Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD519DCC33011EF92684B49762E951A.roa
File: 1DD519DCC33011EF92684B49762E951A.roa (raw, json)
Hash identifier: u/Dnj8i75P4zh32A6v1Yb4+nox2Y7AmJekP4imMg0P4=
Subject key identifier: 6B:A3:5A:EA:7E:FD:F0:3F:E1:80:B5:B4:80:3B:70:D2:4D:3E:F9:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD519DCC33011EF92684B49762E951A.roa
Signing time: Thu 26 Dec 2024 02:21:30 +0000
ROA not before: Thu 26 Dec 2024 02:21:26 +0000
ROA not after: Wed 10 Dec 2025 02:21:26 +0000
asID: 984
IP address blocks: 156.243.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60163 (0xeb03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:21:26 2024 GMT
Not After : Dec 10 02:21:26 2025 GMT
Subject: CN=676cbdaa-6f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:c9:26:93:76:c9:1c:9c:b3:70:d8:9e:57:
00:9b:09:69:7e:0e:76:fd:23:3c:1e:3b:10:43:a2:
c5:43:00:d8:c5:c8:a4:a1:ba:dd:b9:ab:80:75:d1:
7e:89:c4:e8:a9:d0:1f:b9:a7:b9:65:ad:a3:6c:f8:
51:42:b5:28:a5:d7:c9:bf:ba:43:58:f9:4e:b6:b8:
07:72:08:72:9e:49:a6:df:89:e9:13:a9:bf:c5:c7:
c1:d5:84:b9:5f:85:33:25:5d:35:b1:19:10:6a:10:
14:eb:e4:8b:63:81:38:39:f6:19:b8:68:34:41:15:
e8:64:5b:4a:c7:ce:f0:eb:61:ca:4f:40:d1:67:bf:
de:69:86:74:bc:44:44:d6:5c:13:80:e8:e4:fe:de:
8c:2d:7c:6a:fa:60:b0:2f:7e:7c:19:f5:54:ce:e9:
a2:af:6f:d4:ed:1b:d7:ed:fe:c9:b4:b4:c0:b8:09:
c9:63:d7:e6:0b:a6:c3:88:a4:32:c1:be:e2:55:6c:
8e:e9:d8:7a:8c:c1:54:cc:b7:d8:51:1f:e6:2e:c4:
64:4f:40:a2:9e:39:1b:45:9b:30:83:e4:c7:5f:76:
ea:1d:c4:fb:a6:d1:5d:a2:c3:50:c3:40:66:eb:b6:
65:a7:da:5f:21:57:34:ef:9e:a6:26:dd:80:e3:fa:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:5A:EA:7E:FD:F0:3F:E1:80:B5:B4:80:3B:70:D2:4D:3E:F9:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DD519DCC33011EF92684B49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.238.0/24
Signature Algorithm: sha256WithRSAEncryption
18:33:24:63:fa:f3:e6:c7:b0:14:f4:87:73:22:3f:c2:d3:4e:
9d:79:fd:65:06:d2:e4:ab:46:c3:89:5e:a6:5f:ff:c9:81:4a:
fc:7c:ef:2b:85:55:96:fc:6a:24:55:d0:28:a6:e8:98:8e:60:
ec:73:c7:e0:61:11:55:0f:38:2c:d2:5e:00:3f:82:d8:03:8d:
57:eb:9a:c3:7f:9d:95:6b:6f:45:7d:18:6a:06:e5:51:da:b6:
25:19:e6:52:40:bb:db:04:3c:16:75:9a:41:9b:b3:14:aa:a4:
34:97:f9:b2:54:64:6f:32:d9:da:7f:b7:ec:09:63:d3:6f:7d:
38:56:ff:7c:d2:ca:43:f3:53:74:17:5d:3e:5e:ca:d7:b9:3a:
9a:cb:32:6b:06:ce:11:c5:c0:3e:77:c6:17:e3:da:ab:fe:92:
3a:56:8a:ba:4f:73:ae:e2:a1:c6:62:c1:d4:29:e2:21:48:35:
81:c6:aa:ca:38:4a:7d:63:d8:cd:53:fb:d9:c4:40:f8:6e:0b:
ca:46:19:e6:66:fb:93:30:29:24:15:ca:50:78:f9:7b:f2:84:
35:99:24:6f:45:c8:04:85:dd:52:83:ec:e8:41:9d:56:66:56:
fb:65:de:f4:e3:72:6b:96:a3:f1:89:50:3e:b7:a7:80:21:d2:
32:28:55:15
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOsDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDIyMTI2WhcNMjUxMjEwMDIyMTI2WjAYMRYw
FAYDVQQDEw02NzZjYmRhYS02ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAulHJJpN2yRycs3DYnlcAmwlpfg52/SM8HjsQQ6LFQwDYxcikobrduauA
ddF+icToqdAfuae5Za2jbPhRQrUopdfJv7pDWPlOtrgHcghynkmm34npE6m/xcfB
1YS5X4UzJV01sRkQahAU6+SLY4E4OfYZuGg0QRXoZFtKx87w62HKT0DRZ7/eaYZ0
vERE1lwTgOjk/t6MLXxq+mCwL358GfVUzumir2/U7RvX7f7JtLTAuAnJY9fmC6bD
iKQywb7iVWyO6dh6jMFUzLfYUR/mLsRkT0CinjkbRZswg+THX3bqHcT7ptFdosNQ
w0Bm67Zlp9pfIVc0756mJt2A4/rnHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGuj
Wup+/fA/4YC1tIA7cNJNPvmFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xREQ1MTlEQ0MzMzAxMUVGOTI2ODRCNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPPuMA0GCSqGSIb3DQEBCwUA
A4IBAQAYMyRj+vPmx7AU9IdzIj/C006def1lBtLkq0bDiV6mX//JgUr8fO8rhVWW
/GokVdAopuiYjmDsc8fgYRFVDzgs0l4AP4LYA41X65rDf52Va29FfRhqBuVR2rYl
GeZSQLvbBDwWdZpBm7MUqqQ0l/myVGRvMtnaf7fsCWPTb304Vv980spD81N0F10+
XsrXuTqayzJrBs4RxcA+d8YX49qr/pI6Voq6T3Ou4qHGYsHUKeIhSDWBxqrKOEp9
Y9jNU/vZxED4bgvKRhnmZvuTMCkkFcpQePl78oQ1mSRvRcgEhd1Sg+zoQZ1WZlb7
Zd7043JrlqPxiVA+t6eAIdIyKFUV
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:19 2025 by rpki-client