Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D8D4442CCA611EFBDC13973762E951A.roa
File: 2D8D4442CCA611EFBDC13973762E951A.roa (raw, json)
Hash identifier: SBQfq4+NPCPW0tD9KqisleXf2c/jBDVTthnrMZn2UZM=
Subject key identifier: 7A:F7:07:40:E1:58:1E:D7:C5:06:41:8C:CE:4C:A6:E9:5B:01:34:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F9C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D8D4442CCA611EFBDC13973762E951A.roa
Signing time: Tue 07 Jan 2025 03:19:17 +0000
ROA not before: Tue 07 Jan 2025 03:19:14 +0000
ROA not after: Sat 13 Dec 2025 03:19:14 +0000
asID: 984
IP address blocks: 156.229.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63936 (0xf9c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 03:19:14 2025 GMT
Not After : Dec 13 03:19:14 2025 GMT
Subject: CN=677c9d35-7da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:2a:a8:28:84:32:8f:6b:d2:66:c7:49:6c:
27:ac:93:20:e6:c8:60:d3:eb:14:dc:9b:d8:17:85:
20:76:e8:e7:4f:19:8e:fb:0a:bb:c1:78:7a:a9:41:
73:44:a2:08:9b:b5:42:03:50:37:4a:e0:43:ce:0f:
9e:96:86:35:a4:4b:1c:62:bd:bb:dc:9a:de:82:25:
33:fb:d2:87:0d:9a:6d:8c:77:3a:5b:1e:09:35:87:
22:c2:4c:95:7a:fd:e1:2c:7d:7f:37:53:6b:11:93:
40:32:b2:ca:c0:72:85:4e:a0:67:92:a9:9b:42:72:
29:3d:54:8c:30:f2:65:cf:c9:36:54:40:a8:14:78:
dc:7a:6e:eb:ad:02:d1:50:55:66:cd:0d:fe:7e:9e:
e3:ae:a0:11:08:24:99:08:ea:6c:a6:4a:4c:44:b1:
8c:da:84:78:4a:03:ae:84:fe:81:ba:4b:e3:d3:95:
c3:ff:0a:17:83:d5:8b:9e:5b:fe:07:7d:5c:c5:61:
22:2b:f0:cb:e1:f4:f7:66:cf:bf:bd:95:39:d1:bf:
9a:1e:1c:f4:b2:3f:98:c6:ea:a2:5b:bf:24:0d:da:
0f:7c:82:b2:c0:2c:8e:33:d5:18:61:33:69:c6:4f:
71:48:8c:2f:49:cc:f2:b0:a3:b8:b4:29:64:9d:fb:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:07:40:E1:58:1E:D7:C5:06:41:8C:CE:4C:A6:E9:5B:01:34:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D8D4442CCA611EFBDC13973762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.243.0/24
Signature Algorithm: sha256WithRSAEncryption
28:de:ee:d6:bc:91:a4:6d:be:35:44:2c:13:d2:c0:30:13:70:
22:31:f8:51:2b:75:18:d0:60:77:f3:84:e5:7c:77:35:28:7e:
2f:9e:18:13:1a:81:74:e1:16:02:2e:9d:f2:1e:13:3b:0f:5d:
b2:d9:f3:e8:e6:93:4e:dd:b4:dc:86:45:d2:fc:27:d3:90:ce:
3a:d8:f7:6c:89:08:b2:65:ba:ab:3b:af:46:2e:4d:3c:7b:e3:
1b:a2:66:04:0a:9b:2c:1d:23:27:db:64:68:e3:35:c8:58:85:
0a:a7:73:db:b8:2c:9d:db:02:de:23:2a:45:42:e9:25:c0:14:
f0:55:67:a1:d2:b6:58:6b:c7:25:9c:82:f3:62:0a:9c:3d:7b:
b1:68:28:1d:6a:18:ca:7c:0a:cc:e9:91:6b:7c:ab:3c:a8:cf:
ac:c5:87:95:d7:37:0b:2e:f5:74:94:0a:09:cb:d1:18:46:2f:
7b:aa:32:76:78:64:70:0d:17:0b:8b:05:3c:ee:1f:a2:0a:0a:
5b:32:ed:ca:a7:42:53:18:09:27:d1:50:df:57:9d:96:93:9f:
80:4a:ff:70:2a:06:b1:15:dc:85:b4:20:c7:a3:06:86:74:42:
94:2f:ad:a2:9a:02:bf:65:4c:d7:d9:66:f2:48:91:23:92:6e:
2b:59:ad:51
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPnAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDMxOTE0WhcNMjUxMjEzMDMxOTE0WjAYMRYw
FAYDVQQDEw02NzdjOWQzNS03ZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAl2YqqCiEMo9r0mbHSWwnrJMg5shg0+sU3JvYF4UgdujnTxmO+wq7wXh6
qUFzRKIIm7VCA1A3SuBDzg+eloY1pEscYr273JregiUz+9KHDZptjHc6Wx4JNYci
wkyVev3hLH1/N1NrEZNAMrLKwHKFTqBnkqmbQnIpPVSMMPJlz8k2VECoFHjcem7r
rQLRUFVmzQ3+fp7jrqARCCSZCOpspkpMRLGM2oR4SgOuhP6Bukvj05XD/woXg9WL
nlv+B31cxWEiK/DL4fT3Zs+/vZU50b+aHhz0sj+YxuqiW78kDdoPfIKywCyOM9UY
YTNpxk9xSIwvSczysKO4tClknfupVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHr3
B0DhWB7XxQZBjM5MpulbATSSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRDhENDQ0MkNDQTYxMUVGQkRDMTM5NzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOXzMA0GCSqGSIb3DQEBCwUA
A4IBAQAo3u7WvJGkbb41RCwT0sAwE3AiMfhRK3UY0GB384TlfHc1KH4vnhgTGoF0
4RYCLp3yHhM7D12y2fPo5pNO3bTchkXS/CfTkM462PdsiQiyZbqrO69GLk08e+Mb
omYECpssHSMn22Ro4zXIWIUKp3PbuCyd2wLeIypFQuklwBTwVWeh0rZYa8clnILz
YgqcPXuxaCgdahjKfArM6ZFrfKs8qM+sxYeV1zcLLvV0lAoJy9EYRi97qjJ2eGRw
DRcLiwU87h+iCgpbMu3Kp0JTGAkn0VDfV52Wk5+ASv9wKgaxFdyFtCDHowaGdEKU
L62imgK/ZUzX2WbySJEjkm4rWa1R
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:50 2025 by rpki-client