Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D4238013C711F0A023F042762E951A.roa
File: 88D4238013C711F0A023F042762E951A.roa (raw, json)
Hash identifier: Xs73ALHDEPrhNRnqarDkmCQxQUiqDL+XadAAk8eTn8g=
Subject key identifier: D7:29:24:4B:1B:DB:3A:27:6C:4F:7D:C6:48:36:1B:62:92:48:D8:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014A8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D4238013C711F0A023F042762E951A.roa
Signing time: Mon 07 Apr 2025 15:46:56 +0000
ROA not before: Mon 07 Apr 2025 15:46:52 +0000
ROA not after: Wed 14 May 2025 15:46:52 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84620 (0x14a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 15:46:52 2025 GMT
Not After : May 14 15:46:52 2025 GMT
Subject: CN=67f3f370-2bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:0c:4a:e0:4e:1c:cc:01:0d:c6:56:40:7f:
4f:5e:28:b1:6d:0b:37:16:41:67:1b:df:8e:70:87:
6f:c1:2d:24:2f:41:a9:5b:cc:25:e5:e5:73:6e:e2:
1b:3a:bd:fb:be:9d:a2:30:03:43:cc:c0:89:7b:62:
d4:fc:a3:9f:cc:04:68:ef:5b:6a:1d:fe:0e:6e:63:
d9:21:87:0b:ce:fb:12:e7:24:07:1d:cf:35:7d:71:
60:a0:2c:a9:2c:dd:2d:93:22:80:cc:57:ac:35:35:
eb:30:77:59:49:1e:a6:b3:44:18:4c:51:93:4b:71:
f6:01:64:c9:3b:7f:c3:80:38:d3:cb:63:3c:66:21:
4b:c7:39:60:e0:9f:f8:1c:d6:88:7f:c2:ea:7f:e0:
3f:ad:a4:ad:39:17:8c:76:91:74:e0:82:3e:2a:e3:
33:89:3d:60:c9:7e:71:3c:f9:f9:1c:80:00:83:95:
bd:68:b9:a7:25:25:e5:15:f6:ee:73:bc:6e:7c:91:
3d:09:73:49:18:14:19:ad:a1:4a:35:3f:62:2e:fd:
0b:82:df:d9:0f:3d:cc:a1:72:a9:d4:e5:e8:d8:fa:
c2:b2:52:55:23:24:90:54:af:11:ef:2d:50:a3:86:
c2:79:c1:ec:37:51:dc:6f:ef:6c:7b:3f:17:00:86:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:24:4B:1B:DB:3A:27:6C:4F:7D:C6:48:36:1B:62:92:48:D8:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88D4238013C711F0A023F042762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8d:49:f6:eb:fa:c2:48:0b:5c:7e:38:b3:9c:96:d2:9d:7e:
97:02:b4:5e:7d:fd:d0:fe:a5:3e:64:c4:13:00:81:1a:fb:e8:
a7:2a:5c:c9:43:cb:64:ff:2c:84:06:91:38:be:2b:1a:e0:6e:
a1:bf:a7:e0:33:58:8a:ed:62:7c:f8:2e:09:65:75:4c:ea:ad:
b8:aa:95:b7:5d:fb:40:f9:a6:da:6e:c8:18:15:e0:c7:f0:d6:
49:ca:67:9a:66:59:36:0e:d1:6b:9e:55:25:15:1b:a0:57:2e:
c9:4f:b1:b1:56:21:48:e9:13:a1:42:fe:f7:d1:33:03:2f:79:
d6:11:eb:2e:d3:0f:20:55:a7:3c:80:3c:75:cf:48:3f:a6:49:
cf:da:d2:5f:6c:33:16:8d:83:63:0e:bd:a3:d8:3f:9a:07:98:
77:61:b2:96:42:96:d7:a7:1e:62:bc:84:53:55:ea:23:c8:87:
11:70:74:4e:f2:60:5f:23:9c:fa:12:83:5e:0f:4c:73:f4:be:
ff:f1:bb:b1:f2:2d:21:55:4c:09:86:68:ac:cc:85:4d:e7:89:
25:1e:dd:dd:3f:5b:70:b4:c3:34:87:a1:40:35:4e:7c:0f:42:
a9:4a:c3:7d:5e:92:2e:e3:85:2e:8f:a7:9b:3c:73:87:4f:ea:
5e:fe:a4:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUqMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDA3MTU0NjUyWhcNMjUwNTE0MTU0NjUyWjAYMRYw
FAYDVQQDEw02N2YzZjM3MC0yYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt6AMSuBOHMwBDcZWQH9PXiixbQs3FkFnG9+OcIdvwS0kL0GpW8wl5eVz
buIbOr37vp2iMANDzMCJe2LU/KOfzARo71tqHf4ObmPZIYcLzvsS5yQHHc81fXFg
oCypLN0tkyKAzFesNTXrMHdZSR6ms0QYTFGTS3H2AWTJO3/DgDjTy2M8ZiFLxzlg
4J/4HNaIf8Lqf+A/raStOReMdpF04II+KuMziT1gyX5xPPn5HIAAg5W9aLmnJSXl
Ffbuc7xufJE9CXNJGBQZraFKNT9iLv0Lgt/ZDz3MoXKp1OXo2PrCslJVIySQVK8R
7y1Qo4bCecHsN1Hcb+9sez8XAIbQKQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNcp
JEsb2zonbE99xkg2G2KSSNi1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OEQ0MjM4MDEzQzcxMUYwQTAyM0YwNDI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwNMA0GCSqGSIb3DQEBCwUA
A4IBAQAxjUn26/rCSAtcfjiznJbSnX6XArReff3Q/qU+ZMQTAIEa++inKlzJQ8tk
/yyEBpE4visa4G6hv6fgM1iK7WJ8+C4JZXVM6q24qpW3XftA+ababsgYFeDH8NZJ
ymeaZlk2DtFrnlUlFRugVy7JT7GxViFI6ROhQv730TMDL3nWEesu0w8gVac8gDx1
z0g/pknP2tJfbDMWjYNjDr2j2D+aB5h3YbKWQpbXpx5ivIRTVeojyIcRcHRO8mBf
I5z6EoNeD0xz9L7/8bux8i0hVUwJhmiszIVN54klHt3dP1twtMM0h6FANU58D0Kp
SsN9XpIu44Uuj6ebPHOHT+pe/qT3
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:12:18 2025 by rpki-client