Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C905D5025D411F0A977AB8BDAE4EC9C.roa
File: 1C905D5025D411F0A977AB8BDAE4EC9C.roa (raw, json)
Hash identifier: 9uj5BQ5hJYAtbnLnL3lA0IjBVIRm2uHMFzKHfovIOck=
Subject key identifier: 77:47:65:ED:40:C2:A0:D2:C8:1B:4E:A4:09:36:72:9F:CF:EE:40:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01507D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C905D5025D411F0A977AB8BDAE4EC9C.roa
Signing time: Wed 30 Apr 2025 15:02:19 +0000
ROA not before: Wed 30 Apr 2025 15:02:14 +0000
ROA not after: Sun 02 Apr 2028 15:02:14 +0000
asID: 17561
IP address blocks: 156.239.67.0/24 maxlen: 24
156.239.68.0/24 maxlen: 24
156.239.69.0/24 maxlen: 24
156.239.70.0/24 maxlen: 24
156.239.71.0/24 maxlen: 24
156.239.72.0/24 maxlen: 24
156.239.73.0/24 maxlen: 24
156.239.74.0/24 maxlen: 24
156.239.75.0/24 maxlen: 24
156.239.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86141 (0x1507d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 15:02:14 2025 GMT
Not After : Apr 2 15:02:14 2028 GMT
Subject: CN=68123b7b-d143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:14:3b:7f:b4:2a:00:e3:b9:e2:c8:e5:32:
32:bd:3b:7c:2e:c7:b7:39:f7:d6:54:8d:e3:18:a9:
03:55:fe:30:eb:f6:21:fb:56:b3:8d:9a:19:0d:7d:
ec:a0:0d:eb:cd:cb:e5:c1:18:6a:85:52:b0:eb:fc:
7d:ad:03:1d:d3:c8:a0:c8:2b:fd:4f:98:29:c9:8d:
ca:eb:61:43:c1:ee:85:b5:aa:92:1c:3d:72:f6:44:
2a:0e:8a:00:5a:32:4b:de:14:c4:7f:66:e3:9a:1c:
05:36:70:7f:8b:93:af:fc:01:7e:97:ce:f5:7d:e3:
92:6c:b4:f9:c0:99:59:0b:f2:3d:86:51:e6:db:5b:
b6:01:02:c1:1c:2e:ea:50:71:a4:f7:37:2e:e2:9a:
c4:68:f7:bf:f1:db:f2:36:4f:85:d9:a1:16:1b:09:
3f:91:14:ef:b6:55:91:e4:07:43:03:f8:d1:e6:20:
c6:24:45:bd:91:c4:34:51:ef:60:36:5c:e8:31:47:
58:df:41:bf:f3:df:f8:94:13:d6:45:91:b6:cb:51:
2b:aa:19:ea:a9:64:1a:98:5b:a6:9c:f4:8e:bc:ce:
d6:b4:64:b8:96:a2:98:42:4d:24:34:cf:60:75:04:
ab:8c:f9:00:4b:31:46:b6:81:49:30:7d:b8:04:2c:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:65:ED:40:C2:A0:D2:C8:1B:4E:A4:09:36:72:9F:CF:EE:40:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C905D5025D411F0A977AB8BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.67.0-156.239.76.255
Signature Algorithm: sha256WithRSAEncryption
a2:bb:fa:6f:58:a0:df:63:a5:90:e2:5e:32:99:42:49:be:de:
3c:6c:aa:0f:dd:a2:00:fe:96:13:39:33:3b:06:92:42:c9:26:
b4:01:58:f0:db:62:4a:41:eb:83:43:cb:ad:05:2e:b1:7c:39:
48:b9:a1:74:a1:1d:90:44:36:1d:3e:fb:57:6a:b4:f4:f6:cf:
4c:cb:cb:b5:03:cf:ed:5b:28:0a:d0:19:5b:87:d2:3c:b5:b4:
b3:40:d1:63:96:4b:f1:61:51:6e:f2:e8:d4:91:b7:93:35:da:
cd:20:a7:bd:4c:ce:38:03:ab:27:a9:65:02:29:1a:f8:01:65:
dd:0d:e1:da:98:bb:66:bf:7a:f5:0c:b6:54:00:a1:30:44:b4:
96:f1:21:42:ef:1a:b9:e3:f9:be:29:16:ed:67:72:69:06:73:
c6:62:91:b0:e7:a4:e5:23:c1:ae:2c:7e:89:77:81:28:d4:ff:
2d:12:47:5a:c3:b1:4e:f6:ac:05:da:e1:0e:04:65:4c:74:f8:
68:1e:28:a3:66:cd:2c:42:69:eb:15:17:06:c6:a0:57:b5:c4:
e5:9c:3e:e5:55:90:0d:64:94:6e:12:cb:5e:2a:c8:26:20:00:
4e:72:48:34:a4:d6:fb:4b:b2:c6:51:cb:d1:ae:c1:4e:0b:da:
dd:4e:93:63
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVB9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDMwMTUwMjE0WhcNMjgwNDAyMTUwMjE0WjAYMRYw
FAYDVQQDEw02ODEyM2I3Yi1kMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6FMUO3+0KgDjueLI5TIyvTt8Lse3OffWVI3jGKkDVf4w6/Yh+1azjZoZ
DX3soA3rzcvlwRhqhVKw6/x9rQMd08igyCv9T5gpyY3K62FDwe6FtaqSHD1y9kQq
DooAWjJL3hTEf2bjmhwFNnB/i5Ov/AF+l871feOSbLT5wJlZC/I9hlHm21u2AQLB
HC7qUHGk9zcu4prEaPe/8dvyNk+F2aEWGwk/kRTvtlWR5AdDA/jR5iDGJEW9kcQ0
Ue9gNlzoMUdY30G/89/4lBPWRZG2y1ErqhnqqWQamFumnPSOvM7WtGS4lqKYQk0k
NM9gdQSrjPkASzFGtoFJMH24BCxlzQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHdH
Ze1AwqDSyBtOpAk2cp/P7kDbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQzkwNUQ1MDI1RDQxMUYwQTk3N0FCOEJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc70MDBACc70wwDQYJKoZI
hvcNAQELBQADggEBAKK7+m9YoN9jpZDiXjKZQkm+3jxsqg/dogD+lhM5MzsGkkLJ
JrQBWPDbYkpB64NDy60FLrF8OUi5oXShHZBENh0++1dqtPT2z0zLy7UDz+1bKArQ
GVuH0jy1tLNA0WOWS/FhUW7y6NSRt5M12s0gp71MzjgDqyepZQIpGvgBZd0N4dqY
u2a/evUMtlQAoTBEtJbxIULvGrnj+b4pFu1ncmkGc8ZikbDnpOUjwa4sfol3gSjU
/y0SR1rDsU72rAXa4Q4EZUx0+GgeKKNmzSxCaesVFwbGoFe1xOWcPuVVkA1klG4S
y14qyCYgAE5ySDSk1vtLssZRy9GuwU4L2t1Ok2M=
-----END CERTIFICATE-----
Generated at Mon May 12 19:10:10 2025 by rpki-client