Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18FA39CE16B911F0802CB72B6EB8BCC6.roa
File: 18FA39CE16B911F0802CB72B6EB8BCC6.roa (raw, json)
Hash identifier: sa1E9CW/c3w1qWpz4bSvMPOOihMx7gldBS0FF8kQWy8=
Subject key identifier: AD:A5:9D:23:C0:D5:C7:00:99:B5:49:2B:2B:DB:4C:02:D8:DE:EB:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014BB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18FA39CE16B911F0802CB72B6EB8BCC6.roa
Signing time: Fri 11 Apr 2025 09:41:09 +0000
ROA not before: Fri 11 Apr 2025 09:41:05 +0000
ROA not after: Sat 17 May 2025 09:41:05 +0000
asID: 395793
IP address blocks: 156.230.159.0/24 maxlen: 24
156.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84915 (0x14bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 09:41:05 2025 GMT
Not After : May 17 09:41:05 2025 GMT
Subject: CN=67f8e3b5-3ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:79:05:83:97:49:76:5d:2f:34:4e:bb:81:
3b:db:d5:eb:98:27:39:b2:28:1d:92:ca:58:06:32:
38:03:33:07:8e:56:d2:bc:f9:e9:8b:d0:f3:58:cf:
e6:9b:22:65:ba:71:61:29:df:48:85:c5:18:95:4b:
3e:8c:f7:6c:f9:05:40:0a:ad:b7:68:3d:d5:34:ad:
ce:b6:bf:be:fb:09:a0:6f:69:7f:ae:76:0c:bc:84:
02:d5:f2:b9:f6:a8:4c:65:d7:4e:aa:93:7e:b9:f0:
2a:ea:17:26:30:8b:67:1b:4f:b9:fa:b5:84:24:86:
bb:47:1f:2a:b0:c4:12:90:90:06:b4:ef:91:ac:8d:
23:ce:f2:dc:88:78:91:c3:ec:49:97:fe:48:24:c1:
6e:90:2c:a3:a5:9b:fc:ab:74:52:4d:b7:78:32:bd:
1b:c7:c8:0e:60:d6:81:53:23:31:b9:b0:2a:d3:5c:
d3:9e:3d:60:51:7b:4a:d7:20:af:87:90:d6:2a:77:
70:6f:2b:29:99:67:2f:b1:29:f3:67:cc:cf:a6:8f:
b6:f1:f1:d5:68:e7:78:92:b2:65:52:15:3b:5c:56:
25:f2:36:a3:52:c8:07:4a:8e:34:45:70:66:c9:11:
64:1a:fd:e6:af:ea:b3:84:09:87:2a:32:fa:f3:07:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A5:9D:23:C0:D5:C7:00:99:B5:49:2B:2B:DB:4C:02:D8:DE:EB:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18FA39CE16B911F0802CB72B6EB8BCC6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.159.0-156.230.160.255
Signature Algorithm: sha256WithRSAEncryption
3e:67:67:9e:3c:f7:49:40:46:14:fa:ea:a8:60:4c:ec:e8:f4:
be:e7:3d:ba:2f:df:54:9b:ee:f7:57:c6:6b:bb:3f:3d:6d:c1:
64:42:84:63:cb:5b:80:aa:8a:ba:4c:8d:23:38:78:36:ac:1c:
bd:6d:7b:fd:c2:d7:86:83:b2:1a:41:80:62:f5:73:73:b7:36:
e0:56:89:5c:ce:4d:54:b2:d2:e1:04:00:46:96:c6:24:4a:14:
cd:6a:7a:61:04:92:b8:eb:61:ab:63:f5:4d:50:8c:c9:13:71:
fc:a3:be:d6:1f:1a:af:97:54:78:92:6a:a2:ae:e8:62:8c:5d:
9e:d3:87:6b:fa:77:34:8c:e7:9e:4f:54:e8:da:3d:76:5f:b6:
e8:ab:10:c6:70:cd:da:f5:47:16:ec:2d:36:87:15:80:52:33:
b3:dd:f2:f7:d1:b8:b0:9e:2e:fb:ba:74:49:6b:46:59:e2:6b:
b8:27:cc:65:63:7a:00:5f:06:21:ea:39:a1:d4:1b:ce:46:cf:
88:c2:37:2f:47:ee:4f:e7:92:90:75:ff:57:83:72:7a:be:6c:
e7:3f:7b:b3:b0:ec:52:28:0f:e5:9d:25:90:04:bb:e5:79:85:
e9:60:d4:1e:4d:72:ab:69:44:54:3b:bd:de:d0:a7:8c:32:00:
de:8d:ed:32
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAUuzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDExMDk0MTA1WhcNMjUwNTE3MDk0MTA1WjAYMRYw
FAYDVQQDEw02N2Y4ZTNiNS0zZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAryR5BYOXSXZdLzROu4E729XrmCc5sigdkspYBjI4AzMHjlbSvPnpi9Dz
WM/mmyJlunFhKd9IhcUYlUs+jPds+QVACq23aD3VNK3Otr+++wmgb2l/rnYMvIQC
1fK59qhMZddOqpN+ufAq6hcmMItnG0+5+rWEJIa7Rx8qsMQSkJAGtO+RrI0jzvLc
iHiRw+xJl/5IJMFukCyjpZv8q3RSTbd4Mr0bx8gOYNaBUyMxubAq01zTnj1gUXtK
1yCvh5DWKndwbyspmWcvsSnzZ8zPpo+28fHVaOd4krJlUhU7XFYl8jajUsgHSo40
RXBmyRFkGv3mr+qzhAmHKjL68wfY4QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFK2l
nSPA1ccAmbVJKyvbTALY3usyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOEZBMzlDRTE2QjkxMUYwODAyQ0I3MkI2RUI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc5p8DBACc5qAwDQYJKoZI
hvcNAQELBQADggEBAD5nZ54890lARhT66qhgTOzo9L7nPbov31Sb7vdXxmu7Pz1t
wWRChGPLW4CqirpMjSM4eDasHL1te/3C14aDshpBgGL1c3O3NuBWiVzOTVSy0uEE
AEaWxiRKFM1qemEEkrjrYatj9U1QjMkTcfyjvtYfGq+XVHiSaqKu6GKMXZ7Th2v6
dzSM555PVOjaPXZftuirEMZwzdr1RxbsLTaHFYBSM7Pd8vfRuLCeLvu6dElrRlni
a7gnzGVjegBfBiHqOaHUG85Gz4jCNy9H7k/nkpB1/1eDcnq+bOc/e7Ow7FIoD+Wd
JZAEu+V5helg1B5NcqtpRFQ7vd7Qp4wyAN6N7TI=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:05:21 2025 by rpki-client on console.sobornost.net