Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E44C63DE25F211F08139FCD4DAE4EC9C.roa
File: E44C63DE25F211F08139FCD4DAE4EC9C.roa (raw, json)
Hash identifier: VD+8C3raJWG1qPbJySOPNmV3mgGiX1xIhG2PDBis8/Y=
Subject key identifier: 0C:CE:8F:64:2C:D0:99:FC:16:6F:1E:F1:DC:94:B8:B1:EA:A1:92:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0150BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E44C63DE25F211F08139FCD4DAE4EC9C.roa
Signing time: Wed 30 Apr 2025 18:42:39 +0000
ROA not before: Wed 30 Apr 2025 18:42:34 +0000
ROA not after: Tue 25 Apr 2028 18:42:34 +0000
asID: 17561
IP address blocks: 156.245.80.0/24 maxlen: 24
156.245.81.0/24 maxlen: 24
156.245.82.0/24 maxlen: 24
156.245.83.0/24 maxlen: 24
156.245.84.0/24 maxlen: 24
156.245.85.0/24 maxlen: 24
156.245.86.0/24 maxlen: 24
156.245.87.0/24 maxlen: 24
156.245.89.0/24 maxlen: 24
156.245.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 12 May 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86205 (0x150bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 18:42:34 2025 GMT
Not After : Apr 25 18:42:34 2028 GMT
Subject: CN=68126f1f-658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:70:d1:53:e8:b3:3a:59:00:c4:80:85:80:
01:19:19:40:47:67:7c:0b:ca:98:aa:b2:ff:14:0f:
fe:45:60:11:b5:06:7e:3d:13:1c:e6:2e:57:cf:87:
d5:79:db:7b:6d:e2:da:8c:d1:81:96:89:24:30:f2:
d5:ac:7a:4a:ce:16:df:67:84:83:81:31:ef:65:bf:
a0:c0:fb:3b:12:d7:2f:de:3a:c5:84:01:77:f5:84:
27:ff:12:f2:bb:d1:5b:71:34:6f:2b:a4:87:32:7d:
3b:ac:7d:83:1b:0e:c8:e1:98:ca:e9:07:d6:94:fd:
19:68:7f:96:1f:81:38:11:37:4c:ca:91:a8:c2:16:
5a:c8:17:b5:01:39:0f:a9:71:36:50:0d:c9:82:7c:
60:b2:fd:a2:cb:2d:37:82:39:4e:7a:2b:20:53:a6:
c7:4a:72:95:bd:e5:0e:03:84:c8:c8:fb:f6:ad:6f:
7e:fa:d2:88:eb:f2:e6:ec:ad:24:93:13:70:56:ab:
2f:2b:37:74:e2:d5:dc:ed:73:96:86:41:ea:13:2c:
d0:da:49:a1:38:69:5d:1d:81:bb:b8:34:a4:61:69:
b1:42:03:92:ab:6f:2f:0a:57:20:b3:b9:9c:9a:e8:
cf:54:82:65:48:cd:d4:90:d2:0c:8b:df:7d:eb:87:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:8F:64:2C:D0:99:FC:16:6F:1E:F1:DC:94:B8:B1:EA:A1:92:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E44C63DE25F211F08139FCD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.80.0/21
156.245.89.0-156.245.90.255
Signature Algorithm: sha256WithRSAEncryption
3b:ff:25:ee:ca:84:96:93:57:05:46:01:c3:55:b6:19:95:3e:
1a:7f:77:78:bf:ee:63:f7:73:6a:a0:fb:25:82:65:ad:af:f5:
8a:00:ca:be:77:5c:95:1e:b5:5d:10:53:c1:4e:8b:1d:ff:98:
ef:10:7b:6c:f5:70:69:bb:e6:ea:74:f6:c8:86:c7:f7:fb:a0:
fb:fd:30:64:32:24:ba:a5:c6:b9:54:e0:51:59:0d:0d:b3:a4:
fc:a3:cd:45:05:ef:43:b8:87:54:6a:b1:0f:60:77:f6:ae:c7:
66:69:97:e9:d7:90:7d:65:10:68:a0:5e:03:c2:13:b6:41:3a:
f5:7d:5b:82:b3:98:aa:35:ce:7f:4a:ef:d6:03:a9:b6:48:e5:
99:5e:b5:a2:f2:96:58:4c:7f:1b:64:ee:8c:4e:bd:63:4a:47:
a0:d3:08:38:02:3f:1f:d6:37:7d:22:2e:10:8a:56:2b:41:5a:
bf:c1:6f:dc:22:b8:90:39:a9:38:43:60:9c:4e:d5:9e:da:44:
ac:c9:b4:92:a6:21:10:8e:3b:d4:87:8c:a3:0f:d5:58:c7:90:
5d:7d:19:36:1d:1c:2e:0b:fe:4b:ac:36:92:ac:c1:46:f2:fa:
ee:90:79:1e:da:c2:63:30:e1:af:55:10:11:c9:53:31:7e:1e:
81:87:d0:5c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAVC9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDMwMTg0MjM0WhcNMjgwNDI1MTg0MjM0WjAYMRYw
FAYDVQQDEw02ODEyNmYxZi02NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsxNw0VPoszpZAMSAhYABGRlAR2d8C8qYqrL/FA/+RWARtQZ+PRMc5i5X
z4fVedt7beLajNGBlokkMPLVrHpKzhbfZ4SDgTHvZb+gwPs7Etcv3jrFhAF39YQn
/xLyu9FbcTRvK6SHMn07rH2DGw7I4ZjK6QfWlP0ZaH+WH4E4ETdMypGowhZayBe1
ATkPqXE2UA3Jgnxgsv2iyy03gjlOeisgU6bHSnKVveUOA4TIyPv2rW9++tKI6/Lm
7K0kkxNwVqsvKzd04tXc7XOWhkHqEyzQ2kmhOGldHYG7uDSkYWmxQgOSq28vClcg
s7mcmujPVIJlSM3UkNIMi99964f2kwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAzO
j2Qs0Jn8Fm8e8dyUuLHqoZINMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNDRDNjNERTI1RjIxMUYwODEzOUZDRDREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDnPVQMAwDBACc9VkDBACc9Vow
DQYJKoZIhvcNAQELBQADggEBADv/Je7KhJaTVwVGAcNVthmVPhp/d3i/7mP3c2qg
+yWCZa2v9YoAyr53XJUetV0QU8FOix3/mO8Qe2z1cGm75up09siGx/f7oPv9MGQy
JLqlxrlU4FFZDQ2zpPyjzUUF70O4h1RqsQ9gd/aux2Zpl+nXkH1lEGigXgPCE7ZB
OvV9W4KzmKo1zn9K79YDqbZI5ZletaLyllhMfxtk7oxOvWNKR6DTCDgCPx/WN30i
LhCKVitBWr/Bb9wiuJA5qThDYJxO1Z7aRKzJtJKmIRCOO9SHjKMP1VjHkF19GTYd
HC4L/kusNpKswUby+u6QeR7awmMw4a9VEBHJUzF+HoGH0Fw=
-----END CERTIFICATE-----
Generated at Sat May 10 19:13:37 2025 by rpki-client