Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010FCA96CCA811EF84892A7E762E951A.roa
File: 010FCA96CCA811EF84892A7E762E951A.roa (raw, json)
Hash identifier: MvFat4VV3pOyGbQg+ZwoAMpMPfiXzTTNeltW1uydpp8=
Subject key identifier: E9:71:B5:32:D0:4D:6A:0A:ED:BA:A3:D5:56:7F:6B:C9:94:2C:5F:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010FCA96CCA811EF84892A7E762E951A.roa
Signing time: Tue 07 Jan 2025 03:32:22 +0000
ROA not before: Tue 07 Jan 2025 03:32:18 +0000
ROA not after: Mon 13 Dec 2027 03:32:18 +0000
asID: 17561
IP address blocks: 156.230.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63952 (0xf9d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 03:32:18 2025 GMT
Not After : Dec 13 03:32:18 2027 GMT
Subject: CN=677ca045-c791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:0f:cc:3c:8d:23:87:7a:3d:af:44:f5:81:
ef:37:87:99:2f:2a:a0:39:57:89:d7:8d:9c:a9:4c:
57:cf:18:a1:85:43:15:ad:4d:73:1e:ad:5b:1b:a2:
ca:a6:db:ec:90:d1:9c:89:2c:37:da:60:f6:0c:40:
58:83:d3:5d:cd:58:98:ab:a8:94:03:38:0a:7f:0e:
3a:f3:a8:09:be:b6:c0:df:49:6c:99:13:53:ea:4a:
2c:63:4a:44:45:e6:1b:40:57:b0:aa:d1:b7:bd:bb:
ff:58:b8:8b:8b:79:94:d7:b8:47:20:8c:53:a8:a7:
7e:7d:0d:37:f4:a5:22:ec:ad:3e:16:44:6f:d8:6c:
85:54:27:cd:ee:68:54:6f:29:19:a2:2a:0a:08:e0:
47:eb:7e:9f:54:c7:5e:be:21:0c:3c:18:79:38:5d:
0d:47:3c:3d:1a:a8:5e:69:43:cc:d7:3f:4f:91:be:
f5:15:16:b6:1e:c6:e3:fd:d7:b5:2d:de:b3:98:ed:
68:f5:9c:1c:fa:75:1a:01:9a:70:31:45:05:21:44:
a0:27:54:46:53:a9:2c:79:7e:45:43:30:ac:73:f2:
87:7d:e3:5b:85:2c:1e:98:01:fd:d3:d1:62:8c:ce:
e9:49:c9:d4:c0:b8:1a:d6:1e:19:0b:9e:01:14:e9:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:B5:32:D0:4D:6A:0A:ED:BA:A3:D5:56:7F:6B:C9:94:2C:5F:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/010FCA96CCA811EF84892A7E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.18.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e3:97:bf:ea:a3:ca:ed:c3:3a:24:01:46:fe:ec:b2:a0:df:
0f:08:b5:09:82:32:23:6f:21:33:fe:70:6c:22:0c:73:55:df:
16:4c:ba:2e:bc:19:25:81:b8:b7:f0:a4:29:88:8a:c9:48:90:
9e:cb:7b:da:c4:0e:4f:6f:57:13:2e:95:b5:7a:50:9f:4e:3a:
f1:05:86:3e:b0:5e:d5:59:96:6e:9b:0d:35:fe:51:41:ab:6c:
2d:8d:e8:82:88:d1:ad:6d:cf:93:1e:11:cd:13:6e:1f:6a:6d:
9a:90:eb:76:85:b7:a5:ee:4a:a4:65:cb:63:c3:d9:28:1a:0a:
95:e7:47:ac:b9:db:ae:c3:fa:79:89:f9:76:68:ba:c6:73:70:
b9:e0:80:f1:6b:ff:27:72:8a:9a:fd:dd:21:56:b0:bd:b4:49:
ee:fd:13:57:bc:ab:1a:23:d6:dc:f4:e8:e6:06:c4:2e:fe:9b:
d8:ba:e4:2c:82:ee:f2:fa:63:bf:bd:3c:3d:33:93:25:29:32:
7c:2a:83:6b:4d:cb:30:b3:3e:51:38:45:ed:9b:d9:cf:1c:98:
7e:e9:c7:d6:94:93:49:aa:82:43:47:7f:9e:a2:c3:98:3f:9c:
b6:b6:12:78:be:b4:6a:40:02:e4:09:a4:35:f9:92:64:08:d2:
5e:e1:b1:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPnQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDMzMjE4WhcNMjcxMjEzMDMzMjE4WjAYMRYw
FAYDVQQDEw02NzdjYTA0NS1jNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0nwPzDyNI4d6Pa9E9YHvN4eZLyqgOVeJ142cqUxXzxihhUMVrU1zHq1b
G6LKptvskNGciSw32mD2DEBYg9NdzViYq6iUAzgKfw4686gJvrbA30lsmRNT6kos
Y0pEReYbQFewqtG3vbv/WLiLi3mU17hHIIxTqKd+fQ039KUi7K0+FkRv2GyFVCfN
7mhUbykZoioKCOBH636fVMdeviEMPBh5OF0NRzw9GqheaUPM1z9Pkb71FRa2Hsbj
/de1Ld6zmO1o9Zwc+nUaAZpwMUUFIUSgJ1RGU6kseX5FQzCsc/KHfeNbhSwemAH9
09FijM7pScnUwLga1h4ZC54BFOm4+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOlx
tTLQTWoK7bqj1VZ/a8mULF98MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMTBGQ0E5NkNDQTgxMUVGODQ4OTJBN0U3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOYSMA0GCSqGSIb3DQEBCwUA
A4IBAQB545e/6qPK7cM6JAFG/uyyoN8PCLUJgjIjbyEz/nBsIgxzVd8WTLouvBkl
gbi38KQpiIrJSJCey3vaxA5Pb1cTLpW1elCfTjrxBYY+sF7VWZZumw01/lFBq2wt
jeiCiNGtbc+THhHNE24fam2akOt2hbel7kqkZctjw9koGgqV50esuduuw/p5ifl2
aLrGc3C54IDxa/8ncoqa/d0hVrC9tEnu/RNXvKsaI9bc9OjmBsQu/pvYuuQsgu7y
+mO/vTw9M5MlKTJ8KoNrTcswsz5ROEXtm9nPHJh+6cfWlJNJqoJDR3+eosOYP5y2
thJ4vrRqQALkCaQ1+ZJkCNJe4bGp
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:35 2025 by rpki-client