Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F08D6A200D11F09D73C7EBDAE4EC9C.roa
File: D4F08D6A200D11F09D73C7EBDAE4EC9C.roa (raw, json)
Hash identifier: m1HhCATTWGj6QSadDCOAzuWMIYpoRqE5Lc0UpEgOK9A=
Subject key identifier: 0B:86:EE:6C:1B:1F:D3:3A:C1:AB:7D:4E:DA:E1:A8:45:34:97:A9:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014E24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F08D6A200D11F09D73C7EBDAE4EC9C.roa
Signing time: Wed 23 Apr 2025 06:40:23 +0000
ROA not before: Wed 23 Apr 2025 06:40:17 +0000
ROA not after: Tue 29 Apr 2025 06:40:17 +0000
asID: 4766
IP address blocks: 156.239.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85540 (0x14e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 06:40:17 2025 GMT
Not After : Apr 29 06:40:17 2025 GMT
Subject: CN=68088b57-8907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:10:a0:c4:06:55:f0:1c:5e:06:4f:04:f1:
9d:df:de:35:78:35:30:6a:2a:0c:a5:ff:70:10:d3:
f4:3f:67:65:ae:42:f8:0a:3c:70:cd:fa:fd:f6:71:
3c:1e:6e:57:1d:a4:d3:69:32:cf:81:7c:38:0b:23:
d5:70:b6:7b:6e:1a:eb:f0:27:d6:cb:26:f2:69:e1:
b5:82:b2:30:69:db:b3:9a:0a:3f:91:4f:01:d0:5f:
fa:78:09:3d:8b:25:bc:96:09:2e:ee:c7:f9:93:a5:
c1:fb:30:ac:7d:3a:d2:97:42:66:cb:eb:60:de:17:
2c:2b:ca:f4:38:fe:15:cb:e4:fe:f8:40:a6:c2:ca:
2b:29:c4:e5:32:74:2f:29:2c:f4:aa:39:27:9c:83:
c4:7d:1a:de:6b:51:23:15:3a:15:cb:ba:e0:25:18:
ad:f1:6c:cf:af:bf:72:1b:c9:8b:52:7b:2a:ae:90:
57:80:ed:dd:10:5a:14:96:8a:75:7d:95:7d:9c:d9:
ff:7a:7d:eb:67:4c:53:8c:2d:95:15:2a:5f:a9:37:
93:7c:d9:e1:96:22:02:7d:fe:54:27:a3:93:8e:37:
21:33:c6:bc:ff:b0:5d:bf:9b:46:81:42:a0:cc:7b:
8d:d8:64:e6:29:95:21:67:aa:6c:31:15:9c:7b:2e:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:EE:6C:1B:1F:D3:3A:C1:AB:7D:4E:DA:E1:A8:45:34:97:A9:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4F08D6A200D11F09D73C7EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:34:30:f8:16:46:4a:3d:39:2f:df:e6:90:98:50:54:7b:9a:
7c:f3:55:ee:64:b4:85:a1:a5:60:5c:4a:52:da:f9:21:a6:95:
f3:db:0f:ea:d1:c5:b1:e3:79:2b:5b:78:a8:cd:25:b3:da:3e:
70:3a:c4:a8:69:f7:3b:ea:d0:f4:24:d8:9b:0e:fc:a5:85:f0:
aa:52:ef:99:7f:a8:a0:1d:5b:14:79:fb:62:44:8d:81:c6:7a:
7b:1a:4d:82:da:b9:71:a9:41:4a:60:fb:a6:d7:4e:0d:a8:2e:
45:2a:f4:84:4b:47:1c:33:b9:d3:d0:d7:48:0d:b7:54:c2:16:
f4:cb:e4:4f:15:10:05:07:29:c6:29:47:d1:4f:6c:2f:51:29:
65:bd:85:34:0e:e1:1b:d0:8d:ce:d3:70:3e:ff:1f:ab:c0:35:
5e:6c:c2:d0:4a:10:0b:a1:97:89:6c:3c:5f:b9:6d:84:4c:f5:
b0:3b:b5:9c:1b:dc:5c:52:da:32:6d:92:a8:12:ba:4b:e0:d0:
04:ed:ab:4c:99:1c:db:fb:db:02:03:3f:be:3c:d5:6c:8b:fb:
79:9e:25:4c:47:13:17:9c:b2:ac:a8:54:96:93:21:b4:4a:d4:
ca:20:1f:82:f9:72:79:79:ab:ac:06:b2:90:2d:96:81:42:02:
23:8c:fc:47
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAU4kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDIzMDY0MDE3WhcNMjUwNDI5MDY0MDE3WjAYMRYw
FAYDVQQDEw02ODA4OGI1Ny04OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtNAQoMQGVfAcXgZPBPGd3941eDUwaioMpf9wENP0P2dlrkL4Cjxwzfr9
9nE8Hm5XHaTTaTLPgXw4CyPVcLZ7bhrr8CfWyybyaeG1grIwaduzmgo/kU8B0F/6
eAk9iyW8lgku7sf5k6XB+zCsfTrSl0Jmy+tg3hcsK8r0OP4Vy+T++ECmwsorKcTl
MnQvKSz0qjknnIPEfRrea1EjFToVy7rgJRit8WzPr79yG8mLUnsqrpBXgO3dEFoU
lop1fZV9nNn/en3rZ0xTjC2VFSpfqTeTfNnhliICff5UJ6OTjjchM8a8/7Bdv5tG
gUKgzHuN2GTmKZUhZ6psMRWcey6MXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAuG
7mwbH9M6wat9TtrhqEU0l6mSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENEYwOEQ2QTIwMEQxMUYwOUQ3M0M3RUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO8TMA0GCSqGSIb3DQEBCwUA
A4IBAQC3NDD4FkZKPTkv3+aQmFBUe5p881XuZLSFoaVgXEpS2vkhppXz2w/q0cWx
43krW3iozSWz2j5wOsSoafc76tD0JNibDvylhfCqUu+Zf6igHVsUeftiRI2Bxnp7
Gk2C2rlxqUFKYPum104NqC5FKvSES0ccM7nT0NdIDbdUwhb0y+RPFRAFBynGKUfR
T2wvUSllvYU0DuEb0I3O03A+/x+rwDVebMLQShALoZeJbDxfuW2ETPWwO7WcG9xc
UtoybZKoErpL4NAE7atMmRzb+9sCAz++PNVsi/t5niVMRxMXnLKsqFSWkyG0StTK
IB+C+XJ5eausBrKQLZaBQgIjjPxH
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:07:26 2025 by rpki-client on console.sobornost.net