Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/174A72ECCCFE11EFACD7FF9C762E951A.roa
File: 174A72ECCCFE11EFACD7FF9C762E951A.roa (raw, json)
Hash identifier: ZXVyJCWeAZz93dOaaCRDXun9WCesR0Ge7Zkyq++vlrE=
Subject key identifier: 40:79:97:DA:D5:38:FD:F5:B7:F0:77:49:91:CF:97:6C:45:D0:0D:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FC59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/174A72ECCCFE11EFACD7FF9C762E951A.roa
Signing time: Tue 07 Jan 2025 13:48:36 +0000
ROA not before: Tue 07 Jan 2025 13:48:32 +0000
ROA not after: Sat 13 Dec 2025 13:48:32 +0000
asID: 984
IP address blocks: 156.238.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64601 (0xfc59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 13:48:32 2025 GMT
Not After : Dec 13 13:48:32 2025 GMT
Subject: CN=677d30b4-eeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:59:98:23:79:63:f0:87:5f:36:76:06:23:88:
ce:b3:a9:a8:eb:8f:df:12:16:7d:0d:01:e8:e0:ae:
15:06:7b:1c:16:e7:ff:64:b0:55:c6:af:6b:24:84:
a7:c6:82:35:9d:5c:16:90:5e:0d:cc:16:92:7d:33:
59:f2:42:90:60:82:63:f7:71:e3:1d:52:93:18:b5:
77:6e:eb:99:5e:4f:68:ff:73:0a:0f:c7:9f:eb:bc:
6a:8b:cb:d5:18:18:e6:b1:c6:a4:15:77:1e:b6:c4:
33:1b:67:9f:f3:41:7c:a3:98:53:f5:74:54:d5:a6:
ec:b2:0e:11:a8:3d:9e:c5:a0:6b:40:08:e4:46:7a:
87:e1:62:d9:92:45:84:56:62:57:cc:f2:d0:df:0e:
ed:e9:9e:17:a1:fa:ec:a0:45:8d:96:23:a9:f0:68:
53:a3:1f:9e:8a:37:79:61:71:7b:e6:42:01:9e:4e:
5b:dd:ac:cd:57:57:e8:3b:76:d5:99:56:65:60:3c:
55:cd:27:53:69:8d:a8:54:c7:92:2f:df:73:1d:1e:
f7:a3:e0:1d:74:d0:e6:1c:f2:18:24:e7:df:36:53:
93:01:4a:f2:df:a4:33:fb:a8:ab:53:3e:79:fd:14:
b4:93:44:4b:1e:39:a2:20:76:49:30:62:cd:f0:bb:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:79:97:DA:D5:38:FD:F5:B7:F0:77:49:91:CF:97:6C:45:D0:0D:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/174A72ECCCFE11EFACD7FF9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:df:3f:4c:09:13:3a:02:94:9c:a1:24:13:7f:3d:d9:1c:83:
7f:0b:8c:68:2d:2d:d5:35:4c:84:f1:55:65:1a:3e:8b:6c:cd:
e9:7a:33:f6:5d:a8:b9:6f:a8:60:f4:cc:13:48:2d:ce:44:12:
ce:e7:bf:d7:2e:bb:f1:4b:4d:b4:3a:af:1a:91:21:3f:38:d6:
91:1b:5b:d8:be:f6:4c:18:78:2a:49:db:95:8c:c0:5f:68:7d:
00:c0:bf:bf:d8:86:21:b1:56:7f:e4:da:6d:95:b3:08:90:aa:
f6:02:46:15:a0:50:f1:00:f9:d1:16:d7:36:59:91:8d:4f:f8:
cd:8b:1e:1c:00:5a:7d:42:75:e9:d6:30:ce:65:b1:d2:74:21:
4c:2b:9f:72:75:89:32:be:2a:4f:96:10:82:a3:ee:9c:31:6d:
2a:aa:4e:e4:83:c7:c4:07:32:75:d6:a0:f5:cc:54:5d:b6:9a:
99:0d:10:da:4f:ab:48:68:78:89:73:4c:11:72:32:d0:0f:0a:
36:25:01:d1:08:19:33:93:15:26:36:5f:df:d7:05:94:8a:3e:
b8:f0:3f:ce:74:f1:f7:0c:8f:d5:b7:10:ca:25:98:84:95:42:
58:fe:ae:80:cf:77:f0:67:65:a8:92:a1:c0:d8:70:e0:ca:d0:
6d:b0:d0:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPxZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTM0ODMyWhcNMjUxMjEzMTM0ODMyWjAYMRYw
FAYDVQQDEw02NzdkMzBiNC1lZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+1mYI3lj8IdfNnYGI4jOs6mo64/fEhZ9DQHo4K4VBnscFuf/ZLBVxq9r
JISnxoI1nVwWkF4NzBaSfTNZ8kKQYIJj93HjHVKTGLV3buuZXk9o/3MKD8ef67xq
i8vVGBjmscakFXcetsQzG2ef80F8o5hT9XRU1abssg4RqD2exaBrQAjkRnqH4WLZ
kkWEVmJXzPLQ3w7t6Z4XofrsoEWNliOp8GhTox+eijd5YXF75kIBnk5b3azNV1fo
O3bVmVZlYDxVzSdTaY2oVMeSL99zHR73o+AddNDmHPIYJOffNlOTAUry36Qz+6ir
Uz55/RS0k0RLHjmiIHZJMGLN8LvvcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEB5
l9rVOP31t/B3SZHPl2xF0A0eMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNzRBNzJFQ0NDRkUxMUVGQUNEN0ZGOUM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5lMA0GCSqGSIb3DQEBCwUA
A4IBAQCK3z9MCRM6ApScoSQTfz3ZHIN/C4xoLS3VNUyE8VVlGj6LbM3pejP2Xai5
b6hg9MwTSC3ORBLO57/XLrvxS020Oq8akSE/ONaRG1vYvvZMGHgqSduVjMBfaH0A
wL+/2IYhsVZ/5NptlbMIkKr2AkYVoFDxAPnRFtc2WZGNT/jNix4cAFp9QnXp1jDO
ZbHSdCFMK59ydYkyvipPlhCCo+6cMW0qqk7kg8fEBzJ11qD1zFRdtpqZDRDaT6tI
aHiJc0wRcjLQDwo2JQHRCBkzkxUmNl/f1wWUij648D/OdPH3DI/VtxDKJZiElUJY
/q6Az3fwZ2WokqHA2HDgytBtsNAh
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:44 2025 by rpki-client