Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5D5C7E0240A11F087B0EF95DAE4EC9C.roa
File: C5D5C7E0240A11F087B0EF95DAE4EC9C.roa (raw, json)
Hash identifier: ia/Oh2ZfLdsufC+ix8wgod/TJPr0cT0B521EeLdcirE=
Subject key identifier: 5F:1E:58:E5:B4:3F:B2:E7:77:0B:0A:0A:AA:EA:C4:C8:AF:DE:5D:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014EDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5D5C7E0240A11F087B0EF95DAE4EC9C.roa
Signing time: Mon 28 Apr 2025 08:28:34 +0000
ROA not before: Mon 28 Apr 2025 08:28:28 +0000
ROA not after: Mon 20 Apr 2026 08:28:28 +0000
asID: 28419
IP address blocks: 156.233.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85727 (0x14edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 08:28:28 2025 GMT
Not After : Apr 20 08:28:28 2026 GMT
Subject: CN=680f3c32-13dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:f8:e4:ca:c0:1a:1d:dc:74:8f:19:8d:e8:
d4:69:bf:45:a7:02:cd:28:51:28:51:e0:e8:c1:dc:
10:a1:a4:f3:2e:c2:d2:1a:fd:de:3d:4d:3b:2a:97:
53:dd:81:e4:42:d8:48:9f:fa:f7:42:48:18:26:f0:
95:d1:e8:92:13:70:f8:f5:8f:9c:83:69:bb:39:a0:
7b:69:3e:30:c1:f7:87:27:8b:9a:65:40:1b:c3:1e:
10:8d:4a:7e:36:1c:f8:71:f6:c2:1d:e8:23:46:f8:
60:14:21:7a:6a:d9:f0:ba:ba:47:56:1c:e5:67:a1:
b6:13:c3:d8:ea:71:e6:06:dd:a2:da:42:22:7a:90:
f1:6f:f3:8c:7f:76:22:10:ce:0f:1b:6c:f3:d1:42:
31:78:15:fd:18:d9:19:d4:3c:59:e1:a1:10:cc:00:
38:24:a1:16:0c:52:bb:9e:d0:23:58:ec:3d:02:fc:
93:63:1c:0b:9e:78:6b:75:0b:29:b2:56:a4:ac:91:
7e:f3:8d:a8:19:65:8e:9c:b9:24:75:00:19:26:1d:
56:a1:b9:a0:04:77:24:6a:a2:bc:b1:1d:26:05:b9:
60:e3:00:25:9a:33:3b:e3:42:07:7c:d3:0d:bb:a7:
a4:98:49:24:9a:57:3f:14:84:bc:3f:96:11:ad:6a:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:58:E5:B4:3F:B2:E7:77:0B:0A:0A:AA:EA:C4:C8:AF:DE:5D:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5D5C7E0240A11F087B0EF95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
60:2f:13:96:26:16:6e:1a:f6:d6:ed:ed:18:09:d3:20:f6:6d:
83:cc:97:73:ec:85:a7:65:86:20:d9:ca:5e:99:53:be:94:e6:
d9:59:57:41:5a:bb:c0:4c:db:ea:d7:a6:3f:a1:40:e7:7c:7f:
da:be:5b:79:91:a4:24:51:ca:25:e8:be:7f:ee:01:b1:cb:51:
b3:e2:9f:9e:68:88:72:fd:bf:0d:a2:e8:b2:b3:e2:46:e2:34:
3c:33:7e:00:f9:53:a3:03:d4:b4:d1:4e:df:e3:be:c7:43:df:
75:8e:d5:b8:e2:f9:2c:90:b1:f0:ed:95:bd:ee:f1:58:92:c4:
1d:e0:31:7c:59:cd:33:db:2f:ca:bc:14:39:54:98:ab:b0:8c:
92:3e:77:9f:e3:2f:cd:b2:3d:02:3b:e4:85:cd:53:ec:2f:57:
f3:98:f8:b0:70:fc:c0:89:60:67:98:db:bc:e6:88:8a:b0:9a:
45:dd:35:af:61:70:b1:c4:b8:83:c7:d0:00:bf:d0:27:2b:b2:
93:c2:3c:87:07:cd:5e:51:d8:8d:8e:3f:30:71:a0:09:67:8f:
9b:59:1e:3b:11:b5:b0:e2:1d:e5:dc:d0:42:6c:51:4e:5e:36:
51:a1:c0:35:a5:dd:5c:ab:78:78:39:16:b4:54:53:5c:99:c8:
ed:04:59:11
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU7fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDI4MDgyODI4WhcNMjYwNDIwMDgyODI4WjAYMRYw
FAYDVQQDEw02ODBmM2MzMi0xM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3dr45MrAGh3cdI8ZjejUab9FpwLNKFEoUeDowdwQoaTzLsLSGv3ePU07
KpdT3YHkQthIn/r3QkgYJvCV0eiSE3D49Y+cg2m7OaB7aT4wwfeHJ4uaZUAbwx4Q
jUp+Nhz4cfbCHegjRvhgFCF6atnwurpHVhzlZ6G2E8PY6nHmBt2i2kIiepDxb/OM
f3YiEM4PG2zz0UIxeBX9GNkZ1DxZ4aEQzAA4JKEWDFK7ntAjWOw9AvyTYxwLnnhr
dQspslakrJF+842oGWWOnLkkdQAZJh1WobmgBHckaqK8sR0mBblg4wAlmjM740IH
fNMNu6ekmEkkmlc/FIS8P5YRrWpb/QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF8e
WOW0P7LndwsKCqrqxMiv3l3JMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNUQ1QzdFMDI0MEExMUYwODdCMEVGOTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOkcMA0GCSqGSIb3DQEBCwUA
A4IBAQBgLxOWJhZuGvbW7e0YCdMg9m2DzJdz7IWnZYYg2cpemVO+lObZWVdBWrvA
TNvq16Y/oUDnfH/avlt5kaQkUcol6L5/7gGxy1Gz4p+eaIhy/b8Nouiys+JG4jQ8
M34A+VOjA9S00U7f477HQ991jtW44vkskLHw7ZW97vFYksQd4DF8Wc0z2y/KvBQ5
VJirsIySPnef4y/Nsj0CO+SFzVPsL1fzmPiwcPzAiWBnmNu85oiKsJpF3TWvYXCx
xLiDx9AAv9AnK7KTwjyHB81eUdiNjj8wcaAJZ4+bWR47EbWw4h3l3NBCbFFOXjZR
ocA1pd1cq3h4ORa0VFNcmcjtBFkR
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:08 2025 by rpki-client