Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/7DF5A16CDD5A11EFB641675C762E951A.roa
File: 7DF5A16CDD5A11EFB641675C762E951A.roa (raw, json)
Hash identifier: VPYWyUkSd2f/Oo+xyShQeMdrepS2BuZjuB3U+Dkf/kY=
Subject key identifier: 87:04:CB:DA:8C:0D:D6:32:38:2A:1F:E6:72:1F:70:97:2E:29:C8:96
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 09
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/7DF5A16CDD5A11EFB641675C762E951A.roa
Signing time: Tue 28 Jan 2025 09:30:20 +0000
ROA not before: Tue 28 Jan 2025 09:30:16 +0000
ROA not after: Wed 31 Jan 2035 09:30:16 +0000
asID: 30992
IP address blocks: 129.0.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Jan 28 09:30:16 2025 GMT
Not After : Jan 31 09:30:16 2035 GMT
Subject: CN=6798a3ac-c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:b5:d1:b0:08:8a:86:e1:b3:98:80:b2:95:
91:64:0b:34:72:c4:be:0d:2b:ab:14:47:0e:1d:2e:
23:6b:31:73:5d:7d:21:73:57:36:14:53:ac:a2:0c:
0b:06:44:39:f6:de:29:b7:27:97:8f:37:7b:ac:d2:
0b:a8:ab:4b:94:e0:06:82:38:6e:d3:af:57:59:43:
22:c7:9f:cb:dc:a5:c9:63:ad:33:04:c8:cb:f2:3d:
ca:8e:9b:a3:96:6c:2a:f8:f4:6c:ce:44:18:25:81:
4c:5d:cc:4c:ad:26:bb:c6:fd:75:ee:1b:bd:f7:b2:
b6:eb:af:05:f7:04:f5:cc:ad:7a:4f:a0:23:65:cd:
52:92:e3:0f:9e:6c:0d:3b:3e:6c:86:c9:60:27:cb:
63:15:32:de:aa:51:10:78:54:ac:12:e1:a7:63:fb:
15:cc:53:c2:7a:0e:b1:2d:a7:78:de:a7:5b:9c:eb:
94:fd:ff:99:42:04:02:d6:8c:cd:f2:54:8f:d9:23:
88:f5:d2:1e:b6:d3:16:fb:29:b6:92:3c:59:5c:27:
4d:15:f3:7b:42:01:8f:17:96:7c:48:85:52:de:41:
0e:ba:a1:07:ea:59:8e:bd:3a:70:55:f1:56:7e:1d:
26:59:fa:ab:2a:1f:2c:52:a0:b4:8d:77:2f:05:71:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:CB:DA:8C:0D:D6:32:38:2A:1F:E6:72:1F:70:97:2E:29:C8:96
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/7DF5A16CDD5A11EFB641675C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.100.0/24
Signature Algorithm: sha256WithRSAEncryption
51:03:53:dd:60:35:0d:3d:69:58:3a:52:4b:48:b1:9a:56:81:
d0:eb:ea:d2:18:b2:c9:e6:78:ac:d8:e7:58:83:b6:82:a8:42:
77:70:c3:7e:dd:ed:38:4f:1a:6c:3c:bf:a6:57:b4:14:2b:c2:
ed:33:b7:f6:ba:ae:09:5e:9d:75:20:da:2b:cb:98:79:7e:19:
e6:4c:ff:cb:63:02:f8:43:64:18:4f:6e:4d:a4:a0:20:fb:a2:
de:5f:0a:fb:c8:88:55:b8:dd:5f:21:4b:ad:de:ae:25:54:28:
f1:f8:67:a8:f7:69:1b:9b:e1:a5:59:8b:47:cc:83:6d:1e:75:
5f:05:f2:d4:e3:bc:25:b9:71:1f:3a:05:b3:c8:46:12:b5:c4:
66:9d:e8:4d:6a:4d:2d:32:69:3d:24:61:b5:d8:22:c1:6c:0e:
ba:5b:81:a9:2b:bb:fc:24:25:65:5f:bc:de:9a:c7:a3:32:49:
7e:80:93:14:82:a5:17:3a:21:81:7d:13:a0:5e:f8:5a:7b:25:
98:5c:83:5f:b6:38:e3:d6:27:07:45:21:50:51:70:c3:76:c0:
01:34:c3:8a:62:f2:e3:77:d0:3f:8c:b0:9e:7e:9e:7c:95:12:
b1:da:be:3e:c0:e5:93:98:2d:09:a6:b4:ab:3a:e7:8f:d7:5e:
73:64:7a:fc
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RENGMkFSMTEwLwYDVQQFEyhDNEJCQ0RFRjlEQzdFNjhGOTE4NEM4MEMwODcxOEMy
MDZFRERGNzBCMB4XDTI1MDEyODA5MzAxNloXDTM1MDEzMTA5MzAxNlowGDEWMBQG
A1UEAxMNNjc5OGEzYWMtYzZkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnptdGwCIqG4bOYgLKVkWQLNHLEvg0rqxRHDh0uI2sxc119IXNXNhRTrKIM
CwZEOfbeKbcnl483e6zSC6irS5TgBoI4btOvV1lDIsefy9ylyWOtMwTIy/I9yo6b
o5ZsKvj0bM5EGCWBTF3MTK0mu8b9de4bvfeytuuvBfcE9cytek+gI2XNUpLjD55s
DTs+bIbJYCfLYxUy3qpREHhUrBLhp2P7FcxTwnoOsS2neN6nW5zrlP3/mUIEAtaM
zfJUj9kjiPXSHrbTFvsptpI8WVwnTRXze0IBjxeWfEiFUt5BDrqhB+pZjr06cFXx
Vn4dJln6qyofLFKgtI13LwVxBnMCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSHBMva
jA3WMjgqH+ZyH3CXLinIljAfBgNVHSMEGDAWgBTEu83vncfmj5GEyAwIcYwgbt33
CzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0RDRjIvQTE4NTMxQjZEQ0JFMTFFRkJFMkI1MEJCNzYyRTk1MUEveEx2Tjc1
M0g1by1SaE1nTUNIR01JRzdkOXdzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
eEx2Tjc1M0g1by1SaE1nTUNIR01JRzdkOXdzLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0RDRjIvQTE4NTMxQjZEQ0JFMTFFRkJFMkI1MEJCNzYyRTk1
MUEvN0RGNUExNkNERDVBMTFFRkI2NDE2NzVDNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIEAZDANBgkqhkiG9w0BAQsFAAOC
AQEAUQNT3WA1DT1pWDpSS0ixmlaB0Ovq0hiyyeZ4rNjnWIO2gqhCd3DDft3tOE8a
bDy/ple0FCvC7TO39rquCV6ddSDaK8uYeX4Z5kz/y2MC+ENkGE9uTaSgIPui3l8K
+8iIVbjdXyFLrd6uJVQo8fhnqPdpG5vhpVmLR8yDbR51XwXy1OO8JblxHzoFs8hG
ErXEZp3oTWpNLTJpPSRhtdgiwWwOuluBqSu7/CQlZV+83prHozJJfoCTFIKlFzoh
gX0ToF74WnslmFyDX7Y449YnB0UhUFFww3bAATTDimLy43fQP4ywnn6efJUSsdq+
PsDlk5gtCaa0qzrnj9dec2R6/A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 21:50:21 2025 by rpki-client