Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BC74E4C1F5811F0B69F43AEDAE4EC9C.roa
File: 6BC74E4C1F5811F0B69F43AEDAE4EC9C.roa (raw, json)
Hash identifier: W791jmZT9t3qvIg3kykGS8gSpsgPF9OEjmM8xo08O4I=
Subject key identifier: 68:DE:ED:FA:4A:71:BF:CB:32:76:BD:AF:83:B3:1A:8E:07:44:7F:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014DFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BC74E4C1F5811F0B69F43AEDAE4EC9C.roa
Signing time: Tue 22 Apr 2025 09:01:48 +0000
ROA not before: Tue 22 Apr 2025 09:01:43 +0000
ROA not after: Sat 31 May 2025 09:01:43 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85498 (0x14dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 09:01:43 2025 GMT
Not After : May 31 09:01:43 2025 GMT
Subject: CN=68075afc-f8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:23:56:c8:2c:c7:7c:f8:6b:27:bd:58:03:
67:f5:0e:33:eb:a3:7d:43:b4:bb:3d:84:e6:3e:d7:
75:c7:88:61:86:53:46:f9:b1:ce:83:82:05:a4:49:
12:66:70:62:42:f1:f2:51:ca:a8:e3:fa:e2:43:3a:
7a:2d:46:d6:3a:a3:bd:d5:db:1e:b6:1d:5e:4b:53:
d9:be:94:98:9e:79:77:00:98:2f:63:b1:c1:ec:04:
db:2a:53:ee:b3:21:b5:1e:8c:f3:0b:1a:7f:ef:7a:
86:3a:d8:04:ce:82:c6:a9:70:f6:a0:b5:3f:9c:39:
bf:86:0e:02:f7:77:a4:6f:af:9b:c9:0e:10:4f:fd:
83:b6:1d:93:cc:03:72:41:3f:3e:24:c8:53:ca:40:
ea:e4:2f:4f:fc:b4:ea:d3:e6:b3:1e:a2:80:f7:28:
7a:d9:9f:4d:43:72:21:9c:7f:4c:69:23:9c:3c:5e:
0c:86:96:28:32:8d:b5:6e:fd:10:31:02:80:82:7e:
c5:7f:f3:79:30:f9:48:c4:e1:82:b7:63:a6:3c:16:
db:04:29:d8:89:dd:5d:0d:6b:06:45:78:de:d8:a4:
bb:b3:46:7c:b2:8e:4f:4c:83:9d:af:c3:b1:a7:28:
0a:6b:b3:60:30:6a:46:92:91:7b:c6:0f:63:1e:c2:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DE:ED:FA:4A:71:BF:CB:32:76:BD:AF:83:B3:1A:8E:07:44:7F:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BC74E4C1F5811F0B69F43AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:7b:60:20:95:bf:54:f6:1e:f7:fd:3c:f3:01:87:85:55:e9:
80:fc:09:f2:27:c4:c8:b4:fe:37:6a:37:77:18:55:f3:42:11:
e4:27:28:5b:32:59:7e:bd:3b:44:f2:5d:7b:8b:16:6f:ce:06:
52:5d:aa:1d:be:d1:0b:c3:0c:f0:2d:09:69:ed:a2:e3:3d:1e:
26:57:3c:b5:17:64:da:66:ff:e1:8f:96:ee:76:a8:fe:9a:ba:
92:ab:ab:14:c2:3a:cf:87:cb:fa:89:09:1d:7d:b8:02:03:27:
29:98:00:d5:7d:f3:45:3f:f9:b6:61:0c:03:0b:b2:29:9e:f0:
69:aa:3f:df:6f:bc:dc:8e:21:39:04:b7:29:d9:9d:ac:30:e2:
57:66:6d:d1:b0:4f:7d:14:fe:07:89:d4:2f:8b:b0:f2:d6:e2:
4d:be:5d:39:6a:93:51:87:ba:c0:5f:04:52:93:1a:86:3f:3f:
d5:79:a9:18:d9:6c:19:59:72:f0:82:37:11:e9:6c:80:3a:94:
3e:20:50:4a:28:d4:ae:a9:c3:79:0a:28:5b:b9:85:01:96:5c:
86:e8:25:15:af:20:3e:71:86:a1:bd:eb:73:85:14:63:56:32:
6e:ef:23:f8:64:96:93:6c:90:c1:70:7a:f8:4f:2c:59:e4:88:
2d:c0:1c:11
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU36MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDIyMDkwMTQzWhcNMjUwNTMxMDkwMTQzWjAYMRYw
FAYDVQQDEw02ODA3NWFmYy1mOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm70jVsgsx3z4aye9WANn9Q4z66N9Q7S7PYTmPtd1x4hhhlNG+bHOg4IF
pEkSZnBiQvHyUcqo4/riQzp6LUbWOqO91dseth1eS1PZvpSYnnl3AJgvY7HB7ATb
KlPusyG1HozzCxp/73qGOtgEzoLGqXD2oLU/nDm/hg4C93ekb6+byQ4QT/2Dth2T
zANyQT8+JMhTykDq5C9P/LTq0+azHqKA9yh62Z9NQ3IhnH9MaSOcPF4MhpYoMo21
bv0QMQKAgn7Ff/N5MPlIxOGCt2OmPBbbBCnYid1dDWsGRXje2KS7s0Z8so5PTIOd
r8OxpygKa7NgMGpGkpF7xg9jHsLggwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGje
7fpKcb/LMna9r4OzGo4HRH9+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QkM3NEU0QzFGNTgxMUYwQjY5RjQzQUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOdvMA0GCSqGSIb3DQEBCwUA
A4IBAQCpe2Aglb9U9h73/TzzAYeFVemA/AnyJ8TItP43ajd3GFXzQhHkJyhbMll+
vTtE8l17ixZvzgZSXaodvtELwwzwLQlp7aLjPR4mVzy1F2TaZv/hj5budqj+mrqS
q6sUwjrPh8v6iQkdfbgCAycpmADVffNFP/m2YQwDC7IpnvBpqj/fb7zcjiE5BLcp
2Z2sMOJXZm3RsE99FP4HidQvi7Dy1uJNvl05apNRh7rAXwRSkxqGPz/VeakY2WwZ
WXLwgjcR6WyAOpQ+IFBKKNSuqcN5CihbuYUBllyG6CUVryA+cYahvetzhRRjVjJu
7yP4ZJaTbJDBcHr4TyxZ5IgtwBwR
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:24:33 2025 by rpki-client