Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/068D48B0C98B11EFAAEFE6BE762E951A.roa
File: 068D48B0C98B11EFAAEFE6BE762E951A.roa (raw, json)
Hash identifier: umGAzNDncYMNcaUeqdsj9rgXRWFvRkmwvacbt0gtTJc=
Subject key identifier: 4E:2C:77:AF:FD:DD:4D:C8:46:B3:4E:85:AF:6E:DD:CB:05:DD:77:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/068D48B0C98B11EFAAEFE6BE762E951A.roa
Signing time: Fri 03 Jan 2025 04:27:22 +0000
ROA not before: Fri 03 Jan 2025 04:27:18 +0000
ROA not after: Sat 13 Dec 2025 04:27:18 +0000
asID: 984
IP address blocks: 156.233.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62893 (0xf5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:27:18 2025 GMT
Not After : Dec 13 04:27:18 2025 GMT
Subject: CN=6777672a-7efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:72:4c:07:30:ee:76:7b:d0:4b:92:af:f5:
8c:1f:98:a9:5b:26:af:b2:64:6f:ff:a4:40:8b:e2:
4d:83:1a:29:9b:78:b6:25:98:3c:ee:6a:27:32:8f:
e0:aa:5a:92:05:e5:63:f2:4a:0f:6c:b4:96:81:8b:
03:51:0c:a4:27:a3:1d:cc:de:12:55:7f:a7:7f:5f:
d8:bf:79:24:b5:9f:38:02:fd:15:61:fb:b0:a4:c1:
2f:91:ff:b4:a2:8d:5a:63:4f:1f:eb:37:15:77:cd:
43:d0:52:32:66:58:99:ce:8b:36:ca:be:cf:74:14:
83:7d:54:78:6a:08:cf:da:63:50:a9:26:65:d1:e1:
80:e5:9c:be:8e:20:e7:ff:66:ef:48:33:6b:31:89:
a7:c7:10:f3:a6:08:9e:ab:45:ca:16:22:37:61:c6:
d6:b6:72:1f:41:82:fe:ae:3f:09:f8:f5:26:62:02:
af:4a:0d:f1:69:8f:6c:18:f1:aa:c7:d8:c4:0f:84:
9c:e1:66:c5:90:c7:95:4a:21:07:a6:48:61:e1:0a:
7d:1b:bd:e1:e4:7c:6c:cc:1c:32:5f:1a:06:22:e7:
7a:c1:f0:14:ee:01:4a:fa:c3:f7:a5:52:84:36:ed:
52:dd:5d:b6:91:27:83:f0:0a:5b:2f:ac:21:fc:ca:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2C:77:AF:FD:DD:4D:C8:46:B3:4E:85:AF:6E:DD:CB:05:DD:77:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/068D48B0C98B11EFAAEFE6BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.41.0/24
Signature Algorithm: sha256WithRSAEncryption
31:96:98:53:8c:5c:3b:cc:41:34:c6:c5:aa:df:b6:ec:7f:d0:
be:26:6e:1c:5c:7a:6f:69:bb:9b:f6:d5:f2:7f:22:34:63:7e:
57:41:eb:35:74:cf:cb:09:b6:41:5e:62:38:bc:1f:4d:02:54:
c1:c7:40:b3:f6:57:c1:c4:5b:a3:85:b9:75:89:cf:bb:6b:f5:
17:4d:b5:40:9f:6c:02:2c:68:09:8f:68:3b:e2:af:6c:c9:16:
a3:cb:5c:c4:eb:e4:99:73:7e:01:54:d8:5b:52:af:16:a0:21:
cf:82:ae:02:7f:ad:8a:c5:c7:bb:78:3b:a7:ed:7a:3a:0d:aa:
11:b4:20:1a:26:84:3f:90:bf:a2:42:e9:90:5a:bd:d3:08:6e:
92:e0:e2:c9:f8:a6:d7:40:f2:2b:79:8b:7b:20:5d:ad:9e:16:
f1:e6:4f:9e:56:12:cb:02:2f:d0:7b:ed:ac:18:78:a6:a1:a1:
6c:f0:7a:2a:d8:59:1e:63:a3:e9:d4:3b:1e:d4:f1:7a:8d:bd:
a8:a7:03:20:17:15:21:ed:05:33:40:41:61:1c:d9:ac:55:e9:
4c:f5:7c:56:fc:af:23:0f:d7:27:83:e5:77:55:86:d1:93:2a:
d2:d6:42:d6:20:26:38:e4:41:73:19:f0:cf:40:14:9b:ba:54:
72:30:d1:d7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPWtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDQyNzE4WhcNMjUxMjEzMDQyNzE4WjAYMRYw
FAYDVQQDEw02Nzc3NjcyYS03ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy4FyTAcw7nZ70EuSr/WMH5ipWyavsmRv/6RAi+JNgxopm3i2JZg87mon
Mo/gqlqSBeVj8koPbLSWgYsDUQykJ6MdzN4SVX+nf1/Yv3kktZ84Av0VYfuwpMEv
kf+0oo1aY08f6zcVd81D0FIyZliZzos2yr7PdBSDfVR4agjP2mNQqSZl0eGA5Zy+
jiDn/2bvSDNrMYmnxxDzpgieq0XKFiI3YcbWtnIfQYL+rj8J+PUmYgKvSg3xaY9s
GPGqx9jED4Sc4WbFkMeVSiEHpkhh4Qp9G73h5HxszBwyXxoGIud6wfAU7gFK+sP3
pVKENu1S3V22kSeD8ApbL6wh/MrcUQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFE4s
d6/93U3IRrNOha9u3csF3XcDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjhENDhCMEM5OEIxMUVGQUFFRkU2QkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkpMA0GCSqGSIb3DQEBCwUA
A4IBAQAxlphTjFw7zEE0xsWq37bsf9C+Jm4cXHpvabub9tXyfyI0Y35XQes1dM/L
CbZBXmI4vB9NAlTBx0Cz9lfBxFujhbl1ic+7a/UXTbVAn2wCLGgJj2g74q9syRaj
y1zE6+SZc34BVNhbUq8WoCHPgq4Cf62Kxce7eDun7Xo6DaoRtCAaJoQ/kL+iQumQ
Wr3TCG6S4OLJ+KbXQPIreYt7IF2tnhbx5k+eVhLLAi/Qe+2sGHimoaFs8Hoq2Fke
Y6Pp1Dse1PF6jb2opwMgFxUh7QUzQEFhHNmsVelM9XxW/K8jD9cng+V3VYbRkyrS
1kLWICY45EFzGfDPQBSbulRyMNHX
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:32 2025 by rpki-client