Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102D5F5CCDA211EF91B183BA762E951A.roa
File: 102D5F5CCDA211EF91B183BA762E951A.roa (raw, json)
Hash identifier: UGPQQL4Kvtfu6JROdSOdgU9CF2uUkIDTM/Bt9uQOnDw=
Subject key identifier: D6:3B:B8:DB:5D:B9:92:7E:85:0D:02:E5:B4:92:59:79:22:9D:08:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102D5F5CCDA211EF91B183BA762E951A.roa
Signing time: Wed 08 Jan 2025 09:22:21 +0000
ROA not before: Wed 08 Jan 2025 09:22:18 +0000
ROA not after: Tue 16 Dec 2025 09:22:18 +0000
asID: 984
IP address blocks: 156.249.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65771 (0x100eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:22:18 2025 GMT
Not After : Dec 16 09:22:18 2025 GMT
Subject: CN=677e43cd-9fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:74:9a:b7:cf:57:b3:9d:8f:b6:0e:6b:32:
4a:e3:f8:28:2b:ef:f7:72:48:cd:31:69:27:ae:da:
e8:ba:21:29:e1:65:97:76:df:92:90:b1:2c:80:84:
40:de:6e:35:25:5c:bc:1e:8c:53:b2:fd:7b:5d:e9:
ff:e9:bd:fa:88:c0:62:f8:fb:7a:30:94:79:a8:63:
39:fc:9e:bf:08:12:98:79:a1:e0:0d:f2:2d:a7:5c:
0a:a0:f7:28:d2:85:be:8c:90:c9:3b:fa:a1:44:2f:
81:0c:68:4a:57:8f:57:1d:ba:0b:29:87:8c:2d:51:
aa:9b:d0:1f:dc:3c:7f:f3:cc:84:b2:e7:4a:f8:9a:
48:7d:a2:d8:48:17:c1:5a:ca:ae:94:ff:fa:ab:c5:
b4:74:8d:3e:90:65:12:23:39:95:f4:ab:3f:b8:55:
e5:c3:85:45:c7:37:bf:55:6b:7e:48:09:06:b6:28:
a1:0b:59:19:1d:81:e7:28:13:6c:b5:06:ed:96:b9:
70:57:b5:d4:ff:33:e7:ed:4a:0c:5a:8e:21:29:be:
14:0c:18:54:9c:52:bc:28:f4:66:86:56:13:26:28:
69:d8:70:e0:8b:51:40:9d:a8:07:7a:a5:c3:f2:92:
fc:7a:0c:c2:0b:87:03:ad:ef:5e:d0:b7:31:04:7f:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:B8:DB:5D:B9:92:7E:85:0D:02:E5:B4:92:59:79:22:9D:08:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102D5F5CCDA211EF91B183BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.120.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d4:66:2d:51:09:02:bc:3c:fd:58:55:da:5e:ce:7c:a9:d9:
71:5d:8d:13:4e:09:38:c0:d0:76:ef:de:5d:53:f4:db:04:94:
34:e7:e4:99:f4:a8:f3:5b:a9:d5:cf:7e:64:e9:31:38:2b:ef:
b3:eb:2e:63:cb:64:08:5e:1f:67:db:08:59:a8:6d:24:a7:70:
a3:15:47:13:6d:c8:f8:33:44:1e:ce:cc:09:d6:1e:c8:f4:a2:
21:d5:c9:33:3f:63:41:bf:15:4f:c5:aa:80:4e:8b:3c:06:4e:
ef:a3:4d:88:cf:ac:b8:70:36:af:0e:3b:a3:3c:84:bc:86:05:
45:40:62:e1:f7:8b:95:19:76:bc:ab:9f:05:61:b6:99:ab:d6:
71:be:35:d1:9c:32:c1:6e:08:69:74:64:a3:ce:55:f8:25:50:
55:ce:75:14:3f:fd:14:30:b4:27:6c:ba:28:6f:14:e0:db:98:
8e:46:f0:91:10:dd:b3:4d:f6:3c:56:8a:08:86:03:8e:e4:e6:
e6:0b:0a:42:3f:30:b0:ba:fa:11:7b:ca:e4:90:d1:3e:5d:d9:
90:49:55:aa:a4:31:36:21:ff:7f:91:d5:96:25:2b:1c:91:cf:
6a:52:ec:68:a6:4c:b7:a7:99:1c:20:30:33:e1:48:ad:c3:83:
1b:c3:f5:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQDrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDkyMjE4WhcNMjUxMjE2MDkyMjE4WjAYMRYw
FAYDVQQDEw02NzdlNDNjZC05ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlPt0mrfPV7Odj7YOazJK4/goK+/3ckjNMWknrtrouiEp4WWXdt+SkLEs
gIRA3m41JVy8HoxTsv17Xen/6b36iMBi+Pt6MJR5qGM5/J6/CBKYeaHgDfItp1wK
oPco0oW+jJDJO/qhRC+BDGhKV49XHboLKYeMLVGqm9Af3Dx/88yEsudK+JpIfaLY
SBfBWsqulP/6q8W0dI0+kGUSIzmV9Ks/uFXlw4VFxze/VWt+SAkGtiihC1kZHYHn
KBNstQbtlrlwV7XU/zPn7UoMWo4hKb4UDBhUnFK8KPRmhlYTJihp2HDgi1FAnagH
eqXD8pL8egzCC4cDre9e0LcxBH/QmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNY7
uNtduZJ+hQ0C5bSSWXkinQjXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDJENUY1Q0NEQTIxMUVGOTFCMTgzQkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPl4MA0GCSqGSIb3DQEBCwUA
A4IBAQCe1GYtUQkCvDz9WFXaXs58qdlxXY0TTgk4wNB2795dU/TbBJQ05+SZ9Kjz
W6nVz35k6TE4K++z6y5jy2QIXh9n2whZqG0kp3CjFUcTbcj4M0QezswJ1h7I9KIh
1ckzP2NBvxVPxaqATos8Bk7vo02Iz6y4cDavDjujPIS8hgVFQGLh94uVGXa8q58F
YbaZq9ZxvjXRnDLBbghpdGSjzlX4JVBVznUUP/0UMLQnbLoobxTg25iORvCREN2z
TfY8VooIhgOO5ObmCwpCPzCwuvoRe8rkkNE+XdmQSVWqpDE2If9/kdWWJSsckc9q
Uuxopky3p5kcIDAz4Uitw4Mbw/X0
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:09 2025 by rpki-client