Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99EDF540F44811EFA2549182762E951A.roa
File: 99EDF540F44811EFA2549182762E951A.roa (raw, json)
Hash identifier: mJdFqKqHY9BOtnkziGLycGPLEty5kuEfrPtHMZ/qC1g=
Subject key identifier: 9F:8B:12:02:11:66:90:A2:07:DC:AC:63:BA:3A:B0:CD:68:55:39:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013366
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99EDF540F44811EFA2549182762E951A.roa
Signing time: Wed 26 Feb 2025 13:50:13 +0000
ROA not before: Wed 26 Feb 2025 13:50:09 +0000
ROA not after: Thu 19 Feb 2026 13:50:09 +0000
asID: 984
IP address blocks: 156.231.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78694 (0x13366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 26 13:50:09 2025 GMT
Not After : Feb 19 13:50:09 2026 GMT
Subject: CN=67bf1c15-d856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:ca:ea:db:9d:1c:26:3c:85:f2:99:cb:75:
6d:eb:bd:8e:03:92:f1:a4:5d:a2:9a:9c:d0:cc:9b:
50:65:5f:d0:58:ae:f7:fe:a7:79:9b:af:d8:b6:12:
ad:c1:07:b7:f7:4f:fe:5f:2b:69:b5:93:22:fc:55:
07:5f:3a:6f:00:55:a9:40:43:11:b7:07:58:57:e0:
e3:2c:53:e3:9e:9d:47:bc:d3:77:d7:90:66:44:d3:
35:f7:2b:43:dd:fd:c2:b4:1d:4d:09:b2:a1:bd:af:
39:8c:a7:79:c2:20:e5:cb:35:2b:66:5f:da:6e:8e:
0b:c5:7e:e2:2d:0f:4f:57:5e:ba:8e:2b:de:e2:78:
db:db:70:1f:23:90:da:28:59:42:94:c0:68:b9:93:
10:79:50:c4:db:27:b1:30:c0:9a:f3:74:8d:fe:8d:
a6:57:b2:a6:01:2b:5c:39:c3:e7:1d:55:92:1a:70:
db:f7:2e:a2:85:97:03:d9:f1:9a:11:c2:ac:00:62:
3a:0b:62:1a:54:dd:78:1e:5d:7e:dc:39:c8:85:24:
7d:b1:78:09:2d:5b:cf:fd:d7:38:b9:e1:4d:c8:90:
e6:37:42:27:a5:42:2a:03:9b:d7:46:c5:f9:75:e5:
44:60:26:c8:73:49:37:0e:a6:1d:d5:57:43:e8:88:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:12:02:11:66:90:A2:07:DC:AC:63:BA:3A:B0:CD:68:55:39:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99EDF540F44811EFA2549182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.142.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8a:1a:8d:78:13:ab:0c:4d:ff:70:3f:75:88:d2:3f:23:99:
de:0c:68:51:1a:9b:ff:06:84:45:f9:3c:e9:f5:29:9b:73:d5:
6a:ee:8d:d6:98:4a:2a:eb:ef:d4:28:5e:f7:aa:0d:66:02:f6:
14:32:fc:7d:da:16:d3:a6:2b:0e:fe:33:09:b8:a8:9a:a3:d0:
86:c5:d2:c4:2e:5b:bc:04:f6:f3:5f:68:0a:4b:21:34:78:6b:
f5:a8:29:d4:cf:e8:48:91:a9:2a:02:90:af:e9:3b:cd:29:b0:
79:e0:bd:2f:1c:a7:0c:14:ad:6b:83:6d:c8:cc:db:84:bf:f7:
b4:7c:21:c8:04:51:b4:30:ed:8d:84:88:2c:a9:35:0b:04:cc:
6f:3d:bc:52:e9:5b:af:90:b2:23:9f:45:e2:52:51:00:07:94:
51:2f:d9:b3:6d:c1:ea:ad:5f:aa:63:e9:8f:f7:3a:fe:37:c7:
0c:35:f0:dc:c5:eb:68:3e:4a:a5:64:f2:56:34:c8:84:aa:9c:
8f:c9:2f:8e:05:d3:00:5c:2d:8e:40:29:e7:2f:77:80:8a:c2:
62:1a:b2:3f:62:a6:f4:c8:3b:3e:5e:c9:8f:95:8b:07:51:a8:
f1:e3:af:54:35:61:d1:eb:bd:9d:ec:0b:a6:8e:f0:2d:c3:ca:
0d:03:4a:a5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDATNmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI2MTM1MDA5WhcNMjYwMjE5MTM1MDA5WjAYMRYw
FAYDVQQDEw02N2JmMWMxNS1kODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxW3K6tudHCY8hfKZy3Vt672OA5LxpF2impzQzJtQZV/QWK73/qd5m6/Y
thKtwQe390/+XytptZMi/FUHXzpvAFWpQEMRtwdYV+DjLFPjnp1HvNN315BmRNM1
9ytD3f3CtB1NCbKhva85jKd5wiDlyzUrZl/abo4LxX7iLQ9PV166jive4njb23Af
I5DaKFlClMBouZMQeVDE2yexMMCa83SN/o2mV7KmAStcOcPnHVWSGnDb9y6ihZcD
2fGaEcKsAGI6C2IaVN14Hl1+3DnIhSR9sXgJLVvP/dc4ueFNyJDmN0InpUIqA5vX
RsX5deVEYCbIc0k3DqYd1VdD6Ijg6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ+L
EgIRZpCiB9ysY7o6sM1oVTmZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85OUVERjU0MEY0NDgxMUVGQTI1NDkxODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOeOMA0GCSqGSIb3DQEBCwUA
A4IBAQAHihqNeBOrDE3/cD91iNI/I5neDGhRGpv/BoRF+Tzp9Smbc9Vq7o3WmEoq
6+/UKF73qg1mAvYUMvx92hbTpisO/jMJuKiao9CGxdLELlu8BPbzX2gKSyE0eGv1
qCnUz+hIkakqApCv6TvNKbB54L0vHKcMFK1rg23IzNuEv/e0fCHIBFG0MO2NhIgs
qTULBMxvPbxS6VuvkLIjn0XiUlEAB5RRL9mzbcHqrV+qY+mP9zr+N8cMNfDcxeto
PkqlZPJWNMiEqpyPyS+OBdMAXC2OQCnnL3eAisJiGrI/Yqb0yDs+XsmPlYsHUajx
469UNWHR672d7AumjvAtw8oNA0ql
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:21 2025 by rpki-client