Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD797C6CD3F11EFABD051B7762E951A.roa
File: 5DD797C6CD3F11EFABD051B7762E951A.roa (raw, json)
Hash identifier: /oYMlDF6Brm/gJEpV/MWApkngO/a9XS8hbT+KE4LlhM=
Subject key identifier: 25:E7:17:BE:AB:60:90:23:E1:05:D4:E0:A7:55:D5:14:6D:4C:0E:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FE63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD797C6CD3F11EFABD051B7762E951A.roa
Signing time: Tue 07 Jan 2025 21:35:51 +0000
ROA not before: Tue 07 Jan 2025 21:35:48 +0000
ROA not after: Sat 13 Dec 2025 21:35:48 +0000
asID: 984
IP address blocks: 156.243.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65123 (0xfe63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 21:35:48 2025 GMT
Not After : Dec 13 21:35:48 2025 GMT
Subject: CN=677d9e37-8cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:c1:65:51:1a:ac:1c:f1:1a:e4:02:28:e9:
28:94:83:22:6c:73:dd:13:03:12:cd:9b:8f:13:ae:
59:1d:59:a2:82:c4:15:cb:4d:78:2a:7d:34:02:1b:
24:1c:a5:3f:e1:36:54:ba:0d:f2:b4:bc:68:a2:e1:
f4:2b:df:35:8d:d7:81:18:22:28:3e:90:7d:8f:e0:
cf:9d:04:65:21:b8:ea:24:72:22:52:e0:99:66:19:
c0:9d:ed:e3:f4:fd:eb:b7:0f:bb:1c:4a:b1:8a:45:
2d:de:ee:95:de:1c:7d:95:e4:ae:a7:6f:ba:6b:ac:
6a:ad:62:c8:a8:93:7c:bb:40:35:9b:ae:24:f9:cc:
3b:79:fb:17:7d:b1:f7:6f:4c:a7:04:38:33:75:58:
ff:dc:36:50:d1:ec:f0:79:e5:e2:6f:2c:31:ec:8e:
9a:38:4a:87:23:d2:fb:0c:a1:23:cd:48:74:23:2d:
49:b7:91:2b:15:d8:ff:7a:0f:0f:96:ca:bc:09:7f:
74:bd:93:d3:17:81:21:ad:78:ea:33:ce:a6:c7:cd:
8c:36:10:1a:80:60:61:64:46:be:39:7d:f5:39:6b:
6a:e3:ec:e9:f8:53:1b:10:04:f0:78:c7:92:30:cb:
0c:f5:71:e4:06:b2:3a:e4:fb:41:3f:83:f5:d0:0c:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:17:BE:AB:60:90:23:E1:05:D4:E0:A7:55:D5:14:6D:4C:0E:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD797C6CD3F11EFABD051B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.90.0/24
Signature Algorithm: sha256WithRSAEncryption
46:27:cf:50:d7:bd:c5:0c:a6:07:b9:57:53:e7:33:13:00:2f:
96:e3:ff:82:d8:79:95:9d:65:26:28:43:52:ee:dd:bc:e5:c2:
1a:2e:bf:40:e6:77:bd:ee:5d:f0:59:88:37:28:7c:66:48:40:
68:c0:24:17:6e:db:8c:af:cd:dc:73:26:1e:68:a4:65:53:7d:
f5:8c:84:14:13:8d:5a:4b:57:84:65:19:73:ed:a7:15:a2:50:
dc:d4:63:43:cf:63:0b:4d:eb:0d:4f:fd:fe:c0:48:66:f7:3a:
e6:4a:9d:e6:d8:ea:83:cf:35:8b:d6:57:b3:0b:b9:08:a5:38:
96:87:b7:00:0c:d3:15:31:a2:a6:15:b0:77:1a:e9:33:39:1d:
34:36:70:89:15:85:f7:36:06:4e:99:88:84:5a:79:28:21:d9:
3e:e3:13:82:ed:9b:df:62:12:4b:08:93:70:b8:16:ff:7b:ee:
cd:a7:56:20:09:84:b6:bb:24:03:4f:88:1f:d4:bc:81:b4:e3:
56:0b:f2:03:a9:21:24:4b:57:df:60:21:42:b1:84:43:2b:5e:
0f:57:e9:16:54:50:93:7c:1a:af:57:6d:5b:7a:cb:cf:df:27:
78:c0:bd:2d:88:de:3d:f9:10:9e:d3:dd:8f:cd:c8:20:3d:19:
93:db:d2:4d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP5jMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MjEzNTQ4WhcNMjUxMjEzMjEzNTQ4WjAYMRYw
FAYDVQQDEw02NzdkOWUzNy04Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu8nBZVEarBzxGuQCKOkolIMibHPdEwMSzZuPE65ZHVmigsQVy014Kn00
AhskHKU/4TZUug3ytLxoouH0K981jdeBGCIoPpB9j+DPnQRlIbjqJHIiUuCZZhnA
ne3j9P3rtw+7HEqxikUt3u6V3hx9leSup2+6a6xqrWLIqJN8u0A1m64k+cw7efsX
fbH3b0ynBDgzdVj/3DZQ0ezweeXibywx7I6aOEqHI9L7DKEjzUh0Iy1Jt5ErFdj/
eg8Plsq8CX90vZPTF4EhrXjqM86mx82MNhAagGBhZEa+OX31OWtq4+zp+FMbEATw
eMeSMMsM9XHkBrI65PtBP4P10AxWbwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCXn
F76rYJAj4QXU4KdV1RRtTA5DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81REQ3OTdDNkNEM0YxMUVGQUJEMDUxQjc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPNaMA0GCSqGSIb3DQEBCwUA
A4IBAQBGJ89Q173FDKYHuVdT5zMTAC+W4/+C2HmVnWUmKENS7t285cIaLr9A5ne9
7l3wWYg3KHxmSEBowCQXbtuMr83ccyYeaKRlU331jIQUE41aS1eEZRlz7acVolDc
1GNDz2MLTesNT/3+wEhm9zrmSp3m2OqDzzWL1lezC7kIpTiWh7cADNMVMaKmFbB3
GukzOR00NnCJFYX3NgZOmYiEWnkoIdk+4xOC7ZvfYhJLCJNwuBb/e+7Np1YgCYS2
uyQDT4gf1LyBtONWC/IDqSEkS1ffYCFCsYRDK14PV+kWVFCTfBqvV21besvP3yd4
wL0tiN49+RCe092PzcggPRmT29JN
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:24 2025 by rpki-client