Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/94141C50E71711EFAF193D9C762E951A.roa
File: 94141C50E71711EFAF193D9C762E951A.roa (raw, json)
Hash identifier: VGiUmDaGPBDjNZvWhcQkhm9XZwIn0CIlpM2Ja0UcQ+0=
Subject key identifier: AB:F8:EB:E8:27:8C:2B:0C:8B:25:8C:C4:CC:83:76:68:9A:A5:57:09
Certificate issuer: /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial: 49
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority info access: rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/94141C50E71711EFAF193D9C762E951A.roa
Signing time: Sun 09 Feb 2025 18:56:33 +0000
ROA not before: Sun 09 Feb 2025 18:56:28 +0000
ROA not after: Mon 31 Dec 2035 18:56:28 +0000
asID: 30992
IP address blocks: 129.0.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 14 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Validity
Not Before: Feb 9 18:56:28 2025 GMT
Not After : Dec 31 18:56:28 2035 GMT
Subject: CN=67a8fa61-8d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:31:3e:49:b9:4a:29:3f:a4:e8:69:c7:e2:2c:
bc:99:2b:26:68:5a:34:a4:91:e0:89:35:53:ba:7a:
63:c5:4c:c6:c8:e2:be:1b:f8:a3:0f:2c:69:95:c5:
29:9e:0f:75:8a:cd:28:ec:b8:51:c2:df:17:01:61:
4a:af:3e:ab:fc:8d:4b:81:0d:9f:ef:e1:20:6e:48:
11:ff:95:6e:63:92:62:6f:54:12:ee:95:03:f7:d6:
ac:38:d0:fb:ca:d5:4b:03:ff:55:66:77:c8:08:fb:
18:5c:3f:bf:6d:69:2c:1a:b6:aa:18:95:c7:c1:e3:
c7:4d:df:10:82:09:94:91:29:cb:a5:35:7d:68:fe:
b1:c3:09:bd:bb:0a:1c:cc:ae:ec:73:44:b1:bd:48:
a1:0b:89:e9:07:b3:bc:bb:18:6d:92:43:ea:cc:46:
6b:28:6a:43:66:aa:bc:ae:0a:18:b7:29:3a:a8:88:
ae:8d:5b:b3:3c:7f:09:2e:3c:8e:21:14:8f:91:c6:
f0:b8:58:f6:a5:cb:36:73:c4:79:28:a6:c1:1b:73:
9d:44:73:29:44:64:3f:79:29:a6:d1:90:35:67:5c:
58:f2:b0:38:24:88:c9:4b:6b:9c:36:00:0f:fb:c4:
bc:a6:fd:f5:a1:b6:33:50:42:b3:30:f9:a7:9c:0a:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F8:EB:E8:27:8C:2B:0C:8B:25:8C:C4:CC:83:76:68:9A:A5:57:09
X509v3 Authority Key Identifier:
keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/94141C50E71711EFAF193D9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.0.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:de:75:15:34:91:81:2f:86:e1:38:20:34:eb:1e:fe:5f:42:
b4:20:80:d2:10:6a:66:bc:a3:06:32:4a:80:26:68:9b:c7:7c:
a1:1a:06:0e:8c:57:84:62:c5:c1:3d:77:fa:d0:70:61:15:4c:
56:e6:77:bf:25:8e:d5:e5:ae:a5:be:9e:f3:3b:84:c0:7d:c9:
cc:dd:02:56:62:e6:a8:cb:56:49:44:5b:a5:f0:35:c3:ca:74:
2b:9f:7c:14:52:e8:5e:8d:1e:f3:69:d7:d8:3e:a3:fd:96:2e:
61:a7:4b:3f:f7:c1:22:1e:1b:49:2c:6d:72:a2:44:47:03:50:
58:dd:75:35:e0:b1:b7:16:60:61:92:29:a0:43:6a:cd:26:45:
b1:85:f4:36:42:3c:1e:c0:77:28:c9:d5:26:71:5b:90:e0:2e:
7f:d7:d1:38:17:65:df:f5:34:e6:b2:f0:61:d7:12:18:93:61:
fc:f5:16:90:cb:f1:3e:a3:d2:88:34:1a:be:f6:49:3e:64:2b:
64:6e:ea:87:56:3b:86:ca:24:3c:38:9e:9f:9f:73:03:31:59:
14:7d:49:fb:42:30:d3:4f:2a:09:16:7e:29:94:c9:9d:07:be:
00:38:90:42:46:4a:a1:85:40:3c:eb:f9:7f:64:67:68:a4:37:
c2:e0:ea:70
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBSTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RENGMkFSMTEwLwYDVQQFEyhDNEJCQ0RFRjlEQzdFNjhGOTE4NEM4MEMwODcxOEMy
MDZFRERGNzBCMB4XDTI1MDIwOTE4NTYyOFoXDTM1MTIzMTE4NTYyOFowGDEWMBQG
A1UEAxMNNjdhOGZhNjEtOGQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPIxPkm5Sik/pOhpx+IsvJkrJmhaNKSR4Ik1U7p6Y8VMxsjivhv4ow8saZXF
KZ4PdYrNKOy4UcLfFwFhSq8+q/yNS4ENn+/hIG5IEf+VbmOSYm9UEu6VA/fWrDjQ
+8rVSwP/VWZ3yAj7GFw/v21pLBq2qhiVx8Hjx03fEIIJlJEpy6U1fWj+scMJvbsK
HMyu7HNEsb1IoQuJ6QezvLsYbZJD6sxGayhqQ2aqvK4KGLcpOqiIro1bszx/CS48
jiEUj5HG8LhY9qXLNnPEeSimwRtznURzKURkP3kpptGQNWdcWPKwOCSIyUtrnDYA
D/vEvKb99aG2M1BCszD5p5wKfjECAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSr+Ovo
J4wrDIsljMTMg3ZomqVXCTAfBgNVHSMEGDAWgBTEu83vncfmj5GEyAwIcYwgbt33
CzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0RDRjIvQTE4NTMxQjZEQ0JFMTFFRkJFMkI1MEJCNzYyRTk1MUEveEx2Tjc1
M0g1by1SaE1nTUNIR01JRzdkOXdzLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
eEx2Tjc1M0g1by1SaE1nTUNIR01JRzdkOXdzLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0RDRjIvQTE4NTMxQjZEQ0JFMTFFRkJFMkI1MEJCNzYyRTk1
MUEvOTQxNDFDNTBFNzE3MTFFRkFGMTkzRDlDNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIEAWTANBgkqhkiG9w0BAQsFAAOC
AQEAHN51FTSRgS+G4TggNOse/l9CtCCA0hBqZryjBjJKgCZom8d8oRoGDoxXhGLF
wT13+tBwYRVMVuZ3vyWO1eWupb6e8zuEwH3JzN0CVmLmqMtWSURbpfA1w8p0K598
FFLoXo0e82nX2D6j/ZYuYadLP/fBIh4bSSxtcqJERwNQWN11NeCxtxZgYZIpoENq
zSZFsYX0NkI8HsB3KMnVJnFbkOAuf9fROBdl3/U05rLwYdcSGJNh/PUWkMvxPqPS
iDQavvZJPmQrZG7qh1Y7hsokPDien59zAzFZFH1J+0Iw008qCRZ+KZTJnQe+ADiQ
QkZKoYVAPOv5f2RnaKQ3wuDqcA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:18:01 2025 by rpki-client