Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B5D1DCCCD911EF9A94BBB5762E951A.roa
File: 54B5D1DCCCD911EF9A94BBB5762E951A.roa (raw, json)
Hash identifier: MovFri927GRQoIYJml9yJy3Yvw8wZGXQ7KOFYz8uluY=
Subject key identifier: E2:B0:45:49:6C:8D:AD:6D:76:6D:8E:08:14:C5:D6:EB:C7:F4:AA:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FB38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B5D1DCCCD911EF9A94BBB5762E951A.roa
Signing time: Tue 07 Jan 2025 09:25:27 +0000
ROA not before: Tue 07 Jan 2025 09:25:24 +0000
ROA not after: Mon 13 Dec 2027 09:25:24 +0000
asID: 17561
IP address blocks: 156.233.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64312 (0xfb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 09:25:24 2025 GMT
Not After : Dec 13 09:25:24 2027 GMT
Subject: CN=677cf307-a268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:72:f3:af:e6:fe:d3:8b:0e:b9:5e:e1:42:
62:ae:28:e9:0d:68:27:ed:35:0e:18:ff:5a:29:53:
9a:0d:0a:72:8c:f2:6d:9b:e3:31:3f:77:29:96:24:
e7:50:dc:3f:a7:67:e1:4d:44:c1:0a:21:58:09:c4:
1b:b6:75:70:74:73:93:f6:e3:85:4b:a5:64:ce:0d:
3c:14:e8:be:4e:97:1c:c8:5e:1c:1c:e3:7d:98:6d:
d5:86:7c:8e:1d:ec:bf:16:3a:32:1b:81:47:bb:42:
31:2e:e9:72:2f:cb:95:fe:2c:65:20:cf:dd:d9:a5:
e2:72:7b:f6:b2:60:e4:73:db:c2:34:36:c0:a8:da:
72:99:e4:a5:ca:97:8c:d3:17:2f:36:0d:af:e5:f8:
e1:72:2a:3e:15:e2:ca:3b:c9:7e:65:d8:8c:f8:ad:
8a:19:0e:b9:c4:d8:d7:b4:c0:0e:3b:b3:91:b6:3b:
5b:d4:33:80:e2:85:ae:62:31:b1:58:4a:3e:bc:f5:
d2:be:58:23:3e:5c:e6:ba:50:ed:af:12:98:d2:9f:
b0:89:f8:87:a8:cf:25:34:46:57:11:ee:a0:b7:7a:
4a:e3:4c:97:cc:14:77:67:51:fa:b2:25:dd:0f:71:
1f:f6:9d:1d:2c:f2:50:ad:0e:f9:e3:03:0f:f2:57:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:45:49:6C:8D:AD:6D:76:6D:8E:08:14:C5:D6:EB:C7:F4:AA:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B5D1DCCCD911EF9A94BBB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d8:2d:98:05:e6:ab:0a:9b:38:f0:0d:7b:e3:a6:63:8d:de:
28:db:00:38:8d:9e:32:15:ff:24:9a:28:21:e2:c8:b5:ff:1e:
71:bd:39:45:67:2c:47:05:57:6a:52:b2:c9:95:d7:9d:9f:96:
bd:9f:01:a5:43:ef:c7:7f:61:c8:df:b0:5e:b7:13:b8:7e:10:
79:89:8f:bb:b3:a3:c9:af:ac:58:af:62:d8:8e:3b:55:cd:c8:
39:25:c1:4d:bf:04:75:09:8d:10:da:69:d7:97:dd:6b:71:9a:
8b:4a:99:c5:34:ac:96:5a:86:8d:6f:05:04:7c:03:14:67:a0:
e7:b7:a7:f9:55:77:39:38:bc:03:c1:da:59:49:a8:31:bf:64:
8b:76:24:84:aa:0a:6f:69:1b:25:15:67:70:b9:60:87:f5:b2:
80:89:72:b4:0b:c7:59:ec:c6:4c:0d:1f:06:d0:0c:05:9b:22:
e8:7b:15:90:76:2d:d5:b9:89:08:6f:65:1b:b9:6f:6c:d7:2b:
1d:01:8e:15:ac:4b:0c:33:2e:bd:ae:4b:eb:20:0b:3e:d2:54:
1e:97:63:6f:d1:d7:82:45:61:e8:11:d9:c4:68:bb:42:8a:de:
cd:09:b9:77:8d:38:28:95:6b:20:a6:32:07:0b:e0:b4:6d:ee:
f9:44:ee:73
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPs4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDkyNTI0WhcNMjcxMjEzMDkyNTI0WjAYMRYw
FAYDVQQDEw02NzdjZjMwNy1hMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7V1y86/m/tOLDrle4UJirijpDWgn7TUOGP9aKVOaDQpyjPJtm+MxP3cp
liTnUNw/p2fhTUTBCiFYCcQbtnVwdHOT9uOFS6Vkzg08FOi+TpccyF4cHON9mG3V
hnyOHey/FjoyG4FHu0IxLulyL8uV/ixlIM/d2aXicnv2smDkc9vCNDbAqNpymeSl
ypeM0xcvNg2v5fjhcio+FeLKO8l+ZdiM+K2KGQ65xNjXtMAOO7ORtjtb1DOA4oWu
YjGxWEo+vPXSvlgjPlzmulDtrxKY0p+wifiHqM8lNEZXEe6gt3pK40yXzBR3Z1H6
siXdD3Ef9p0dLPJQrQ754wMP8lc+xwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOKw
RUlsja1tdm2OCBTF1uvH9KqGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NEI1RDFEQ0NDRDkxMUVGOUE5NEJCQjU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOm/MA0GCSqGSIb3DQEBCwUA
A4IBAQCn2C2YBearCps48A1746Zjjd4o2wA4jZ4yFf8kmigh4si1/x5xvTlFZyxH
BVdqUrLJldedn5a9nwGlQ+/Hf2HI37BetxO4fhB5iY+7s6PJr6xYr2LYjjtVzcg5
JcFNvwR1CY0Q2mnXl91rcZqLSpnFNKyWWoaNbwUEfAMUZ6Dnt6f5VXc5OLwDwdpZ
Sagxv2SLdiSEqgpvaRslFWdwuWCH9bKAiXK0C8dZ7MZMDR8G0AwFmyLoexWQdi3V
uYkIb2UbuW9s1ysdAY4VrEsMMy69rkvrIAs+0lQel2Nv0deCRWHoEdnEaLtCit7N
Cbl3jTgolWsgpjIHC+C0be75RO5z
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:41 2025 by rpki-client