:33:d8:2b:2a:
63:35:6b:11:07:b3:52:d8:8e:03:61:90:4b:c1:89:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6C:44:CD:B4:52:AE:7F:C3:4F:AB:62:EE:C6:3A:64:D7:CF:ED:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/971232760B1F11F0882C379E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.132.0-156.225.159.255
156.226.24.0/21
156.244.64.0/18
156.250.4.0-156.250.31.255
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:f4:25:c9:79:7c:8b:42:d2:97:89:cb:ea:65:9c:33:57:6c:
1e:78:e6:a5:85:aa:08:cb:57:f5:3d:b4:88:7c:60:4f:73:88:
94:54:4a:d4:cb:ba:49:a4:ee:b3:fa:22:1a:a6:36:64:a5:21:
e5:9a:8b:3d:a5:90:eb:c0:b4:65:e8:97:73:b7:21:a3:d3:68:
e5:6e:a8:9b:0a:b6:fa:05:69:6c:8a:84:c8:1c:f0:f2:a6:12:
56:00:68:58:87:6e:28:0c:5b:93:b4:d6:2b:5a:f1:6a:2d:5b:
87:04:01:17:ac:c9:90:dd:1c:5a:8c:a9:d8:81:54:61:01:bf:
92:da:d7:06:1f:7b:91:7b:00:84:4e:e4:3e:d5:82:df:b3:6a:
c3:c5:81:d2:d2:af:40:72:e4:99:0d:08:a4:98:35:4b:8d:5c:
03:38:69:4e:25:f6:47:a3:24:5f:aa:38:91:f4:b0:e6:13:8a:
ae:bd:fc:8e:88:f1:d4:6f:9c:b0:99:60:7e:8e:b5:d5:5b:ba:
1b:a8:47:82:3d:e2:6d:13:54:1e:d4:38:03:03:69:a9:53:c5:
a6:14:6c:c2:51:ed:43:bf:0f:e3:c4:47:77:e2:a4:b3:cc:2c:
3a:b0:1b:32:b3:79:8f:f8:e6:3e:66:f2:9c:ad:29:24:e1:9f:
0c:25:ce:51
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAUhvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI3MTUyNDMxWhcNMjUwNDE2MTUyNDMxWjAYMRYw
FAYDVQQDEw02N2U1NmRiMy1iYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArSBJyWv7bSsynZ7rlv7SWZtB4AiIfV6Z3VmumxESiTimWR1wlj9fTltW
y/g7uciqB1yqSdzyJZ1LTisw8kl3C49PYuKHrpCv3XYuWgoti1YXrT9Wo9eYI928
NGZru2dSacx/IJsMhef5l9lNwhRDVD+UYnop1owTDGoOejBVJ4+R8tDgYzBf95Y9
BmJwou70Jajh3L6/iLErk1GREbABAujXra/s745eu69r9vFSLNJuOhFK5+PheFGo
YEGADcIvd/aDO7j2ETyu8at94y1yxd/6RhHi5WBFlV8fo95DPqbSI+4mUJaNzcdc
6jPYKypjNWsRB7NS2I4DYZBLwYmk8wIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFLVs
RM20Uq5/w0+rYu7GOmTXz+1+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzEyMzI3NjBCMUYxMUYwODgyQzM3OUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAKc4YQDBAWc4YADBAOc4hgD
BAac9EAwDAMEApz6BAMEBZz6AAMEBpz6QDANBgkqhkiG9w0BAQsFAAOCAQEAHvQl
yXl8i0LSl4nL6mWcM1dsHnjmpYWqCMtX9T20iHxgT3OIlFRK1Mu6SaTus/oiGqY2
ZKUh5ZqLPaWQ68C0ZeiXc7cho9No5W6omwq2+gVpbIqEyBzw8qYSVgBoWIduKAxb
k7TWK1rxai1bhwQBF6zJkN0cWoyp2IFUYQG/ktrXBh97kXsAhE7kPtWC37Nqw8WB
0tKvQHLkmQ0IpJg1S41cAzhpTiX2R6MkX6o4kfSw5hOKrr38jojx1G+csJlgfo61
1Vu6G6hHgj3ibRNUHtQ4AwNpqVPFphRswlHtQ78P48RHd+Kks8wsOrAbMrN5j/jm
PmbynK0pJOGfDCXOUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:08 2025 by rpki-client