Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38768A4FE4C11EFBDA7E884762E951A.roa
File: E38768A4FE4C11EFBDA7E884762E951A.roa (raw, json)
Hash identifier: lOcjN+QQSE56ysFGpKXiyV3ES2PwkRw1B+w266ZbFVg=
Subject key identifier: 17:EE:F8:67:F1:5E:C2:CC:AE:7D:4D:B4:0D:29:5B:8A:50:AA:0F:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0144D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38768A4FE4C11EFBDA7E884762E951A.roa
Signing time: Tue 11 Mar 2025 07:46:06 +0000
ROA not before: Tue 11 Mar 2025 07:46:02 +0000
ROA not after: Mon 21 Apr 2025 07:46:02 +0000
asID: 51809
IP address blocks: 156.233.128.0/20 maxlen: 24
156.233.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83161 (0x144d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 11 07:46:02 2025 GMT
Not After : Apr 21 07:46:02 2025 GMT
Subject: CN=67cfea3e-83c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:aa:1f:89:f4:e1:f9:be:6e:aa:a9:5e:87:
ed:62:c5:ac:94:6d:75:90:62:91:8a:3b:c8:21:5a:
dd:ce:e7:b5:3c:75:a9:d4:cd:3d:22:10:47:ff:f8:
3b:a2:c8:34:90:ba:18:43:b0:6e:fc:c6:f9:ee:fd:
be:23:51:92:55:65:c2:17:f6:db:41:2a:e9:03:d5:
da:d6:a3:4d:a6:d4:f5:a2:9f:33:ca:0e:c0:72:c6:
2b:b2:6b:82:69:a7:a4:85:3f:33:89:b6:50:3d:82:
3d:42:77:25:49:1a:fb:3d:b5:d5:06:d6:97:ce:f7:
fe:ef:8f:d4:58:60:99:1c:ef:95:57:f9:a2:e8:cc:
81:b8:a3:25:54:bb:bb:97:ca:12:22:b8:05:4c:3a:
97:17:eb:b3:f7:b5:d2:28:6f:d0:c2:ed:67:a6:02:
9e:8c:c2:3c:e3:f9:ce:9a:b8:38:1a:e9:75:79:76:
02:87:05:c1:d8:ab:33:cc:9e:aa:6b:27:6f:8e:cd:
b3:6b:36:53:04:a0:c7:dd:c6:fc:bc:f1:09:3c:fb:
8f:19:09:3e:86:75:04:89:26:6f:38:1a:e8:17:0a:
37:3d:6b:a7:2b:17:ab:7e:9e:fe:7e:09:8d:d4:27:
35:f9:92:4a:aa:5f:89:89:34:bd:f7:e5:2d:25:1b:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:F8:67:F1:5E:C2:CC:AE:7D:4D:B4:0D:29:5B:8A:50:AA:0F:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E38768A4FE4C11EFBDA7E884762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.128.0-156.233.151.255
Signature Algorithm: sha256WithRSAEncryption
45:0a:71:ad:e3:00:92:12:74:2f:35:ad:aa:3f:db:d7:83:1a:
87:f8:59:f2:cb:7c:d5:8d:9c:c6:40:31:d2:07:20:05:f6:3c:
33:97:1c:62:32:76:a0:7d:2e:e3:4a:f4:62:fa:6d:e1:e4:ce:
f7:7d:ff:0d:4a:b6:6c:17:98:90:2b:dc:92:df:fc:40:c0:d7:
e2:a8:04:63:33:26:61:d5:30:8b:7f:ec:27:f6:54:ef:05:ba:
3d:d4:f0:5e:9e:63:f9:74:8f:96:bf:9b:95:81:d9:19:27:b2:
29:a3:4e:84:72:a1:c6:d8:36:17:56:2d:94:0f:e2:65:3b:e4:
b3:3b:97:33:6c:11:c1:19:6d:82:1c:67:4d:a1:2c:89:61:3c:
1d:de:41:a5:8d:14:97:4a:46:3b:9b:fa:7e:b2:4b:b3:09:7d:
35:2c:73:3f:63:87:6e:0b:aa:5b:e1:7b:76:c8:00:0c:2d:87:
e0:51:d3:f1:4e:a9:b8:e4:15:9a:70:13:60:e7:03:26:f5:82:
c6:c6:2e:d5:c0:a0:76:c5:18:e9:f1:be:90:44:94:65:f6:68:
78:03:b3:69:8b:5b:48:0d:f3:d7:ba:8d:b6:43:38:0d:da:48:
83:56:fa:25:fe:0b:7a:77:8a:83:e8:a0:9f:e3:e1:53:92:70:
21:e0:e1:9b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUTZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzExMDc0NjAyWhcNMjUwNDIxMDc0NjAyWjAYMRYw
FAYDVQQDEw02N2NmZWEzZS04M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtSqqH4n04fm+bqqpXoftYsWslG11kGKRijvIIVrdzue1PHWp1M09IhBH
//g7osg0kLoYQ7Bu/Mb57v2+I1GSVWXCF/bbQSrpA9Xa1qNNptT1op8zyg7AcsYr
smuCaaekhT8zibZQPYI9QnclSRr7PbXVBtaXzvf+74/UWGCZHO+VV/mi6MyBuKMl
VLu7l8oSIrgFTDqXF+uz97XSKG/Qwu1npgKejMI84/nOmrg4Gul1eXYChwXB2Ksz
zJ6qaydvjs2zazZTBKDH3cb8vPEJPPuPGQk+hnUEiSZvOBroFwo3PWunKxerfp7+
fgmN1Cc1+ZJKql+JiTS99+UtJRv3rwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBfu
+GfxXsLMrn1NtA0pW4pQqg+2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMzg3NjhBNEZFNEMxMUVGQkRBN0U4ODQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec6YADBAOc6ZAwDQYJKoZI
hvcNAQELBQADggEBAEUKca3jAJISdC81rao/29eDGof4WfLLfNWNnMZAMdIHIAX2
PDOXHGIydqB9LuNK9GL6beHkzvd9/w1KtmwXmJAr3JLf/EDA1+KoBGMzJmHVMIt/
7Cf2VO8Fuj3U8F6eY/l0j5a/m5WB2RknsimjToRyocbYNhdWLZQP4mU75LM7lzNs
EcEZbYIcZ02hLIlhPB3eQaWNFJdKRjub+n6yS7MJfTUscz9jh24Lqlvhe3bIAAwt
h+BR0/FOqbjkFZpwE2DnAyb1gsbGLtXAoHbFGOnxvpBElGX2aHgDs2mLW0gN89e6
jbZDOA3aSINW+iX+C3p3ioPooJ/j4VOScCHg4Zs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:11 2025 by rpki-client