Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4870D05AC33011EF8D92B049762E951A.roa
File: 4870D05AC33011EF8D92B049762E951A.roa (raw, json)
Hash identifier: LuUGnFQMDsumN8hXf7i5WblSNJF+s7zlidDXpS1WOHw=
Subject key identifier: 70:4F:4F:8A:59:4E:82:DB:A8:55:D0:07:30:BA:8E:E2:5A:34:76:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4870D05AC33011EF8D92B049762E951A.roa
Signing time: Thu 26 Dec 2024 02:22:41 +0000
ROA not before: Thu 26 Dec 2024 02:22:38 +0000
ROA not after: Wed 10 Dec 2025 02:22:38 +0000
asID: 984
IP address blocks: 156.243.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60165 (0xeb05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:22:38 2024 GMT
Not After : Dec 10 02:22:38 2025 GMT
Subject: CN=676cbdf1-3b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:09:ea:84:65:a1:ea:f2:13:53:23:b2:d0:
e2:52:be:82:be:94:1a:eb:7d:5f:d2:ea:d0:46:24:
31:a8:09:93:f8:20:2e:a8:d7:b6:76:36:bb:28:5a:
9e:fd:11:c9:a5:dd:da:2c:a7:63:a2:24:07:8e:a4:
d9:a3:4f:fa:a3:73:5a:39:b3:4f:02:d3:3b:97:4f:
5c:08:12:42:41:aa:e9:bc:b8:bc:48:11:5d:c4:ea:
ae:b7:e9:86:5f:a1:40:4d:8e:9d:8d:b1:5d:86:8e:
69:78:f0:c0:07:5e:55:8d:06:54:64:e0:b1:e2:21:
20:0d:82:db:3b:31:ab:93:84:7f:99:04:da:be:d8:
2c:2e:ae:9b:65:b4:95:da:3b:8b:a7:df:81:36:c7:
45:1e:ce:95:c4:15:c6:8f:7b:4b:9e:6d:88:3a:e2:
12:56:78:09:b8:43:61:c5:f2:9b:29:c9:24:c3:3e:
1d:dc:2b:80:0e:e4:52:59:44:00:48:fb:dd:8d:77:
dd:70:3c:79:61:54:7b:f8:83:f5:f0:10:d2:d7:f6:
b1:f8:78:cf:34:46:8d:13:f6:c8:ad:b1:bb:a8:6f:
5a:26:b1:49:18:a1:25:9a:31:f5:76:de:27:cc:67:
fc:14:00:d7:3a:bc:8a:a5:77:2f:11:28:2c:48:10:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:4F:8A:59:4E:82:DB:A8:55:D0:07:30:BA:8E:E2:5A:34:76:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4870D05AC33011EF8D92B049762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fd:e6:ef:3e:eb:04:6b:93:b8:e3:56:aa:d8:52:d1:8e:d5:
4c:33:1f:82:a5:21:73:b4:bb:39:d0:25:b0:4f:1b:90:34:4e:
0e:1f:24:fa:18:47:55:60:cc:16:7e:de:ea:55:19:2d:24:7a:
80:e8:9d:d4:06:33:3d:c4:eb:e0:6e:de:70:bc:14:8f:7c:9f:
17:d6:ca:d3:51:92:3b:f3:cf:95:14:5b:65:e1:42:4e:87:c7:
c6:2b:dd:7c:dc:7f:11:90:3a:32:de:c3:33:86:74:3b:5e:82:
00:61:39:30:8b:db:bf:99:17:50:0e:41:bf:24:73:a3:93:da:
f1:8b:b9:68:60:75:09:a2:31:56:3d:4f:7b:9c:91:db:90:2e:
8e:c7:b8:66:86:83:5b:a7:af:fc:e6:8a:af:70:84:dd:15:83:
e6:a6:df:5d:70:50:59:92:9e:a7:32:ab:e8:c3:21:56:da:09:
21:68:fe:11:81:4a:33:14:41:6a:0d:b2:27:57:6c:dd:d1:5f:
e6:d8:33:00:3d:cd:53:77:40:f6:af:34:0d:7d:0c:ee:69:6f:
84:e9:ed:e1:96:66:61:90:74:80:7c:ab:6f:3e:db:4f:61:64:
db:85:a0:a2:73:13:b4:82:af:31:56:56:af:03:d9:10:7f:dc:
95:bc:40:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOsFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDIyMjM4WhcNMjUxMjEwMDIyMjM4WjAYMRYw
FAYDVQQDEw02NzZjYmRmMS0zYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyoAJ6oRloeryE1MjstDiUr6CvpQa631f0urQRiQxqAmT+CAuqNe2dja7
KFqe/RHJpd3aLKdjoiQHjqTZo0/6o3NaObNPAtM7l09cCBJCQarpvLi8SBFdxOqu
t+mGX6FATY6djbFdho5pePDAB15VjQZUZOCx4iEgDYLbOzGrk4R/mQTavtgsLq6b
ZbSV2juLp9+BNsdFHs6VxBXGj3tLnm2IOuISVngJuENhxfKbKckkwz4d3CuADuRS
WUQASPvdjXfdcDx5YVR7+IP18BDS1/ax+HjPNEaNE/bIrbG7qG9aJrFJGKElmjH1
dt4nzGf8FADXOryKpXcvESgsSBD30wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHBP
T4pZToLbqFXQBzC6juJaNHYeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80ODcwRDA1QUMzMzAxMUVGOEQ5MkIwNDk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPPvMA0GCSqGSIb3DQEBCwUA
A4IBAQCx/ebvPusEa5O441aq2FLRjtVMMx+CpSFztLs50CWwTxuQNE4OHyT6GEdV
YMwWft7qVRktJHqA6J3UBjM9xOvgbt5wvBSPfJ8X1srTUZI788+VFFtl4UJOh8fG
K9183H8RkDoy3sMzhnQ7XoIAYTkwi9u/mRdQDkG/JHOjk9rxi7loYHUJojFWPU97
nJHbkC6Ox7hmhoNbp6/85oqvcITdFYPmpt9dcFBZkp6nMqvowyFW2gkhaP4RgUoz
FEFqDbInV2zd0V/m2DMAPc1Td0D2rzQNfQzuaW+E6e3hlmZhkHSAfKtvPttPYWTb
haCicxO0gq8xVlavA9kQf9yVvECJ
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:45 2025 by rpki-client