Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0787B212CD2011EF85024372762E951A.roa
File: 0787B212CD2011EF85024372762E951A.roa (raw, json)
Hash identifier: D+NbCYl7uljLQBXob5/+oZurK7tKPmnYs/vYvffkbOo=
Subject key identifier: 25:14:FE:B6:9A:9B:5F:02:74:C7:BF:E9:5D:83:C7:77:08:C3:7A:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0787B212CD2011EF85024372762E951A.roa
Signing time: Tue 07 Jan 2025 17:51:32 +0000
ROA not before: Tue 07 Jan 2025 17:51:28 +0000
ROA not after: Mon 13 Dec 2027 17:51:28 +0000
asID: 17561
IP address blocks: 156.241.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64875 (0xfd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 17:51:28 2025 GMT
Not After : Dec 13 17:51:28 2027 GMT
Subject: CN=677d69a4-810d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fa:91:a9:b4:85:12:1d:32:be:cd:92:fc:3b:
91:be:c2:21:d7:a4:e7:b5:2b:12:72:64:bd:94:2c:
c0:34:00:de:30:11:3b:b1:ea:d6:23:95:d3:58:82:
4f:1a:4e:f9:39:51:d3:dc:00:10:9a:4e:e7:d2:05:
4d:6b:3e:8c:de:08:6e:6c:d4:2f:4a:bb:e6:ce:34:
74:cb:69:ac:d2:d3:38:7e:4d:d9:90:0a:aa:09:10:
98:52:6c:28:90:63:dc:84:d7:87:f6:f0:9d:3a:dd:
4d:bd:1d:bf:2d:e5:dc:6f:19:78:36:24:78:c0:22:
ac:89:10:07:de:34:6e:32:6c:5b:cf:7f:a7:70:f2:
70:b6:f8:5c:d7:46:99:05:61:e6:e0:b4:a7:f8:ca:
6c:82:0a:df:f3:fb:d5:ba:d4:a5:db:24:0e:b6:f6:
85:8e:2c:11:68:77:8f:e6:6f:7f:13:5e:fa:00:b4:
c8:4f:aa:0c:08:14:32:04:ff:f9:bd:11:60:62:86:
92:72:fd:d7:8a:ce:b8:ba:9b:20:9c:d7:e5:56:39:
53:64:ed:bf:64:54:4a:99:2f:9f:d5:f4:6a:53:fb:
54:6c:76:7e:3e:91:da:b5:aa:aa:fb:1d:6e:ac:56:
44:71:56:57:ce:4a:a8:ca:28:9a:9c:d5:53:25:1d:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:FE:B6:9A:9B:5F:02:74:C7:BF:E9:5D:83:C7:77:08:C3:7A:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0787B212CD2011EF85024372762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:57:6a:d0:49:78:90:47:79:e2:a7:90:b4:b2:37:48:a7:5f:
7b:90:a1:a0:7a:4f:14:ce:41:ac:7f:97:ef:ea:5c:18:00:55:
1d:3f:c5:54:a2:96:51:da:47:57:ca:d6:ce:fb:99:42:f9:02:
4f:ae:da:87:f4:ed:ae:c7:a3:5a:9c:43:25:64:01:60:28:19:
ce:db:c9:1e:df:54:d6:13:73:a5:45:d3:f3:6f:96:3a:5d:65:
16:06:e1:4f:2d:74:01:d9:bd:1d:89:e9:bc:e0:9b:2b:1d:00:
cd:40:d5:1e:16:f7:2f:7c:72:3b:94:27:bc:37:f8:ce:5e:4a:
37:41:d8:9f:24:12:99:ee:3e:4e:6b:5c:98:df:0b:31:3c:7b:
4c:b2:c7:0d:11:70:66:db:c9:7b:2c:9d:10:ee:cf:e9:5b:d5:
20:db:be:6e:fd:96:07:34:c6:73:fe:43:dd:3b:92:b1:18:b8:
c6:ef:8e:a8:e7:da:1c:f6:52:5f:a8:35:a4:12:de:ca:61:37:
aa:18:2b:cc:7d:80:72:0f:8c:2a:bd:b0:32:a5:93:4a:6f:2c:
70:50:bd:53:6e:8d:55:11:59:51:fb:24:d2:b8:9b:ab:fe:7f:
00:80:dc:24:e1:4e:bc:5e:3a:e7:5b:92:4a:50:0e:0b:c8:ff:
2d:73:03:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP1rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTc1MTI4WhcNMjcxMjEzMTc1MTI4WjAYMRYw
FAYDVQQDEw02NzdkNjlhNC04MTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7/qRqbSFEh0yvs2S/DuRvsIh16TntSsScmS9lCzANADeMBE7serWI5XT
WIJPGk75OVHT3AAQmk7n0gVNaz6M3ghubNQvSrvmzjR0y2ms0tM4fk3ZkAqqCRCY
UmwokGPchNeH9vCdOt1NvR2/LeXcbxl4NiR4wCKsiRAH3jRuMmxbz3+ncPJwtvhc
10aZBWHm4LSn+Mpsggrf8/vVutSl2yQOtvaFjiwRaHeP5m9/E176ALTIT6oMCBQy
BP/5vRFgYoaScv3Xis64upsgnNflVjlTZO2/ZFRKmS+f1fRqU/tUbHZ+PpHataqq
+x1urFZEcVZXzkqoyiianNVTJR2upwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCUU
/raam18CdMe/6V2Dx3cIw3oYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNzg3QjIxMkNEMjAxMUVGODUwMjQzNzI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPE/MA0GCSqGSIb3DQEBCwUA
A4IBAQCaV2rQSXiQR3nip5C0sjdIp197kKGgek8UzkGsf5fv6lwYAFUdP8VUopZR
2kdXytbO+5lC+QJPrtqH9O2ux6NanEMlZAFgKBnO28ke31TWE3OlRdPzb5Y6XWUW
BuFPLXQB2b0diem84JsrHQDNQNUeFvcvfHI7lCe8N/jOXko3QdifJBKZ7j5Oa1yY
3wsxPHtMsscNEXBm28l7LJ0Q7s/pW9Ug275u/ZYHNMZz/kPdO5KxGLjG746o59oc
9lJfqDWkEt7KYTeqGCvMfYByD4wqvbAypZNKbyxwUL1Tbo1VEVlR+yTSuJur/n8A
gNwk4U68XjrnW5JKUA4LyP8tcwPt
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:44:47 2025 by rpki-client