Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6248636A299E11F09F3139EADAE4EC9C.roa
File: 6248636A299E11F09F3139EADAE4EC9C.roa (raw, json)
Hash identifier: aQxwffaahreL1pp8OA/ynPA1Pu4BMIbhCHO8IAGIJIE=
Subject key identifier: 3F:B9:91:37:4F:0E:6D:09:BF:00:0F:A4:30:78:A1:5A:7F:D3:63:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 015213
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6248636A299E11F09F3139EADAE4EC9C.roa
Signing time: Mon 05 May 2025 10:47:48 +0000
ROA not before: Mon 05 May 2025 10:47:44 +0000
ROA not after: Tue 05 May 2026 10:47:44 +0000
asID: 984
IP address blocks: 156.242.160.0/24 maxlen: 24
156.242.161.0/24 maxlen: 24
156.242.162.0/24 maxlen: 24
156.242.163.0/24 maxlen: 24
156.242.164.0/24 maxlen: 24
156.242.165.0/24 maxlen: 24
156.242.166.0/24 maxlen: 24
156.242.167.0/24 maxlen: 24
156.242.168.0/24 maxlen: 24
156.242.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 15 May 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86547 (0x15213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 10:47:44 2025 GMT
Not After : May 5 10:47:44 2026 GMT
Subject: CN=68189754-c8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:d6:23:85:5c:75:dd:22:03:a5:8c:2f:66:
05:ee:05:a7:41:59:87:a2:d4:81:d0:db:4d:d3:ca:
e9:3c:e8:04:c9:3b:c7:09:50:c0:9f:41:64:e4:bf:
b5:d3:40:53:58:b1:74:cb:c1:35:c2:3b:2a:14:b4:
96:39:b5:29:9b:9d:86:00:3a:72:cd:b2:5d:cb:0d:
b7:cc:a9:95:e1:8a:73:2f:f8:23:5c:0e:28:5c:b7:
99:73:5b:d0:0c:da:44:68:e0:22:58:52:86:22:13:
a4:8c:90:ab:52:f9:7e:79:59:ca:4f:12:0e:05:78:
da:5e:22:3d:04:48:17:4d:9d:da:74:41:7a:64:19:
7d:b9:14:62:8b:4d:1d:f0:dd:89:9c:ba:99:eb:6f:
40:b5:4f:02:74:e1:c4:e0:1c:de:14:a2:d3:6c:0d:
3f:ff:63:be:d0:d0:69:fe:ef:cb:67:f6:8b:93:02:
19:4e:22:2a:69:29:36:14:ad:19:90:17:2b:8b:2e:
dd:09:26:62:ed:5e:83:df:89:d4:19:3b:69:e4:b1:
cf:02:c8:d8:72:b2:e9:a6:2f:6f:87:c0:92:b2:8f:
ad:1f:8c:eb:7e:fe:d0:cc:05:5f:cd:0a:d5:94:84:
57:e2:13:c1:79:39:dc:80:62:be:04:3d:c0:6b:e8:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:91:37:4F:0E:6D:09:BF:00:0F:A4:30:78:A1:5A:7F:D3:63:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6248636A299E11F09F3139EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.160.0-156.242.169.255
Signature Algorithm: sha256WithRSAEncryption
9b:07:64:2f:3b:67:58:90:67:8d:db:da:20:07:1b:ca:70:82:
a0:af:30:48:1c:2f:62:ac:e1:1c:13:7d:26:b7:7a:1e:e5:f0:
7b:13:aa:54:ad:f9:96:1f:8e:33:e8:18:2e:b6:b0:56:41:59:
23:5c:aa:e7:30:f6:95:14:48:58:37:7f:f6:52:3f:6a:1d:f2:
dc:ba:cc:0f:2a:75:95:01:e9:c1:2a:d0:57:d4:6f:f2:e4:7d:
80:2e:b0:e5:6e:e4:1b:81:5f:ba:6a:c1:34:8d:0d:25:8d:d0:
93:9f:fc:e9:42:70:5a:6d:73:3c:0c:b5:c0:66:bb:e2:9a:54:
7d:cf:85:98:0f:85:9d:73:b5:fc:83:57:c7:3c:ed:2d:12:df:
b2:13:73:91:90:10:ee:45:8d:a4:4b:1f:dc:6a:d8:0a:23:87:
dd:c4:c2:19:77:ef:62:36:ae:95:8d:c8:5d:cf:ec:46:44:01:
55:24:30:34:e6:19:e5:e0:fd:f8:ae:9f:48:44:2d:79:4f:fb:
b4:9a:a0:6c:9d:54:4d:e0:01:b5:50:ac:88:d0:13:d2:31:48:
4a:46:20:85:bd:0d:fd:34:c9:fc:9d:0e:f1:ec:1d:c8:c6:62:
bf:38:1e:74:7d:58:26:02:7e:e5:12:d7:4b:54:0b:f9:d6:f9:
f7:85:f5:4b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAVITMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNTA1MTA0NzQ0WhcNMjYwNTA1MTA0NzQ0WjAYMRYw
FAYDVQQDEw02ODE4OTc1NC1jOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs8DWI4Vcdd0iA6WML2YF7gWnQVmHotSB0NtN08rpPOgEyTvHCVDAn0Fk
5L+100BTWLF0y8E1wjsqFLSWObUpm52GADpyzbJdyw23zKmV4YpzL/gjXA4oXLeZ
c1vQDNpEaOAiWFKGIhOkjJCrUvl+eVnKTxIOBXjaXiI9BEgXTZ3adEF6ZBl9uRRi
i00d8N2JnLqZ629AtU8CdOHE4BzeFKLTbA0//2O+0NBp/u/LZ/aLkwIZTiIqaSk2
FK0ZkBcriy7dCSZi7V6D34nUGTtp5LHPAsjYcrLppi9vh8CSso+tH4zrfv7QzAVf
zQrVlIRX4hPBeTncgGK+BD3Aa+hBOwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD+5
kTdPDm0JvwAPpDB4oVp/02NqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MjQ4NjM2QTI5OUUxMUYwOUYzMTM5RUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc8qADBAGc8qgwDQYJKoZI
hvcNAQELBQADggEBAJsHZC87Z1iQZ43b2iAHG8pwgqCvMEgcL2Ks4RwTfSa3eh7l
8HsTqlSt+ZYfjjPoGC62sFZBWSNcqucw9pUUSFg3f/ZSP2od8ty6zA8qdZUB6cEq
0FfUb/LkfYAusOVu5BuBX7pqwTSNDSWN0JOf/OlCcFptczwMtcBmu+KaVH3PhZgP
hZ1ztfyDV8c87S0S37ITc5GQEO5FjaRLH9xq2Aojh93Ewhl372I2rpWNyF3P7EZE
AVUkMDTmGeXg/fiun0hELXlP+7SaoGydVE3gAbVQrIjQE9IxSEpGIIW9Df00yfyd
DvHsHcjGYr84HnR9WCYCfuUS10tUC/nW+feF9Us=
-----END CERTIFICATE-----
Generated at Tue May 13 08:07:17 2025 by rpki-client