Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5830F2F413F811F0B3991D7B762E951A.roa
File: 5830F2F413F811F0B3991D7B762E951A.roa (raw, json)
Hash identifier: mGo879/26jGVZlKsLy5rhadRxolBE+9mQFPDRlgAWYs=
Subject key identifier: B6:B5:64:9E:53:7B:3A:0A:72:1D:15:51:DB:34:F7:5F:05:24:53:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014AC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5830F2F413F811F0B3991D7B762E951A.roa
Signing time: Mon 07 Apr 2025 21:36:20 +0000
ROA not before: Mon 07 Apr 2025 21:36:16 +0000
ROA not after: Wed 11 Jun 2025 21:36:16 +0000
asID: 203020
IP address blocks: 156.237.64.0/23 maxlen: 24
156.237.66.0/23 maxlen: 24
156.237.68.0/23 maxlen: 24
156.237.70.0/23 maxlen: 24
156.237.72.0/23 maxlen: 24
156.237.76.0/22 maxlen: 24
156.237.80.0/22 maxlen: 24
156.237.84.0/22 maxlen: 24
156.237.88.0/22 maxlen: 24
156.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84676 (0x14ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 21:36:16 2025 GMT
Not After : Jun 11 21:36:16 2025 GMT
Subject: CN=67f44554-fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:e8:e6:93:cd:43:ff:d9:92:69:57:31:8c:
45:5a:b6:d9:ca:61:64:78:f9:6e:00:52:17:a4:e7:
41:c3:15:80:25:7c:46:7c:a5:20:6a:1e:d6:1b:47:
cf:11:b6:a6:d4:93:f9:7d:b7:98:7f:9a:af:3d:6e:
ae:88:b4:25:e0:10:ab:9a:cf:57:60:34:e7:ee:1b:
3a:89:c4:e8:56:8a:59:8e:fd:76:b4:df:4f:e3:39:
60:81:4d:4f:f6:36:4b:90:2e:55:7c:20:c0:ac:2b:
ac:c7:fa:fa:70:fb:de:c9:45:a9:05:9f:14:b0:dd:
70:1e:a5:25:c3:91:60:15:60:9b:31:63:36:f5:b5:
fe:ca:b1:ec:85:1a:95:b6:6d:d0:ce:45:a2:12:84:
3e:e6:74:a2:5d:e3:78:92:80:64:cb:64:9c:a2:cf:
3d:56:fa:0a:c4:38:fb:31:e9:2c:65:23:a2:d8:b7:
f4:d6:56:41:b2:41:f8:86:bd:76:4a:17:52:57:bd:
4e:ba:8d:b9:48:a1:69:9c:fe:a1:3a:60:8d:ef:2b:
d6:e7:f3:a3:b8:fb:d9:8a:9e:2b:0d:4b:0f:ad:12:
a3:5e:ba:ac:91:1d:a7:bc:38:92:12:f1:7c:d1:98:
f0:6d:28:70:b9:6b:ee:82:25:58:ed:86:84:d8:09:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B5:64:9E:53:7B:3A:0A:72:1D:15:51:DB:34:F7:5F:05:24:53:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5830F2F413F811F0B3991D7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.64.0-156.237.73.255
156.237.76.0-156.237.95.255
Signature Algorithm: sha256WithRSAEncryption
a2:5b:4b:68:01:20:4b:b1:4a:10:b6:40:7c:f3:a4:0d:84:19:
a2:40:5d:ef:6f:43:39:74:34:f9:e9:59:60:47:81:e8:55:3b:
48:5a:78:92:f0:cd:43:60:06:2e:28:3c:1a:a7:e1:90:c9:27:
4e:f1:98:82:52:53:f9:29:8d:de:d0:fd:d6:a0:3a:7c:37:f3:
8d:1c:dc:da:9d:b0:5c:73:7e:48:07:84:41:73:5b:e2:ab:3a:
e6:67:db:df:71:5a:b6:56:8f:0e:59:2f:38:39:b6:d4:87:86:
ee:1f:30:ec:15:05:48:09:af:91:32:01:0e:fd:e3:8b:b1:38:
71:3f:75:61:7e:ab:ed:0e:94:eb:68:c7:d5:07:36:4d:9c:b4:
bb:80:bb:a1:39:ac:70:d4:82:77:05:95:12:72:88:05:0c:88:
01:40:81:84:d1:13:d0:0c:fb:31:80:06:21:b9:8e:4e:09:48:
1f:43:9e:ae:a9:74:8c:75:0f:b2:2b:73:40:3f:91:e3:b5:89:
f2:0c:5c:dd:4d:f4:97:09:d4:6e:76:91:76:1f:cb:04:ec:3b:
36:15:cd:96:14:63:39:b9:5f:c1:fb:f5:6b:df:90:14:1d:02:
2b:af:3d:dd:ed:89:c5:8a:7c:1a:b6:19:58:36:bf:3e:68:81:
b4:53:67:51
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAUrEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MjEzNjE2WhcNMjUwNjExMjEzNjE2WjAYMRYw
FAYDVQQDEw02N2Y0NDU1NC1mY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsXXo5pPNQ//ZkmlXMYxFWrbZymFkePluAFIXpOdBwxWAJXxGfKUgah7W
G0fPEbam1JP5fbeYf5qvPW6uiLQl4BCrms9XYDTn7hs6icToVopZjv12tN9P4zlg
gU1P9jZLkC5VfCDArCusx/r6cPveyUWpBZ8UsN1wHqUlw5FgFWCbMWM29bX+yrHs
hRqVtm3QzkWiEoQ+5nSiXeN4koBky2Scos89VvoKxDj7MeksZSOi2Lf01lZBskH4
hr12ShdSV71Ouo25SKFpnP6hOmCN7yvW5/OjuPvZip4rDUsPrRKjXrqskR2nvDiS
EvF80ZjwbShwuWvugiVY7YaE2AkKBQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFLa1
ZJ5TezoKch0VUds0918FJFPRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODMwRjJGNDEzRjgxMUYwQjM5OTFEN0I3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAac7UADBAGc7UgwDAMEApzt
TAMEBZztQDANBgkqhkiG9w0BAQsFAAOCAQEAoltLaAEgS7FKELZAfPOkDYQZokBd
729DOXQ0+elZYEeB6FU7SFp4kvDNQ2AGLig8GqfhkMknTvGYglJT+SmN3tD91qA6
fDfzjRzc2p2wXHN+SAeEQXNb4qs65mfb33FatlaPDlkvODm21IeG7h8w7BUFSAmv
kTIBDv3ji7E4cT91YX6r7Q6U62jH1Qc2TZy0u4C7oTmscNSCdwWVEnKIBQyIAUCB
hNET0Az7MYAGIbmOTglIH0Oerql0jHUPsitzQD+R47WJ8gxc3U30lwnUbnaRdh/L
BOw7NhXNlhRjOblfwfv1a9+QFB0CK6893e2JxYp8GrYZWDa/PmiBtFNnUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:51 2025 by rpki-client