Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24D23C8228B211F0BC8522C1DAE4EC9C.roa
File: 24D23C8228B211F0BC8522C1DAE4EC9C.roa (raw, json)
Hash identifier: bz/D47Nn3CTnovTncuhX6y0wf6pwCV9H2/SaURNBn9U=
Subject key identifier: 03:4E:AB:F9:C9:05:7E:77:F8:FE:83:A4:3D:1B:12:ED:A5:89:C6:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0151AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24D23C8228B211F0BC8522C1DAE4EC9C.roa
Signing time: Sun 04 May 2025 06:36:44 +0000
ROA not before: Sun 04 May 2025 06:36:39 +0000
ROA not after: Sun 08 Jun 2025 06:36:39 +0000
asID: 60223
IP address blocks: 156.229.232.0/23 maxlen: 24
156.229.234.0/23 maxlen: 24
156.229.247.0/24 maxlen: 24
156.229.248.0/22 maxlen: 24
156.229.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86446 (0x151ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 06:36:39 2025 GMT
Not After : Jun 8 06:36:39 2025 GMT
Subject: CN=68170afc-1140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:ed:c6:d8:7b:50:d3:25:b7:08:20:d5:d5:
61:f0:d7:da:aa:e7:df:20:47:2d:f1:02:ba:fc:4b:
db:4e:a5:01:06:64:e4:94:cc:d9:57:68:e8:6d:26:
06:8a:fc:0b:e0:12:85:cc:f7:fe:7a:83:52:dc:51:
0b:e9:91:7e:27:aa:c1:12:23:c2:98:3f:83:66:5f:
5b:0b:ad:11:09:d3:99:96:f6:f5:de:1d:29:9d:47:
c3:be:4e:e4:ed:7c:20:05:d9:47:00:88:4d:85:c9:
c0:de:d4:40:c2:d3:5a:39:26:cf:e9:9c:f2:7a:fe:
f0:6a:e9:cb:ac:38:1c:d0:88:87:9c:db:cf:58:bb:
b3:89:c2:ee:5a:4a:ea:6b:e7:5e:7b:3b:62:a6:e7:
17:2b:a7:15:35:b7:86:fb:8d:78:8c:20:0a:34:ca:
a9:19:85:f9:c5:4e:45:7e:40:f9:99:4e:ba:bd:d4:
c3:95:ac:47:e5:ac:48:ec:66:9b:74:6a:18:3d:6a:
aa:7a:3c:57:58:6f:7e:39:55:df:57:72:cb:bc:38:
6b:73:8e:57:08:16:e5:35:a2:10:1c:82:73:15:4a:
1d:6c:3d:34:91:be:6a:27:75:79:eb:28:2f:85:f3:
d8:b6:55:d1:fe:a4:47:8c:08:2e:fb:9e:35:22:8f:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:AB:F9:C9:05:7E:77:F8:FE:83:A4:3D:1B:12:ED:A5:89:C6:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24D23C8228B211F0BC8522C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.232.0/22
156.229.247.0-156.229.253.255
Signature Algorithm: sha256WithRSAEncryption
99:0b:02:0b:d0:fe:4e:ed:80:7d:7e:fb:6f:1b:17:26:62:c4:
89:bc:62:ca:ce:25:71:28:50:12:ba:39:49:2e:6e:0e:8b:d7:
d4:ef:69:f0:9e:85:0a:72:bd:3f:fc:d1:25:1f:a1:5b:27:32:
7e:9a:57:55:67:96:7d:90:d0:44:c9:f1:87:eb:83:65:55:58:
f5:87:82:08:83:84:b2:20:7e:52:bb:79:7e:94:a2:27:d0:66:
1f:13:b3:f8:e1:57:db:1c:e1:51:e6:2c:d6:49:fa:d6:df:59:
9a:8a:f0:b5:47:20:8e:ea:7e:6f:cd:52:eb:6a:ba:b6:6d:48:
7e:8d:22:43:2f:63:ea:f6:1f:4f:6e:eb:47:36:95:f6:ad:29:
be:af:e0:17:56:63:3d:6c:91:6f:94:2d:6c:cb:bc:b0:35:31:
1d:87:7b:5f:07:12:fa:70:1f:07:48:70:ed:f9:68:1c:ae:63:
5f:05:f7:6f:bf:3e:81:e0:8b:44:68:71:13:34:87:a2:89:f4:
ed:d8:08:81:8a:4d:d2:cd:bf:8b:ae:df:6d:66:6f:22:20:ef:
90:e6:df:f2:68:eb:07:9b:ad:65:7f:ef:e7:b2:ff:e8:38:57:
27:d8:e2:fa:0b:3b:84:24:3f:0e:bf:c2:2e:d1:c0:6b:e2:5d:
78:74:7a:89
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAVGuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA0MDYzNjM5WhcNMjUwNjA4MDYzNjM5WjAYMRYw
FAYDVQQDEw02ODE3MGFmYy0xMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA48Xtxth7UNMltwgg1dVh8NfaquffIEct8QK6/EvbTqUBBmTklMzZV2jo
bSYGivwL4BKFzPf+eoNS3FEL6ZF+J6rBEiPCmD+DZl9bC60RCdOZlvb13h0pnUfD
vk7k7XwgBdlHAIhNhcnA3tRAwtNaOSbP6Zzyev7waunLrDgc0IiHnNvPWLuzicLu
Wkrqa+deeztipucXK6cVNbeG+414jCAKNMqpGYX5xU5FfkD5mU66vdTDlaxH5axI
7GabdGoYPWqqejxXWG9+OVXfV3LLvDhrc45XCBblNaIQHIJzFUodbD00kb5qJ3V5
6ygvhfPYtlXR/qRHjAgu+541Io/oEwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFANO
q/nJBX53+P6DpD0bEu2licY9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNEQyM0M4MjI4QjIxMUYwQkM4NTIyQzFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCnOXoMAwDBACc5fcDBAGc5fww
DQYJKoZIhvcNAQELBQADggEBAJkLAgvQ/k7tgH1++28bFyZixIm8YsrOJXEoUBK6
OUkubg6L19TvafCehQpyvT/80SUfoVsnMn6aV1Vnln2Q0ETJ8Yfrg2VVWPWHggiD
hLIgflK7eX6UoifQZh8Ts/jhV9sc4VHmLNZJ+tbfWZqK8LVHII7qfm/NUutqurZt
SH6NIkMvY+r2H09u60c2lfatKb6v4BdWYz1skW+ULWzLvLA1MR2He18HEvpwHwdI
cO35aByuY18F92+/PoHgi0RocRM0h6KJ9O3YCIGKTdLNv4uu321mbyIg75Dm3/Jo
6webrWV/7+ey/+g4VyfY4voLO4QkPw6/wi7RwGviXXh0eok=
-----END CERTIFICATE-----
Generated at Mon May 12 15:07:06 2025 by rpki-client