Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A2082EA31211EF83A79586762E951A.roa
File: 44A2082EA31211EF83A79586762E951A.roa (raw, json)
Hash identifier: ZU7Js8w/JSrUxlmNX/QNT6XKfR62axLvb4bOwSwbABM=
Subject key identifier: 72:AD:C9:9C:BB:2B:60:23:A0:D3:F7:BA:70:56:5A:B1:58:9C:F7:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A2082EA31211EF83A79586762E951A.roa
Signing time: Fri 15 Nov 2024 05:27:13 +0000
ROA not before: Fri 15 Nov 2024 05:27:09 +0000
ROA not after: Wed 18 Dec 2024 05:27:09 +0000
asID: 984
IP address blocks: 156.243.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53967 (0xd2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 05:27:09 2024 GMT
Not After : Dec 18 05:27:09 2024 GMT
Subject: CN=6736dbb1-ac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:42:1d:62:77:83:21:f4:26:7a:41:ac:0a:
d1:7d:cc:73:ec:24:ba:c9:96:9e:36:09:ed:04:52:
dd:e6:ea:d3:be:e2:a2:82:a3:9c:ac:20:bb:d1:4d:
ca:7a:7a:88:9f:1e:17:cd:0a:39:56:42:61:58:30:
a7:af:7e:39:a6:49:c4:6e:72:c1:21:ad:95:99:39:
88:26:75:c2:b9:44:b4:a8:a7:7b:9f:78:46:55:5f:
a9:dc:7b:42:9d:0b:fa:4a:5a:78:4b:a6:b2:7b:3b:
aa:2d:62:db:3f:24:13:2a:3c:83:13:d0:c7:1f:b6:
0b:68:da:c7:56:89:b5:9e:a8:ff:6b:56:7a:91:60:
8f:cb:44:31:09:e8:21:b2:9d:a8:70:b6:e3:21:54:
31:9f:c3:09:cd:92:18:99:b1:2a:2c:6a:17:89:72:
67:b8:09:d6:f2:a3:47:20:dc:fa:d0:db:b6:4b:8c:
03:3d:18:ee:df:35:40:62:d5:ed:51:23:62:e6:6e:
51:16:08:e1:e8:24:f6:25:f0:63:10:5b:88:14:ca:
99:95:15:b0:bd:c1:fc:b6:3c:44:11:90:02:68:42:
a0:00:77:af:39:48:a0:f6:82:a4:1f:7d:c8:6c:72:
e9:53:a1:5f:f9:26:64:a6:f5:30:0b:4f:7f:11:4f:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:C9:9C:BB:2B:60:23:A0:D3:F7:BA:70:56:5A:B1:58:9C:F7:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44A2082EA31211EF83A79586762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ce:ff:83:c0:0f:4b:d0:3e:27:be:4d:f8:d6:63:28:12:60:
7b:85:a2:32:97:2f:fe:f8:df:eb:26:40:6f:77:22:3c:4f:8d:
e2:a5:0c:9c:e1:ab:3b:f1:07:95:f4:b4:a7:e7:c7:f9:d7:cf:
1e:d2:b2:ab:dd:39:8c:5c:0d:6e:8d:ff:60:d8:e1:9f:85:c8:
6b:cb:42:29:5d:33:c7:13:1d:e9:b2:e7:b0:27:ac:d4:70:bd:
a9:c5:bc:fd:1e:b4:74:16:2d:d3:e5:e5:88:5a:ad:d9:01:71:
6d:cd:43:b2:52:4e:9c:2d:d3:15:d1:d1:2e:c1:53:65:77:e4:
a2:60:52:48:46:78:93:a4:1b:1b:13:b8:df:74:ad:8d:a5:40:
75:6f:ee:6e:96:8c:15:d0:59:20:d1:1c:a9:bf:14:c0:99:90:
d3:a1:a3:41:4b:b9:30:f5:d7:af:f3:15:d5:f2:71:83:48:c2:
57:ef:60:24:64:ba:6f:00:cd:40:2d:27:ee:6f:9d:90:ff:01:
e1:fc:2a:c2:42:ab:67:e1:af:78:d9:86:77:3a:26:09:d2:1c:
f8:88:27:a1:a9:1c:e9:63:4b:36:c3:b4:2a:59:d3:3f:d7:ad:
ed:58:c8:b1:33:2a:f5:00:c6:9e:20:1c:b9:fa:19:36:a1:87:
a1:8b:a5:69
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANLPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTE1MDUyNzA5WhcNMjQxMjE4MDUyNzA5WjAYMRYw
FAYDVQQDEw02NzM2ZGJiMS1hYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwHxCHWJ3gyH0JnpBrArRfcxz7CS6yZaeNgntBFLd5urTvuKigqOcrCC7
0U3KenqInx4XzQo5VkJhWDCnr345pknEbnLBIa2VmTmIJnXCuUS0qKd7n3hGVV+p
3HtCnQv6Slp4S6ayezuqLWLbPyQTKjyDE9DHH7YLaNrHVom1nqj/a1Z6kWCPy0Qx
Ceghsp2ocLbjIVQxn8MJzZIYmbEqLGoXiXJnuAnW8qNHINz60Nu2S4wDPRju3zVA
YtXtUSNi5m5RFgjh6CT2JfBjEFuIFMqZlRWwvcH8tjxEEZACaEKgAHevOUig9oKk
H33IbHLpU6Ff+SZkpvUwC09/EU9XjQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHKt
yZy7K2AjoNP3unBWWrFYnPf4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NEEyMDgyRUEzMTIxMUVGODNBNzk1ODY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPPlMA0GCSqGSIb3DQEBCwUA
A4IBAQCrzv+DwA9L0D4nvk341mMoEmB7haIyly/++N/rJkBvdyI8T43ipQyc4as7
8QeV9LSn58f5188e0rKr3TmMXA1ujf9g2OGfhchry0IpXTPHEx3psuewJ6zUcL2p
xbz9HrR0Fi3T5eWIWq3ZAXFtzUOyUk6cLdMV0dEuwVNld+SiYFJIRniTpBsbE7jf
dK2NpUB1b+5ulowV0Fkg0RypvxTAmZDToaNBS7kw9dev8xXV8nGDSMJX72AkZLpv
AM1ALSfub52Q/wHh/CrCQqtn4a942YZ3OiYJ0hz4iCehqRzpY0s2w7QqWdM/163t
WMixMyr1AMaeIBy5+hk2oYehi6Vp
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org