Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF4B66343E3211F0A99F04C3DAE4EC9C.roa
File: DF4B66343E3211F0A99F04C3DAE4EC9C.roa (raw, json)
Hash identifier: jIg/ALz6ThJ6w0sILXuZYCpgMy2JcCEXgayXsDf+WRM=
Subject key identifier: 30:D9:DC:C0:D6:36:F1:01:D6:AD:F0:05:88:CF:6D:FB:8F:56:39:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015934
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF4B66343E3211F0A99F04C3DAE4EC9C.roa
Signing time: Sat 31 May 2025 15:21:07 +0000
ROA not before: Sat 31 May 2025 15:21:02 +0000
ROA not after: Thu 10 Jul 2025 15:21:02 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Jun 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88372 (0x15934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 15:21:02 2025 GMT
Not After : Jul 10 15:21:02 2025 GMT
Subject: CN=683b1e63-4904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:da:4d:30:5f:00:d6:99:77:1e:ec:77:bc:
19:a7:ea:75:97:7c:d6:bb:07:12:c5:64:19:d8:4d:
9e:68:9a:ce:ee:a1:85:8a:56:ce:e8:29:8d:f9:b5:
2e:d5:d1:e8:30:07:7e:9e:ce:70:31:59:37:ef:7a:
8e:24:74:7d:08:af:5d:00:55:90:65:89:0d:47:10:
6a:6c:a4:fa:5b:f6:7b:7d:5c:c4:5e:71:63:7b:53:
08:cf:7c:6e:27:b0:f1:61:c3:c5:41:a0:b3:88:bd:
6f:09:cf:eb:34:be:a7:2f:5c:61:28:84:6d:f2:b9:
01:75:b6:65:85:ad:b5:89:b1:19:e8:c6:c3:ba:4f:
19:12:14:f8:3e:75:6e:98:9c:03:d3:47:90:df:59:
af:53:cf:9c:2a:29:15:46:0d:23:4f:27:c4:e6:2b:
86:65:3b:88:fe:8e:ab:e8:42:2d:50:39:06:a6:3f:
b3:4a:4e:57:74:f6:87:3c:75:5f:a5:d1:43:da:15:
a6:c1:99:b1:28:cd:1c:e1:7e:3f:a6:76:6d:d2:c0:
3e:87:1b:8f:b7:df:f9:92:d2:fc:b5:15:3f:c9:11:
d7:8f:4d:ab:9d:b1:5f:cb:b2:c4:9a:8e:18:ba:3d:
03:ac:78:53:6e:4c:5e:5f:2a:ae:4b:39:9b:8f:5b:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:DC:C0:D6:36:F1:01:D6:AD:F0:05:88:CF:6D:FB:8F:56:39:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF4B66343E3211F0A99F04C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:07:a4:cc:35:90:c6:d5:fb:fc:28:10:4d:6d:1d:26:43:b9:
14:b8:7e:0d:b9:a3:cb:7f:ae:9f:45:c9:a5:7a:4d:7c:ba:f8:
c3:f6:6b:95:9b:f5:ae:05:d2:23:8d:95:69:e3:51:f6:55:e8:
ca:43:57:a3:33:76:72:76:e4:ef:aa:7f:48:5f:93:49:b0:c6:
9d:e6:5a:1c:7f:5c:5c:ef:59:b3:14:63:27:88:d8:4e:b6:88:
7b:8a:d3:83:19:cc:d5:20:fe:f2:e2:7b:9c:5c:04:fb:cd:a4:
93:fa:b4:6f:1c:d3:a4:82:f3:1f:2c:0c:e4:bf:e7:9c:e0:e6:
fd:6f:4f:66:b8:f5:9c:00:77:6f:06:2c:78:1e:e4:66:56:ef:
a7:ba:09:54:d0:bc:4e:da:f2:a7:dd:61:01:aa:54:a3:24:22:
0b:a7:e6:43:10:b1:d5:7b:07:4f:74:a8:fd:e0:2b:7c:e9:50:
29:0c:3a:17:f3:71:cc:42:97:07:2a:2d:5b:25:51:f1:e9:68:
1d:84:30:53:6b:bd:36:72:67:09:44:e5:ee:07:ec:b2:02:ff:
37:05:b1:01:33:6e:61:18:2b:5c:7a:98:27:1a:a2:d2:0e:ac:
a6:10:c8:15:72:b7:74:80:94:68:f7:be:90:2d:9c:8b:ce:85:
fa:e9:18:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAVk0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTMxMTUyMTAyWhcNMjUwNzEwMTUyMTAyWjAYMRYw
FAYDVQQDEw02ODNiMWU2My00OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA24LaTTBfANaZdx7sd7wZp+p1l3zWuwcSxWQZ2E2eaJrO7qGFilbO6CmN
+bUu1dHoMAd+ns5wMVk373qOJHR9CK9dAFWQZYkNRxBqbKT6W/Z7fVzEXnFje1MI
z3xuJ7DxYcPFQaCziL1vCc/rNL6nL1xhKIRt8rkBdbZlha21ibEZ6MbDuk8ZEhT4
PnVumJwD00eQ31mvU8+cKikVRg0jTyfE5iuGZTuI/o6r6EItUDkGpj+zSk5XdPaH
PHVfpdFD2hWmwZmxKM0c4X4/pnZt0sA+hxuPt9/5ktL8tRU/yRHXj02rnbFfy7LE
mo4Yuj0DrHhTbkxeXyquSzmbj1u+sQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDDZ
3MDWNvEB1q3wBYjPbfuPVjmpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERjRCNjYzNDNFMzIxMUYwQTk5RjA0QzNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQCKB6TMNZDG1fv8KBBNbR0mQ7kUuH4NuaPLf66fRcmlek18uvjD9muVm/Wu
BdIjjZVp41H2VejKQ1ejM3ZyduTvqn9IX5NJsMad5locf1xc71mzFGMniNhOtoh7
itODGczVIP7y4nucXAT7zaST+rRvHNOkgvMfLAzkv+ec4Ob9b09muPWcAHdvBix4
HuRmVu+nuglU0LxO2vKn3WEBqlSjJCILp+ZDELHVewdPdKj94Ct86VApDDoX83HM
QpcHKi1bJVHx6WgdhDBTa702cmcJROXuB+yyAv83BbEBM25hGCtcepgnGqLSDqym
EMgVcrd0gJRo976QLZyLzoX66Rgh
-----END CERTIFICATE-----
Generated at Tue Jun 3 08:33:17 2025 by rpki-client