Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A47C882CD0B11EFB0526D70762E951A.roa
File: 3A47C882CD0B11EFB0526D70762E951A.roa (raw, json)
Hash identifier: PsML0oaDfPX7RATbFxNYGqn4n54ZmTOmmJu0xQGwI64=
Subject key identifier: FA:61:F5:FC:5F:62:5B:0A:DE:98:D2:67:10:05:FB:DA:34:50:10:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FCC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A47C882CD0B11EFB0526D70762E951A.roa
Signing time: Tue 07 Jan 2025 15:22:38 +0000
ROA not before: Tue 07 Jan 2025 15:22:34 +0000
ROA not after: Mon 13 Dec 2027 15:22:34 +0000
asID: 17561
IP address blocks: 156.239.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64707 (0xfcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 15:22:34 2025 GMT
Not After : Dec 13 15:22:34 2027 GMT
Subject: CN=677d46be-7e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:c6:26:e5:fb:87:61:a1:c2:27:85:85:eb:
60:83:15:22:ac:e7:b0:dd:90:73:1d:71:7c:35:92:
dc:41:91:d3:ae:37:c1:07:48:b6:81:b9:72:de:6a:
c8:eb:a0:28:ad:55:32:2b:d4:f9:ad:4d:a2:3c:27:
27:fe:b0:48:1f:7b:b6:cd:ab:8f:1c:8a:3d:67:af:
75:5f:c2:f7:d7:c9:e8:06:a7:4d:1b:d8:5b:43:dc:
c6:92:76:48:f1:21:6e:bf:ba:9a:53:56:94:02:a1:
49:13:e9:8a:1e:31:62:15:8b:9f:d9:2e:1f:5e:cd:
20:77:58:56:16:d0:a2:3b:c4:00:b0:c8:67:4e:3a:
35:21:52:2f:42:9e:4e:af:96:70:b7:1e:88:37:0b:
d3:d3:63:91:bd:7e:42:c9:53:02:48:89:78:90:72:
4f:39:de:d2:de:07:67:db:c7:17:69:cb:3a:a1:2d:
f5:af:ba:8f:e8:de:e5:84:80:67:f1:7a:7b:e9:60:
15:31:89:19:f2:47:e2:96:44:7a:8e:a8:bc:27:16:
27:63:0f:9c:7f:03:f2:bd:8e:bb:ff:32:7e:12:49:
3a:38:8f:d8:57:ac:f4:f7:f7:41:3c:d3:ec:6b:d5:
a2:e4:c2:b2:b1:49:9c:be:a3:2b:2e:b6:2d:39:79:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:F5:FC:5F:62:5B:0A:DE:98:D2:67:10:05:FB:DA:34:50:10:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A47C882CD0B11EFB0526D70762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.51.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d6:63:08:88:40:89:8e:65:10:a8:d3:ce:1b:2b:dd:73:5a:
db:9b:18:23:44:88:fd:9c:5a:3c:86:17:51:7c:4d:21:38:b9:
7f:bd:3f:35:de:9f:d4:3b:fa:54:26:63:a1:38:75:46:2f:36:
b5:59:b3:37:76:79:28:fe:b6:e9:f5:e0:e4:76:03:4b:8b:33:
93:4c:92:89:9d:4e:08:7b:58:3f:c0:1c:38:27:de:ef:da:00:
a9:ae:c8:6a:9f:a4:a1:b9:4c:67:f1:82:6b:00:cd:21:e4:48:
f2:f4:4a:c0:4d:7e:ce:31:e6:39:89:da:37:78:b0:6b:4c:da:
53:3d:eb:55:ae:b2:72:0c:72:d4:ed:46:e1:7f:61:32:3d:8c:
39:8d:0a:73:e0:5f:7e:4b:05:7b:ad:91:d0:00:00:7f:15:60:
85:6b:9a:fe:8e:2c:bf:aa:9b:0c:2a:bc:01:84:a8:b6:28:7f:
2e:10:34:6c:59:ff:26:e7:cb:7f:9d:b2:01:87:63:7c:77:ec:
75:55:de:9b:30:c2:a6:a6:8a:db:ba:03:e6:2e:aa:6b:25:f7:
3a:52:f1:2f:f3:78:f0:62:ac:c4:41:26:6d:b7:42:df:25:5d:
5d:23:63:92:ec:a0:bd:5b:74:aa:3e:50:69:40:d1:b1:11:5a:
82:ee:4c:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPzDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTUyMjM0WhcNMjcxMjEzMTUyMjM0WjAYMRYw
FAYDVQQDEw02NzdkNDZiZS03ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzOLGJuX7h2GhwieFhetggxUirOew3ZBzHXF8NZLcQZHTrjfBB0i2gbly
3mrI66AorVUyK9T5rU2iPCcn/rBIH3u2zauPHIo9Z691X8L318noBqdNG9hbQ9zG
knZI8SFuv7qaU1aUAqFJE+mKHjFiFYuf2S4fXs0gd1hWFtCiO8QAsMhnTjo1IVIv
Qp5Or5Zwtx6INwvT02ORvX5CyVMCSIl4kHJPOd7S3gdn28cXacs6oS31r7qP6N7l
hIBn8Xp76WAVMYkZ8kfilkR6jqi8JxYnYw+cfwPyvY67/zJ+Ekk6OI/YV6z09/dB
PNPsa9Wi5MKysUmcvqMrLrYtOXlhjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPph
9fxfYlsK3pjSZxAF+9o0UBCHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQTQ3Qzg4MkNEMEIxMUVGQjA1MjZENzA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO8zMA0GCSqGSIb3DQEBCwUA
A4IBAQA31mMIiECJjmUQqNPOGyvdc1rbmxgjRIj9nFo8hhdRfE0hOLl/vT813p/U
O/pUJmOhOHVGLza1WbM3dnko/rbp9eDkdgNLizOTTJKJnU4Ie1g/wBw4J97v2gCp
rshqn6ShuUxn8YJrAM0h5Ejy9ErATX7OMeY5ido3eLBrTNpTPetVrrJyDHLU7Ubh
f2EyPYw5jQpz4F9+SwV7rZHQAAB/FWCFa5r+jiy/qpsMKrwBhKi2KH8uEDRsWf8m
58t/nbIBh2N8d+x1Vd6bMMKmporbugPmLqprJfc6UvEv83jwYqzEQSZtt0LfJV1d
I2OS7KC9W3SqPlBpQNGxEVqC7kw7
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:59 2025 by rpki-client