Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44235EF8CDA011EFA8F874AF762E951A.roa
File: 44235EF8CDA011EFA8F874AF762E951A.roa (raw, json)
Hash identifier: YKYdxtkqqhg+SGQzu7G4DycepedvdFfNSMqsaUc/KrQ=
Subject key identifier: 33:A6:82:3B:17:1A:9C:B7:F2:56:BF:2A:B7:81:55:C5:AF:26:AC:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0100CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44235EF8CDA011EFA8F874AF762E951A.roa
Signing time: Wed 08 Jan 2025 09:09:29 +0000
ROA not before: Wed 08 Jan 2025 09:09:26 +0000
ROA not after: Tue 16 Dec 2025 09:09:26 +0000
asID: 984
IP address blocks: 156.249.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65741 (0x100cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 09:09:26 2025 GMT
Not After : Dec 16 09:09:26 2025 GMT
Subject: CN=677e40c9-f393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:16:ed:4c:11:49:68:b7:c7:0f:e9:0c:13:
d5:7b:29:57:d3:17:13:42:a6:dc:55:ab:4b:5c:f1:
f2:2c:fd:15:c3:46:1b:3b:db:c3:cc:0f:53:6f:8b:
d6:92:b6:f0:1b:20:88:0a:2b:ae:2f:7f:5d:a4:63:
d3:d8:c1:cf:f8:fe:cb:8c:29:38:ce:f9:e3:92:31:
68:8b:1e:45:db:74:54:13:6a:64:c6:84:19:b9:86:
01:74:a2:ab:ed:35:d0:27:93:ab:71:10:2e:5e:3f:
5f:2f:d5:fa:5e:08:06:6c:2c:2a:21:f4:69:fe:8a:
a4:37:ca:49:ba:03:06:7c:e0:7c:25:f5:71:c2:8c:
68:15:e1:05:6f:95:26:38:c8:aa:87:b9:21:e1:05:
ee:bf:6c:6e:43:60:48:0e:fa:ae:67:99:3a:92:3d:
70:c2:78:09:f5:09:58:eb:4d:29:1a:51:1a:46:63:
1b:69:01:97:c1:21:fa:14:c6:37:e7:f5:d7:a1:1b:
9d:b8:6b:16:5a:26:39:e8:09:44:db:e5:40:70:9b:
cf:bf:11:1a:dc:b7:5d:86:df:bc:9b:f6:20:2b:2c:
b6:ae:10:95:2c:51:16:5e:af:ec:92:8b:46:69:17:
b4:5c:ea:8d:60:72:1b:9b:2a:4c:87:45:0c:96:ce:
ce:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:82:3B:17:1A:9C:B7:F2:56:BF:2A:B7:81:55:C5:AF:26:AC:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44235EF8CDA011EFA8F874AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:26:46:bf:ca:a0:5d:fa:77:b6:b8:0f:1f:9b:b2:5a:db:f8:
0b:67:8b:ea:6b:87:16:35:b3:d3:dc:be:ba:41:bd:4b:b5:1f:
80:2e:bb:bb:db:2e:5f:cf:88:eb:5a:ad:07:e2:cd:d0:54:d1:
4f:b4:85:8b:d1:d3:4d:1b:3d:24:53:f4:b1:a7:5c:8b:d1:c2:
2d:30:e7:b9:a2:e6:7d:53:6c:ff:31:a0:48:64:2b:1e:a3:8a:
41:b5:10:28:4f:6f:c7:3b:12:3b:11:74:52:70:de:c0:ae:0b:
a4:23:47:5e:92:c1:28:09:49:ab:1f:2f:b8:cf:19:5d:74:74:
f4:18:d4:a8:6f:0a:47:7d:9a:74:5b:5a:a7:4b:88:0a:4b:27:
68:24:05:ad:4f:65:b1:b8:c8:e2:c1:18:63:3d:6e:a3:9f:a2:
09:2d:42:95:c9:35:02:3b:95:6a:e5:dc:42:11:ab:cc:1a:66:
a2:c7:24:4f:4b:12:de:02:4e:ce:d8:35:cf:a2:0b:2d:a3:c3:
2f:9f:99:c8:d7:90:67:dc:d9:ab:77:31:0a:29:02:10:9d:a2:
3b:c8:21:39:34:41:02:1f:1b:ba:f4:d9:54:8f:b0:69:26:1b:
8c:5c:78:05:11:62:05:e0:c4:43:e1:f2:a5:27:81:1b:be:be:
d9:43:a7:25
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQDNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDkwOTI2WhcNMjUxMjE2MDkwOTI2WjAYMRYw
FAYDVQQDEw02NzdlNDBjOS1mMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA56EW7UwRSWi3xw/pDBPVeylX0xcTQqbcVatLXPHyLP0Vw0YbO9vDzA9T
b4vWkrbwGyCICiuuL39dpGPT2MHP+P7LjCk4zvnjkjFoix5F23RUE2pkxoQZuYYB
dKKr7TXQJ5OrcRAuXj9fL9X6XggGbCwqIfRp/oqkN8pJugMGfOB8JfVxwoxoFeEF
b5UmOMiqh7kh4QXuv2xuQ2BIDvquZ5k6kj1wwngJ9QlY600pGlEaRmMbaQGXwSH6
FMY35/XXoRuduGsWWiY56AlE2+VAcJvPvxEa3Lddht+8m/YgKyy2rhCVLFEWXq/s
kotGaRe0XOqNYHIbmypMh0UMls7ONwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDOm
gjsXGpy38la/KreBVcWvJqxtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDIzNUVGOENEQTAxMUVGQThGODc0QUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPluMA0GCSqGSIb3DQEBCwUA
A4IBAQAcJka/yqBd+ne2uA8fm7Ja2/gLZ4vqa4cWNbPT3L66Qb1LtR+ALru72y5f
z4jrWq0H4s3QVNFPtIWL0dNNGz0kU/Sxp1yL0cItMOe5ouZ9U2z/MaBIZCseo4pB
tRAoT2/HOxI7EXRScN7ArgukI0deksEoCUmrHy+4zxlddHT0GNSobwpHfZp0W1qn
S4gKSydoJAWtT2WxuMjiwRhjPW6jn6IJLUKVyTUCO5Vq5dxCEavMGmaixyRPSxLe
Ak7O2DXPogsto8Mvn5nI15Bn3NmrdzEKKQIQnaI7yCE5NEECHxu69NlUj7BpJhuM
XHgFEWIF4MRD4fKlJ4Ebvr7ZQ6cl
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:11 2025 by rpki-client