Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1EFCDC0CB011F0A383E252762E951A.roa
File: CC1EFCDC0CB011F0A383E252762E951A.roa (raw, json)
Hash identifier: wBsXJXl8Ogw0YQu6eeZQ38T1xUOn91bsXCAHyMuf7zs=
Subject key identifier: 43:A2:83:61:35:96:82:F2:CD:28:7B:54:34:8E:CE:C1:8C:22:BB:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014894
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1EFCDC0CB011F0A383E252762E951A.roa
Signing time: Sat 29 Mar 2025 15:16:33 +0000
ROA not before: Sat 29 Mar 2025 15:16:29 +0000
ROA not after: Sun 06 Apr 2025 15:16:29 +0000
asID: 138152
IP address blocks: 156.227.232.0/21 maxlen: 24
156.232.6.0/23 maxlen: 24
156.232.9.0/24 maxlen: 24
156.232.10.0/24 maxlen: 24
156.232.11.0/24 maxlen: 24
156.232.13.0/24 maxlen: 24
156.236.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 15:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84116 (0x14894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 29 15:16:29 2025 GMT
Not After : Apr 6 15:16:29 2025 GMT
Subject: CN=67e80ed1-3cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:69:a5:1c:0c:6c:8b:47:13:76:e6:41:63:
e4:34:90:a4:ba:d5:ae:2a:3f:25:56:2f:72:50:44:
64:87:7f:1c:e9:a2:d8:87:26:f1:6a:68:03:33:fb:
27:1b:53:8a:a8:be:22:99:4c:6b:e5:82:11:31:f4:
f2:f0:8a:6a:d3:45:89:d9:20:d9:bf:eb:6c:df:b8:
eb:7c:2d:7d:56:0b:5d:76:72:a7:c9:7f:56:8a:15:
af:a6:78:62:71:0e:56:b2:26:22:cc:30:1f:3c:a0:
67:50:30:07:e4:c6:03:a8:d4:34:15:26:07:d2:d2:
8f:76:5e:d9:2e:11:51:3b:9a:66:0e:ad:dd:72:2d:
68:c6:bf:84:d4:ce:60:af:ec:04:e4:7e:7f:64:b4:
70:5d:8a:3c:58:73:48:0f:c6:18:9f:f0:b0:3b:ff:
38:07:76:7d:c1:e8:89:60:75:70:5a:0f:b2:1d:e4:
ea:dd:95:aa:f5:db:62:80:31:ab:54:e1:2c:1a:54:
14:2d:9f:f4:6c:96:71:78:26:f7:45:7a:82:a7:65:
fe:ac:2d:88:41:ac:13:9c:02:26:00:d2:6b:49:77:
c1:29:fb:e9:63:82:f5:db:e5:fc:6a:08:8d:ff:e0:
e2:8f:c3:5f:7b:09:e5:a2:89:5f:0c:7a:ca:35:49:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:83:61:35:96:82:F2:CD:28:7B:54:34:8E:CE:C1:8C:22:BB:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1EFCDC0CB011F0A383E252762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.232.0/21
156.232.6.0/23
156.232.9.0-156.232.11.255
156.232.13.0/24
156.236.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:15:e8:d9:1b:f0:b7:19:c8:c7:3d:c0:99:66:a5:d7:3b:36:
b7:cb:15:09:80:15:88:3e:36:5d:1b:c9:72:94:bb:eb:8f:ed:
c5:dd:d7:dd:a7:ec:cf:fe:81:40:24:21:49:35:cd:31:e9:31:
e7:03:9c:f0:fa:a5:a4:5c:c6:86:1a:43:8a:98:3f:e3:4d:d4:
84:73:b8:99:5e:00:70:bf:9a:0a:3e:b0:5b:52:24:b4:99:18:
ff:2c:05:2d:65:f5:44:ac:a1:7c:18:0e:0f:49:ea:e2:f7:4d:
7f:3d:e1:b2:b4:fb:11:d0:e6:65:51:7c:a9:a2:16:42:3e:c7:
bd:42:dc:a0:93:43:3e:e7:b0:33:d5:22:d9:0c:dd:63:e2:7e:
6b:f9:c8:2c:c1:fe:ca:38:3e:94:75:54:37:2c:af:e2:cb:a0:
2d:0a:79:8d:21:70:f8:05:38:e1:82:dc:cd:36:b2:54:8d:87:
2a:c3:ce:f4:60:17:03:de:b6:b8:43:4e:b6:67:78:32:59:bd:
10:77:94:63:00:d6:ad:d4:06:32:6e:e7:e5:d4:ee:57:d3:5a:
7c:44:f5:36:7f:be:5b:d8:b5:c4:ea:ac:54:48:ce:f9:3b:d1:
82:73:4b:8c:16:0a:34:00:12:81:e4:b7:7a:54:f1:36:29:f8:
3e:d0:cb:46
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAUiUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzI5MTUxNjI5WhcNMjUwNDA2MTUxNjI5WjAYMRYw
FAYDVQQDEw02N2U4MGVkMS0zY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtwlppRwMbItHE3bmQWPkNJCkutWuKj8lVi9yUERkh38c6aLYhybxamgD
M/snG1OKqL4imUxr5YIRMfTy8Ipq00WJ2SDZv+ts37jrfC19VgtddnKnyX9WihWv
pnhicQ5WsiYizDAfPKBnUDAH5MYDqNQ0FSYH0tKPdl7ZLhFRO5pmDq3dci1oxr+E
1M5gr+wE5H5/ZLRwXYo8WHNID8YYn/CwO/84B3Z9weiJYHVwWg+yHeTq3ZWq9dti
gDGrVOEsGlQULZ/0bJZxeCb3RXqCp2X+rC2IQawTnAImANJrSXfBKfvpY4L12+X8
agiN/+Dij8NfewnloolfDHrKNUlkNwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFEOi
g2E1loLyzSh7VDSOzsGMIrv6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQzFFRkNEQzBDQjAxMUYwQTM4M0UyNTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDnOPoAwQBnOgGMAwDBACc6AkD
BAKc6AgDBACc6A0DBAKc7EgwDQYJKoZIhvcNAQELBQADggEBABYV6Nkb8LcZyMc9
wJlmpdc7NrfLFQmAFYg+Nl0byXKUu+uP7cXd192n7M/+gUAkIUk1zTHpMecDnPD6
paRcxoYaQ4qYP+NN1IRzuJleAHC/mgo+sFtSJLSZGP8sBS1l9USsoXwYDg9J6uL3
TX894bK0+xHQ5mVRfKmiFkI+x71C3KCTQz7nsDPVItkM3WPifmv5yCzB/so4PpR1
VDcsr+LLoC0KeY0hcPgFOOGC3M02slSNhyrDzvRgFwPetrhDTrZneDJZvRB3lGMA
1q3UBjJu5+XU7lfTWnxE9TZ/vlvYtcTqrFRIzvk70YJzS4wWCjQAEoHkt3pU8TYp
+D7Qy0Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:50 2025 by rpki-client