Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CAA3128CD0411EFBAB01043762E951A.roa
File: 0CAA3128CD0411EFBAB01043762E951A.roa (raw, json)
Hash identifier: +A5CWL4gpKLLD6pH0SWCHtmgTCKxu/4ll6/kYXilpDI=
Subject key identifier: D8:44:B5:31:ED:43:2F:B4:83:8B:99:D8:2E:52:BE:15:44:C4:26:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CAA3128CD0411EFBAB01043762E951A.roa
Signing time: Tue 07 Jan 2025 14:31:15 +0000
ROA not before: Tue 07 Jan 2025 14:31:11 +0000
ROA not after: Mon 13 Dec 2027 14:31:11 +0000
asID: 17561
IP address blocks: 156.238.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64649 (0xfc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 14:31:11 2025 GMT
Not After : Dec 13 14:31:11 2027 GMT
Subject: CN=677d3ab3-b201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b3:f8:53:46:1d:05:ed:2f:d7:d5:a2:75:5f:
fb:de:81:58:cd:56:c8:bd:33:e0:2f:32:34:49:db:
39:ad:17:88:80:62:e9:ff:da:4e:21:b4:3a:ef:08:
45:86:2c:d2:3d:a4:bb:e7:a9:24:86:89:ad:06:d5:
a8:82:45:cc:c2:eb:90:5d:61:41:47:60:2f:8e:94:
2d:4a:12:10:36:cf:93:0e:15:98:f9:50:77:ce:c6:
d7:d9:01:89:e1:5b:4a:92:c9:b1:e8:76:8a:93:e5:
97:83:7f:05:bf:5d:73:84:87:eb:b1:b5:32:1e:95:
22:d0:f2:53:61:c9:f0:29:05:ca:cf:0a:4b:82:bb:
bf:86:0c:cb:a0:73:03:e4:9d:b4:25:a4:22:7d:38:
46:f2:75:43:1f:85:25:92:37:8e:78:d9:9e:3b:e8:
7a:df:83:bf:b1:6c:c2:74:51:d7:31:3f:ce:b7:87:
7b:f4:1b:85:11:44:fb:92:ca:c1:fc:65:7e:34:d9:
f9:9d:7a:9f:86:c1:c7:35:eb:c4:c6:bd:fc:ab:0b:
aa:ab:d4:be:1e:d5:b6:f1:ea:71:38:c7:61:b2:50:
de:3f:1d:6b:31:cb:2b:df:79:57:0d:4b:f3:d2:51:
c3:c7:b5:5d:35:5d:86:b9:8a:4d:c9:99:f1:4a:22:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:B5:31:ED:43:2F:B4:83:8B:99:D8:2E:52:BE:15:44:C4:26:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CAA3128CD0411EFBAB01043762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:17:4f:38:b3:cd:b1:e4:5e:1e:f8:c2:5e:d4:46:d4:06:27:
9c:cf:8d:34:b1:bc:8f:cb:e7:e2:39:b1:a2:22:36:67:b6:09:
6b:09:cb:2c:d3:4e:6d:0a:1f:ed:44:c6:5b:d8:e4:82:76:fa:
63:7a:2f:b5:e9:84:64:62:5e:05:da:4f:28:a7:63:fc:eb:c0:
b5:b1:c4:43:95:1a:fa:7b:f0:c7:46:31:8f:fe:04:d8:ca:2a:
3d:d9:3f:0b:ec:57:47:3a:ad:b4:98:43:0d:d2:cc:41:f3:ab:
53:01:69:94:b6:ce:5b:11:40:9f:6b:d6:b9:e2:66:28:52:0e:
c8:e9:66:9e:74:28:f5:85:88:8a:99:0c:04:33:50:5e:cf:55:
f7:98:ed:a1:9a:0a:12:71:bd:5f:f0:2e:45:cf:cf:43:4d:4b:
cb:8b:34:a5:fc:4d:d4:17:1e:c5:e1:d9:02:01:09:92:4e:11:
c1:0a:05:c0:a8:34:2e:d7:e2:b7:83:c2:c6:5e:70:be:5f:f3:
c9:75:12:e1:bd:7e:fd:f3:11:4f:14:f2:ca:47:89:39:fd:a4:
c3:f8:7c:a4:b9:4a:a2:03:65:e1:fd:9d:61:33:90:1a:b9:9a:
a5:bf:0d:b3:f6:4d:12:16:4c:2c:a7:ad:e9:11:bf:bb:76:c7:
8f:2f:33:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPyJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTQzMTExWhcNMjcxMjEzMTQzMTExWjAYMRYw
FAYDVQQDEw02NzdkM2FiMy1iMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6LP4U0YdBe0v19WidV/73oFYzVbIvTPgLzI0Sds5rReIgGLp/9pOIbQ6
7whFhizSPaS756kkhomtBtWogkXMwuuQXWFBR2AvjpQtShIQNs+TDhWY+VB3zsbX
2QGJ4VtKksmx6HaKk+WXg38Fv11zhIfrsbUyHpUi0PJTYcnwKQXKzwpLgru/hgzL
oHMD5J20JaQifThG8nVDH4UlkjeOeNmeO+h634O/sWzCdFHXMT/Ot4d79BuFEUT7
ksrB/GV+NNn5nXqfhsHHNevExr38qwuqq9S+HtW28epxOMdhslDePx1rMcsr33lX
DUvz0lHDx7VdNV2GuYpNyZnxSiKtgwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNhE
tTHtQy+0g4uZ2C5SvhVExCYyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQ0FBMzEyOENEMDQxMUVGQkFCMDEwNDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO66MA0GCSqGSIb3DQEBCwUA
A4IBAQCoF084s82x5F4e+MJe1EbUBiecz400sbyPy+fiObGiIjZntglrCcss005t
Ch/tRMZb2OSCdvpjei+16YRkYl4F2k8op2P868C1scRDlRr6e/DHRjGP/gTYyio9
2T8L7FdHOq20mEMN0sxB86tTAWmUts5bEUCfa9a54mYoUg7I6WaedCj1hYiKmQwE
M1Bez1X3mO2hmgoScb1f8C5Fz89DTUvLizSl/E3UFx7F4dkCAQmSThHBCgXAqDQu
1+K3g8LGXnC+X/PJdRLhvX798xFPFPLKR4k5/aTD+HykuUqiA2Xh/Z1hM5AauZql
vw2z9k0SFkwsp63pEb+7dsePLzN8
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:47:23 2025 by rpki-client