Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A90C3F4CC9F11EF80E6F5BE762E951A.roa
File: 4A90C3F4CC9F11EF80E6F5BE762E951A.roa (raw, json)
Hash identifier: uZq27RwmJC4hIc0e6grT04WbJhJm3m1mVfgF+AkHi2s=
Subject key identifier: 94:B8:7D:BE:F2:BF:59:A7:84:DB:02:F6:D1:97:04:50:B0:E2:D4:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F984
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A90C3F4CC9F11EF80E6F5BE762E951A.roa
Signing time: Tue 07 Jan 2025 02:29:59 +0000
ROA not before: Tue 07 Jan 2025 02:29:56 +0000
ROA not after: Mon 13 Dec 2027 02:29:56 +0000
asID: 17561
IP address blocks: 156.227.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63876 (0xf984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 02:29:56 2025 GMT
Not After : Dec 13 02:29:56 2027 GMT
Subject: CN=677c91a7-deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:87:74:5d:9b:02:79:b3:f2:ab:09:03:ce:
a4:b2:c5:c5:af:2a:96:64:a9:b9:5d:55:df:71:55:
7e:85:ba:c6:f5:74:f0:ba:54:d0:af:40:d7:d4:df:
80:85:35:09:b2:65:19:30:1c:54:35:a9:d1:58:99:
5d:95:06:a1:53:d9:ea:a5:02:79:8d:51:be:e9:b5:
23:77:45:9b:cb:10:dc:c0:2f:ac:c5:94:ea:0f:5b:
dc:ff:c9:7b:3c:5a:26:c9:49:64:14:e6:b6:5c:3b:
1d:dd:84:5c:b0:74:f3:84:d4:e1:7b:1f:45:3c:e8:
4f:f2:60:d0:ba:62:5d:d3:8a:23:ee:c4:56:52:b7:
17:45:5d:a8:e6:54:5b:88:21:05:2a:d7:ae:94:d3:
76:0c:bb:ef:97:ac:f1:7f:4b:1a:c1:dd:18:9c:8e:
6c:cb:36:fc:e7:84:c0:f8:3c:41:b2:10:d8:8c:5c:
3b:ce:e0:a4:93:40:50:43:40:7c:98:26:a9:b6:34:
84:04:8d:e3:e1:3b:bb:9a:41:a1:6d:40:e2:ac:20:
6f:d9:35:b4:74:64:ad:54:ee:ca:1f:e8:b1:5a:9d:
0a:b2:80:01:7d:51:5e:cf:f8:c5:a0:db:32:5d:a0:
0b:72:e7:30:b8:6e:30:68:a8:eb:b1:3b:e1:07:8b:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:7D:BE:F2:BF:59:A7:84:DB:02:F6:D1:97:04:50:B0:E2:D4:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A90C3F4CC9F11EF80E6F5BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3b:a5:23:1d:d7:d1:2b:bc:c6:ab:c9:ba:06:8c:e9:7b:d4:
00:81:76:70:c2:56:ec:50:df:40:7c:fc:bc:cf:d0:4b:4c:2b:
43:6f:9e:f2:68:1a:2e:a5:07:2c:48:05:3a:04:c5:b4:24:d6:
0b:13:25:6e:29:31:f8:b2:3d:5a:c8:56:1d:95:7e:82:6c:71:
b4:aa:8c:9b:2c:d8:ab:3f:60:67:cb:32:1e:a6:08:62:02:92:
a0:89:d3:7d:ad:38:f9:50:f7:60:18:9f:e1:95:2d:f0:74:fd:
1b:21:fb:36:c7:a0:36:33:8c:f0:c4:5b:d0:d0:c7:7a:ce:cf:
49:23:8f:f9:1d:c1:7c:8d:71:9f:1e:1f:6f:4a:ef:d0:db:23:
4c:e3:85:63:99:8e:b2:e7:a6:b0:e2:03:7a:63:31:bb:6c:95:
b6:d5:ae:00:7c:22:36:b9:94:35:54:d7:d5:8c:e1:e9:92:4c:
dd:34:a9:fa:07:f9:ac:ec:b9:da:8c:9f:51:83:dd:f2:6d:42:
aa:41:af:11:35:55:db:82:92:5d:97:42:f8:b7:96:aa:8a:22:
12:2a:a4:8e:4f:8f:c7:20:77:b5:40:44:04:c3:50:b2:a2:c6:
08:e1:fd:6b:7b:f8:45:01:2e:d3:95:e3:41:ad:f5:77:3e:74:
f7:03:71:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPmEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDIyOTU2WhcNMjcxMjEzMDIyOTU2WjAYMRYw
FAYDVQQDEw02NzdjOTFhNy1kZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApFaHdF2bAnmz8qsJA86kssXFryqWZKm5XVXfcVV+hbrG9XTwulTQr0DX
1N+AhTUJsmUZMBxUNanRWJldlQahU9nqpQJ5jVG+6bUjd0WbyxDcwC+sxZTqD1vc
/8l7PFomyUlkFOa2XDsd3YRcsHTzhNThex9FPOhP8mDQumJd04oj7sRWUrcXRV2o
5lRbiCEFKteulNN2DLvvl6zxf0sawd0YnI5syzb854TA+DxBshDYjFw7zuCkk0BQ
Q0B8mCaptjSEBI3j4Tu7mkGhbUDirCBv2TW0dGStVO7KH+ixWp0KsoABfVFez/jF
oNsyXaALcucwuG4waKjrsTvhB4u1SwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJS4
fb7yv1mnhNsC9tGXBFCw4tSRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80QTkwQzNGNENDOUYxMUVGODBFNkY1QkU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnON4MA0GCSqGSIb3DQEBCwUA
A4IBAQAvO6UjHdfRK7zGq8m6Bozpe9QAgXZwwlbsUN9AfPy8z9BLTCtDb57yaBou
pQcsSAU6BMW0JNYLEyVuKTH4sj1ayFYdlX6CbHG0qoybLNirP2BnyzIepghiApKg
idN9rTj5UPdgGJ/hlS3wdP0bIfs2x6A2M4zwxFvQ0Md6zs9JI4/5HcF8jXGfHh9v
Su/Q2yNM44VjmY6y56aw4gN6YzG7bJW21a4AfCI2uZQ1VNfVjOHpkkzdNKn6B/ms
7LnajJ9Rg93ybUKqQa8RNVXbgpJdl0L4t5aqiiISKqSOT4/HIHe1QEQEw1CyosYI
4f1re/hFAS7TleNBrfV3PnT3A3HO
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:47 2025 by rpki-client