Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37F49710C97B11EFA1691054762E951A.roa
File: 37F49710C97B11EFA1691054762E951A.roa (raw, json)
Hash identifier: +heIlRGEEDtc5ZR+1n+qzzSBASERLmTSvv4F3BRQlGs=
Subject key identifier: 3F:E9:DB:62:A1:C4:20:89:76:CE:A6:0C:EB:DE:14:6A:11:71:B2:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F517
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37F49710C97B11EFA1691054762E951A.roa
Signing time: Fri 03 Jan 2025 02:34:13 +0000
ROA not before: Fri 03 Jan 2025 02:34:09 +0000
ROA not after: Sat 13 Dec 2025 02:34:09 +0000
asID: 984
IP address blocks: 156.227.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62743 (0xf517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:34:09 2025 GMT
Not After : Dec 13 02:34:09 2025 GMT
Subject: CN=67774ca5-d10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:9e:71:84:aa:7e:82:89:4a:8e:b4:9c:18:
6a:44:8d:39:e7:08:a6:5b:29:33:08:f1:d4:0f:59:
89:fe:71:12:7e:e6:18:5a:cc:0a:8c:16:23:38:e9:
6d:30:b8:39:9c:16:f6:24:3b:03:83:03:0e:89:20:
8a:23:88:60:ef:71:e7:4f:c1:c0:c7:ca:bb:42:1f:
bc:46:17:ab:0e:53:de:f6:df:5c:02:47:e6:48:8d:
bb:43:bf:1a:19:33:6c:3e:b2:4c:18:59:15:d7:ad:
aa:1f:02:09:df:97:1c:83:9a:60:c4:7a:65:01:62:
50:39:b9:b4:50:2f:93:da:72:ae:86:59:c8:8c:f2:
7b:45:3d:fc:21:5c:6e:e8:bc:4b:a4:ca:53:82:ec:
f4:17:c7:b8:6b:6c:36:69:80:36:a7:b9:32:49:59:
62:65:6b:99:8d:47:f7:ed:26:02:bf:e3:55:d0:2f:
cc:d0:6c:c8:f7:f2:54:64:b7:04:86:88:14:14:d3:
e3:b3:b9:85:1d:f8:ad:13:6c:75:24:3f:ec:86:07:
01:78:f4:d0:8e:ee:7e:f8:31:34:34:73:f1:9c:13:
d9:e9:ff:fc:3f:44:f6:d7:9f:5f:70:46:d5:e0:ff:
22:ba:18:42:f9:df:27:ce:8d:e3:81:e7:bb:56:a4:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E9:DB:62:A1:C4:20:89:76:CE:A6:0C:EB:DE:14:6A:11:71:B2:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37F49710C97B11EFA1691054762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.125.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c6:7d:a7:11:b2:c3:b8:27:75:67:84:4e:d2:8a:7d:a2:47:
9a:60:06:9b:57:6f:86:bd:99:ef:ff:56:c3:b6:49:f4:8c:78:
00:37:ee:8d:21:e5:38:5d:9f:90:3b:16:fb:0f:4e:cd:4d:a2:
98:77:1f:0f:39:80:7d:21:fb:82:0e:ab:03:ce:42:52:e0:eb:
f3:59:9b:bb:7a:43:e9:9c:a8:8d:be:75:cd:b8:d5:bd:aa:bd:
96:df:85:06:a3:74:5b:c8:65:f8:c1:df:41:89:18:3e:3e:cc:
d5:ac:ce:a0:2c:23:a2:a5:8c:4b:53:78:4c:66:24:8b:6b:8f:
75:dc:a2:78:71:3f:b2:50:99:7e:c6:22:2e:d4:54:ca:40:10:
2c:cc:20:81:e6:7e:d3:c1:00:dd:ad:5e:37:71:75:75:d5:de:
6d:6a:7a:0b:90:9c:c9:75:3a:76:03:f8:5f:2b:d1:b3:bb:cc:
0f:b2:f3:c4:09:12:60:b2:b5:24:ae:fd:d7:ae:c7:c6:09:33:
87:84:67:93:5c:51:5d:46:f8:1f:71:7a:10:bb:c0:d2:e5:cb:
6b:8f:e9:7f:10:30:e9:c3:01:6c:26:f7:d3:49:01:ae:b1:61:
4d:9b:71:c7:b2:3e:4f:cf:c1:6e:e7:98:76:1c:36:91:78:a6:
0a:78:c0:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPUXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDIzNDA5WhcNMjUxMjEzMDIzNDA5WjAYMRYw
FAYDVQQDEw02Nzc3NGNhNS1kMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy6CecYSqfoKJSo60nBhqRI055wimWykzCPHUD1mJ/nESfuYYWswKjBYj
OOltMLg5nBb2JDsDgwMOiSCKI4hg73HnT8HAx8q7Qh+8RherDlPe9t9cAkfmSI27
Q78aGTNsPrJMGFkV162qHwIJ35ccg5pgxHplAWJQObm0UC+T2nKuhlnIjPJ7RT38
IVxu6LxLpMpTguz0F8e4a2w2aYA2p7kySVliZWuZjUf37SYCv+NV0C/M0GzI9/JU
ZLcEhogUFNPjs7mFHfitE2x1JD/shgcBePTQju5++DE0NHPxnBPZ6f/8P0T2159f
cEbV4P8iuhhC+d8nzo3jgee7VqTgswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD/p
22KhxCCJds6mDOveFGoRcbInMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zN0Y0OTcxMEM5N0IxMUVGQTE2OTEwNTQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnON9MA0GCSqGSIb3DQEBCwUA
A4IBAQAjxn2nEbLDuCd1Z4RO0op9okeaYAabV2+GvZnv/1bDtkn0jHgAN+6NIeU4
XZ+QOxb7D07NTaKYdx8POYB9IfuCDqsDzkJS4OvzWZu7ekPpnKiNvnXNuNW9qr2W
34UGo3RbyGX4wd9BiRg+PszVrM6gLCOipYxLU3hMZiSLa4913KJ4cT+yUJl+xiIu
1FTKQBAszCCB5n7TwQDdrV43cXV11d5tanoLkJzJdTp2A/hfK9Gzu8wPsvPECRJg
srUkrv3XrsfGCTOHhGeTXFFdRvgfcXoQu8DS5ctrj+l/EDDpwwFsJvfTSQGusWFN
m3HHsj5Pz8Fu55h2HDaReKYKeMC3
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:06 2025 by rpki-client