Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/543AC532CD3D11EF812E7FAA762E951A.roa
File: 543AC532CD3D11EF812E7FAA762E951A.roa (raw, json)
Hash identifier: wU0HPHG5gQ62cYVm73QIEQmnA3PzhMqvrSJS7BqGsy8=
Subject key identifier: A9:3E:DB:28:04:67:BA:76:B0:21:B9:A8:67:F3:2E:61:AF:90:73:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/543AC532CD3D11EF812E7FAA762E951A.roa
Signing time: Tue 07 Jan 2025 21:21:16 +0000
ROA not before: Tue 07 Jan 2025 21:21:12 +0000
ROA not after: Sat 13 Dec 2025 21:21:12 +0000
asID: 984
IP address blocks: 156.243.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65107 (0xfe53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:21:12 2025 GMT
Not After : Dec 13 21:21:12 2025 GMT
Subject: CN=677d9acc-d503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f5:34:16:2c:8f:9c:f2:6a:f8:f7:d1:75:3a:
38:55:7c:b5:4a:91:3b:71:b5:ae:e8:d7:7b:7c:77:
bb:e5:08:93:e9:5f:9d:a3:df:12:56:63:fb:d5:5b:
86:bf:b9:1b:84:df:46:af:a1:b0:c3:7c:d1:3f:c3:
7b:39:2f:15:46:bf:b8:cf:f4:1e:9b:59:db:41:df:
48:bf:8a:31:58:60:8a:cf:ce:bc:ae:37:e2:10:d0:
01:a6:5d:93:f5:e9:5a:f4:3f:f1:66:7b:97:1c:60:
d1:f3:8e:83:49:6a:2f:7d:84:02:09:91:d0:01:eb:
bf:6d:ba:05:0b:49:b0:cf:63:4f:ba:73:68:9c:98:
99:da:85:c3:70:7d:07:0a:86:22:04:56:e9:c5:86:
64:b6:84:3f:26:8e:8f:3e:95:e8:8d:46:d2:48:ba:
c6:03:18:4d:3b:ef:8b:9a:9e:b6:ac:fc:ff:d1:d7:
48:75:12:23:3f:b3:d8:a8:51:72:91:d8:0a:df:f1:
22:d1:b8:b4:d4:fe:b8:77:6b:bc:66:50:7c:bd:6f:
9c:d2:1a:b0:5a:91:8a:a1:b7:aa:12:91:c2:12:36:
15:56:bf:1b:95:b1:8f:93:97:12:42:0e:39:86:83:
6d:f3:8c:51:f5:a4:a8:d6:32:8e:8d:b5:c2:1c:08:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:DB:28:04:67:BA:76:B0:21:B9:A8:67:F3:2E:61:AF:90:73:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/543AC532CD3D11EF812E7FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c2:94:2b:2c:47:f5:ec:38:09:e2:a7:4b:75:8f:ee:b3:b6:
c0:a2:cd:4a:10:ea:e4:5c:89:b7:c0:5d:a4:3a:e1:34:12:07:
c8:db:9f:80:b7:30:fe:e7:7c:40:a7:c1:86:00:9a:4b:28:0e:
fb:02:11:f6:33:8d:19:55:18:b1:5a:b7:1d:52:7e:3a:94:23:
36:f6:df:f0:a1:a9:3c:5d:d0:46:a0:4f:d1:35:e9:a8:62:9a:
36:96:49:7c:23:b8:f6:70:ed:f2:b3:6b:43:10:33:21:67:5e:
c7:f7:47:b6:87:1c:59:64:92:9f:58:90:52:f2:92:aa:fc:3f:
6f:c6:e3:30:c1:a5:0d:d1:fa:1c:49:d2:87:85:ef:37:23:7c:
5d:c9:59:c8:70:cf:c2:1c:de:c1:29:4b:dc:b3:7b:c0:59:88:
2b:7f:03:e5:00:1d:f7:3a:3a:aa:ec:b6:b4:35:28:2d:6e:dc:
8b:c9:5f:aa:66:48:5a:cf:73:79:6c:ff:99:d3:1a:ad:aa:55:
67:e2:3e:1b:ea:00:a9:01:99:91:76:b9:58:40:a9:62:81:9e:
d6:46:fa:18:99:e6:dc:fc:0f:5e:49:e0:78:5c:00:6f:3f:da:
d1:47:62:37:63:05:55:4c:1c:4e:59:cb:29:ac:66:b7:c8:9d:
27:7e:4a:c1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP5TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjEyMTEyWhcNMjUxMjEzMjEyMTEyWjAYMRYw
FAYDVQQDEw02NzdkOWFjYy1kNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9PU0FiyPnPJq+PfRdTo4VXy1SpE7cbWu6Nd7fHe75QiT6V+do98SVmP7
1VuGv7kbhN9Gr6Gww3zRP8N7OS8VRr+4z/Qem1nbQd9Iv4oxWGCKz868rjfiENAB
pl2T9ela9D/xZnuXHGDR846DSWovfYQCCZHQAeu/bboFC0mwz2NPunNonJiZ2oXD
cH0HCoYiBFbpxYZktoQ/Jo6PPpXojUbSSLrGAxhNO++Lmp62rPz/0ddIdRIjP7PY
qFFykdgK3/Ei0bi01P64d2u8ZlB8vW+c0hqwWpGKobeqEpHCEjYVVr8blbGPk5cS
Qg45hoNt84xR9aSo1jKOjbXCHAhz7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKk+
2ygEZ7p2sCG5qGfzLmGvkHMsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NDNBQzUzMkNEM0QxMUVGODEyRTdGQUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPNSMA0GCSqGSIb3DQEBCwUA
A4IBAQBOwpQrLEf17DgJ4qdLdY/us7bAos1KEOrkXIm3wF2kOuE0EgfI25+AtzD+
53xAp8GGAJpLKA77AhH2M40ZVRixWrcdUn46lCM29t/woak8XdBGoE/RNemoYpo2
lkl8I7j2cO3ys2tDEDMhZ17H90e2hxxZZJKfWJBS8pKq/D9vxuMwwaUN0focSdKH
he83I3xdyVnIcM/CHN7BKUvcs3vAWYgrfwPlAB33Ojqq7La0NSgtbtyLyV+qZkha
z3N5bP+Z0xqtqlVn4j4b6gCpAZmRdrlYQKligZ7WRvoYmebc/A9eSeB4XABvP9rR
R2I3YwVVTBxOWcsprGa3yJ0nfkrB
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:37 2025 by rpki-client