Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BDE5A4C98A11EF91D065BC762E951A.roa
File: 63BDE5A4C98A11EF91D065BC762E951A.roa (raw, json)
Hash identifier: 9n/8L7u8D5PeDEqaAGziEVHCt2mbLnmwmI2gkhbkr+Q=
Subject key identifier: E5:D8:09:7E:C4:60:0C:DD:EB:4E:56:01:DB:13:AF:7C:B4:2E:11:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F5A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BDE5A4C98A11EF91D065BC762E951A.roa
Signing time: Fri 03 Jan 2025 04:22:49 +0000
ROA not before: Fri 03 Jan 2025 04:22:45 +0000
ROA not after: Sat 13 Dec 2025 04:22:45 +0000
asID: 984
IP address blocks: 156.233.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62887 (0xf5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 04:22:45 2025 GMT
Not After : Dec 13 04:22:45 2025 GMT
Subject: CN=67776619-ac28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:7f:89:3c:b1:85:a9:91:03:78:cf:9f:fe:
01:3e:08:ae:3e:1a:62:0d:60:e9:c6:0c:63:21:7f:
ae:cc:cb:11:80:c5:0b:55:ad:ef:c0:24:ad:b7:53:
0d:a6:52:fa:c9:46:0e:6f:ed:7a:96:5f:6c:4e:82:
e3:74:ad:b1:fa:e7:f6:8e:47:dc:9e:9e:fd:a1:4c:
d1:51:32:62:73:96:9e:29:10:58:b9:32:a1:34:52:
56:53:38:22:07:36:0c:d1:9e:22:d0:47:0c:63:55:
ba:91:0c:8e:26:71:1c:1b:06:d4:af:68:dc:54:e2:
7f:6e:ba:92:df:92:8a:39:7b:cd:ee:f1:97:7e:e0:
66:00:9a:9d:35:5e:2f:95:46:f5:9e:c0:a0:07:13:
91:07:aa:39:17:ca:c4:53:c1:15:15:2e:00:e8:c6:
2f:42:c5:ca:10:14:2e:6d:57:dc:2d:f9:ab:82:c5:
f6:5e:53:64:31:c2:ab:18:82:09:97:45:fc:73:98:
d0:9f:f3:10:b2:cf:ef:b4:4a:09:eb:ea:80:91:d2:
2b:9b:33:01:ff:c0:cf:d9:60:38:ef:31:c4:97:dd:
2a:0b:7d:08:c9:a5:ae:cd:70:10:98:cf:f7:6c:cc:
81:34:09:26:32:38:59:00:69:54:e2:a4:00:8c:e5:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:09:7E:C4:60:0C:DD:EB:4E:56:01:DB:13:AF:7C:B4:2E:11:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63BDE5A4C98A11EF91D065BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.38.0/24
Signature Algorithm: sha256WithRSAEncryption
90:29:66:bc:39:3d:7e:65:ed:dd:0d:b9:e4:99:03:cd:0d:d2:
43:43:56:df:d5:05:52:fe:15:fb:30:7f:2c:9e:8b:74:82:c2:
15:29:4b:21:d6:72:3c:ff:92:9c:45:2d:1a:86:2a:f3:47:0c:
00:0d:72:63:3b:29:da:a3:74:73:c5:3a:e5:55:74:41:78:fd:
f6:36:52:8e:c6:1d:d7:99:fa:79:7c:f9:85:59:98:cf:21:79:
47:dc:4c:d8:1d:65:55:d7:a7:44:b8:6a:48:7c:a6:f1:c4:5f:
d8:c1:87:e9:bb:fa:46:45:88:1c:8b:87:08:a1:e6:09:cc:88:
99:de:79:4d:f8:8d:31:65:3a:7f:fd:77:41:e0:af:9a:ca:8b:
d0:2d:58:f4:83:72:6c:54:c2:e8:42:df:dd:43:51:24:40:45:
25:72:8a:f9:11:c8:36:7a:94:75:66:dc:9a:46:c6:81:b9:75:
82:7a:63:af:ab:f0:d6:02:6f:4d:90:90:33:cd:25:33:c4:da:
72:9b:72:be:5e:86:12:a5:a2:c0:cd:99:bb:82:07:b2:e8:d5:
de:b3:47:e4:b2:5e:c0:00:e1:e9:b3:ea:17:94:f5:4b:3c:fc:
33:b0:d2:29:d6:aa:39:c6:4c:59:3a:64:11:6a:26:64:c6:4a:
78:5c:80:e8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPWnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDQyMjQ1WhcNMjUxMjEzMDQyMjQ1WjAYMRYw
FAYDVQQDEw02Nzc3NjYxOS1hYzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr4J/iTyxhamRA3jPn/4BPgiuPhpiDWDpxgxjIX+uzMsRgMULVa3vwCSt
t1MNplL6yUYOb+16ll9sToLjdK2x+uf2jkfcnp79oUzRUTJic5aeKRBYuTKhNFJW
UzgiBzYM0Z4i0EcMY1W6kQyOJnEcGwbUr2jcVOJ/brqS35KKOXvN7vGXfuBmAJqd
NV4vlUb1nsCgBxORB6o5F8rEU8EVFS4A6MYvQsXKEBQubVfcLfmrgsX2XlNkMcKr
GIIJl0X8c5jQn/MQss/vtEoJ6+qAkdIrmzMB/8DP2WA47zHEl90qC30IyaWuzXAQ
mM/3bMyBNAkmMjhZAGlU4qQAjOU5fwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOXY
CX7EYAzd605WAdsTr3y0LhHAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0JERTVBNEM5OEExMUVGOTFEMDY1QkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkmMA0GCSqGSIb3DQEBCwUA
A4IBAQCQKWa8OT1+Ze3dDbnkmQPNDdJDQ1bf1QVS/hX7MH8snot0gsIVKUsh1nI8
/5KcRS0ahirzRwwADXJjOynao3RzxTrlVXRBeP32NlKOxh3Xmfp5fPmFWZjPIXlH
3EzYHWVV16dEuGpIfKbxxF/YwYfpu/pGRYgci4cIoeYJzIiZ3nlN+I0xZTp//XdB
4K+ayovQLVj0g3JsVMLoQt/dQ1EkQEUlcor5Ecg2epR1ZtyaRsaBuXWCemOvq/DW
Am9NkJAzzSUzxNpym3K+XoYSpaLAzZm7ggey6NXes0fksl7AAOHps+oXlPVLPPwz
sNIp1qo5xkxZOmQRaiZkxkp4XIDo
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:20 2025 by rpki-client