Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B074DC8D18011EFA3F93D43762E951A.roa
File: 3B074DC8D18011EFA3F93D43762E951A.roa (raw, json)
Hash identifier: vkve49/zNMRffsNA6TXJ/zJGN7E3qolr6fDftGjLOkw=
Subject key identifier: 2B:D1:4C:12:E3:8C:44:F7:A3:AF:1E:E6:8C:30:9F:94:97:1D:6F:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01069A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B074DC8D18011EFA3F93D43762E951A.roa
Signing time: Mon 13 Jan 2025 07:30:15 +0000
ROA not before: Mon 13 Jan 2025 07:30:11 +0000
ROA not after: Thu 20 Feb 2025 07:30:11 +0000
asID: 214515
IP address blocks: 156.253.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67226 (0x1069a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 13 07:30:11 2025 GMT
Not After : Feb 20 07:30:11 2025 GMT
Subject: CN=6784c107-300f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:53:46:cc:ab:f2:84:b3:98:a2:87:00:ca:
c6:26:9b:d4:86:bf:0f:f4:2d:17:0c:c7:47:5e:de:
4a:49:50:56:36:78:1d:ac:7a:c9:20:df:b5:f0:50:
92:01:f1:35:8f:c0:49:e5:b6:32:ef:05:9a:5d:ea:
2d:87:d6:66:b4:29:4a:ae:d4:24:a0:c3:e4:77:fa:
3b:05:e2:b2:ea:ea:2c:84:b1:05:9f:fe:ae:67:8b:
75:c0:63:2e:3a:53:8f:c5:46:da:38:61:22:14:cc:
cb:56:f5:43:f7:84:05:d3:49:04:e5:8c:59:c0:be:
65:0c:77:1d:17:c8:de:eb:9d:93:e1:cc:43:3f:76:
83:f2:b6:9f:d2:84:73:ba:16:2a:4e:90:26:ca:18:
f4:4a:f6:85:7c:59:f6:c2:86:a6:6d:29:7c:d8:80:
f0:35:73:7c:e1:b0:5e:c4:cb:b6:16:8d:78:37:36:
43:36:c3:57:d2:ae:2d:e6:12:0c:70:db:9c:43:d7:
25:e7:fd:39:60:1c:21:dc:fb:d3:02:a7:23:1d:51:
15:53:a8:f3:6b:da:5e:bf:17:48:89:38:15:62:d1:
84:bf:30:aa:99:c4:a2:e3:2e:e7:0f:3d:81:16:cf:
f2:11:1f:74:b6:51:17:8f:07:c7:07:2a:d0:b5:d6:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D1:4C:12:E3:8C:44:F7:A3:AF:1E:E6:8C:30:9F:94:97:1D:6F:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B074DC8D18011EFA3F93D43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:67:74:0c:6a:d1:70:10:a9:17:56:d6:b4:90:80:16:54:3c:
2d:5d:4b:03:c9:57:73:28:4a:c7:46:a3:a5:e6:f4:36:da:5e:
69:b7:8c:8c:15:22:27:65:63:0c:ad:10:d5:b3:41:a8:8f:ef:
8a:f4:65:5e:5a:8c:4a:a5:ef:ff:f7:f5:51:00:df:50:89:97:
58:56:fd:e6:ff:8b:eb:79:bb:66:54:01:74:02:66:fb:c8:3b:
ba:ed:6e:02:09:31:f4:e6:e3:3a:a3:26:47:60:c4:34:87:80:
8a:a4:19:1a:49:f2:89:c9:3e:a5:ec:64:b6:a7:63:41:81:8b:
4c:10:3b:55:4a:02:b9:00:45:67:d4:8d:31:df:5c:98:a5:f1:
ba:a7:e2:7b:59:61:9c:d7:c0:1a:64:2c:26:12:2b:d0:4d:93:
c9:2d:a8:34:b3:e1:85:36:72:e2:7e:3f:33:08:57:cc:80:bd:
05:b4:2f:76:93:cc:f5:a7:0f:7e:97:51:83:36:32:dd:60:cd:
34:ad:fe:a8:10:c7:75:0b:5e:ab:c4:60:9e:e7:51:3c:71:4f:
02:a1:37:ce:72:1a:df:cf:be:fb:6e:b7:c5:12:e2:2a:31:73:
9c:b5:e4:af:f5:dc:d5:ef:3b:ff:96:f9:97:e0:89:ef:8b:5a:
b8:89:f3:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQaaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEzMDczMDExWhcNMjUwMjIwMDczMDExWjAYMRYw
FAYDVQQDEw02Nzg0YzEwNy0zMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4+NTRsyr8oSzmKKHAMrGJpvUhr8P9C0XDMdHXt5KSVBWNngdrHrJIN+1
8FCSAfE1j8BJ5bYy7wWaXeoth9ZmtClKrtQkoMPkd/o7BeKy6uoshLEFn/6uZ4t1
wGMuOlOPxUbaOGEiFMzLVvVD94QF00kE5YxZwL5lDHcdF8je652T4cxDP3aD8raf
0oRzuhYqTpAmyhj0SvaFfFn2woambSl82IDwNXN84bBexMu2Fo14NzZDNsNX0q4t
5hIMcNucQ9cl5/05YBwh3PvTAqcjHVEVU6jza9pevxdIiTgVYtGEvzCqmcSi4y7n
Dz2BFs/yER90tlEXjwfHByrQtdYTZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCvR
TBLjjET3o68e5owwn5SXHW+dMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjA3NERDOEQxODAxMUVGQTNGOTNENDM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP3dMA0GCSqGSIb3DQEBCwUA
A4IBAQALZ3QMatFwEKkXVta0kIAWVDwtXUsDyVdzKErHRqOl5vQ22l5pt4yMFSIn
ZWMMrRDVs0Goj++K9GVeWoxKpe//9/VRAN9QiZdYVv3m/4vrebtmVAF0Amb7yDu6
7W4CCTH05uM6oyZHYMQ0h4CKpBkaSfKJyT6l7GS2p2NBgYtMEDtVSgK5AEVn1I0x
31yYpfG6p+J7WWGc18AaZCwmEivQTZPJLag0s+GFNnLifj8zCFfMgL0FtC92k8z1
pw9+l1GDNjLdYM00rf6oEMd1C16rxGCe51E8cU8CoTfOchrfz777brfFEuIqMXOc
teSv9dzV7zv/lvmX4Invi1q4ifN8
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:46:37 2025 by rpki-client