Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7715D970C27A11EF86055452762E951A.roa
File: 7715D970C27A11EF86055452762E951A.roa (raw, json)
Hash identifier: aBEF8MuoLT546zv50ogUXXHMzHi/vQamDIYZrpaY0Go=
Subject key identifier: 24:76:B7:2E:8E:37:12:11:F5:71:0E:DB:C4:C8:98:10:50:AC:74:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E897
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7715D970C27A11EF86055452762E951A.roa
Signing time: Wed 25 Dec 2024 04:41:11 +0000
ROA not before: Wed 25 Dec 2024 04:41:07 +0000
ROA not after: Wed 10 Dec 2025 04:41:07 +0000
asID: 984
IP address blocks: 156.227.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59543 (0xe897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:41:07 2024 GMT
Not After : Dec 10 04:41:07 2025 GMT
Subject: CN=676b8ce7-8bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:43:5f:b8:97:4c:d3:03:dc:7a:f7:64:24:
74:7d:47:ac:e6:31:ec:58:7b:6e:24:20:9b:1f:e6:
90:a0:c8:a8:e7:a1:7d:51:b2:a8:bb:b6:f2:69:22:
40:f9:2e:5c:48:1f:2b:bc:80:23:43:0a:cb:68:ea:
5b:12:f5:3d:8f:88:23:07:ba:0b:62:d1:e8:f3:a3:
d4:81:f4:d3:4b:7a:d1:cf:bf:ae:ac:ab:d7:0d:ef:
88:b9:ca:9a:c6:17:dc:a0:05:22:10:34:68:6c:92:
af:af:06:ca:22:ae:dc:73:82:39:a7:f4:6e:a5:13:
f6:39:df:ad:d8:e4:60:7c:ba:d7:27:7c:ef:29:ba:
91:d9:b8:71:21:28:e1:03:44:6d:ac:e4:c5:c8:12:
35:f9:fe:04:5e:60:74:7e:64:a8:8a:d8:fa:60:7a:
d2:31:f1:73:38:73:c2:73:75:b3:b4:3e:1b:2d:06:
73:bf:70:5e:4f:9b:96:2f:55:89:2b:63:3a:d7:a2:
ed:a3:df:ce:12:c7:2f:49:1a:34:e8:1f:5e:4d:41:
ba:26:f9:4f:c4:f1:95:42:c1:40:0c:0e:7f:42:9b:
84:53:9c:d3:78:d0:2d:1a:34:82:96:43:2a:70:02:
81:01:32:fa:62:e7:4a:af:c3:81:6c:ef:ed:79:29:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:B7:2E:8E:37:12:11:F5:71:0E:DB:C4:C8:98:10:50:AC:74:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7715D970C27A11EF86055452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1d:86:74:30:86:9e:39:f0:43:6a:90:5d:6e:d2:34:f9:00:
86:8c:e4:e3:80:dd:f9:ff:df:0b:2b:ca:2f:da:fc:c2:5c:fe:
f2:cf:16:a7:2c:59:68:f5:14:06:b8:ea:9c:e5:86:f0:3b:4c:
5a:de:58:78:78:59:02:9b:0c:34:8b:9e:cc:14:e4:97:0b:45:
81:c4:c2:be:a6:be:e3:b7:36:2a:a3:68:85:1b:d7:1b:e9:3b:
9e:44:e9:53:e5:8e:ec:39:10:f3:11:ec:0c:23:ca:62:1b:a6:
1e:1f:42:c7:72:14:43:4b:cc:86:2d:c5:ae:62:02:15:ec:49:
bd:3b:cf:70:25:a1:06:f0:9c:48:73:d2:cc:80:8d:a2:ba:62:
07:f4:17:49:e3:e4:80:6e:7e:77:b8:5b:4b:0d:3b:6c:ac:d0:
67:b0:a9:d0:32:a8:43:56:05:cc:8a:54:61:85:e7:43:2e:92:
29:08:67:9e:8e:e5:0d:35:35:d6:82:06:91:33:a7:38:d2:2b:
04:a8:ac:05:4b:9c:09:a1:d3:44:08:b3:f8:e5:e5:ca:b7:da:
97:0b:ad:97:23:e8:f1:3a:2d:8a:af:ab:1c:64:4b:7d:b6:c5:
5d:40:1e:fd:e0:b1:25:2f:93:a3:c4:98:78:e4:83:94:6f:77:
ec:20:17:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOiXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDQ0MTA3WhcNMjUxMjEwMDQ0MTA3WjAYMRYw
FAYDVQQDEw02NzZiOGNlNy04YmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz8dDX7iXTNMD3Hr3ZCR0fUes5jHsWHtuJCCbH+aQoMio56F9UbKou7by
aSJA+S5cSB8rvIAjQwrLaOpbEvU9j4gjB7oLYtHo86PUgfTTS3rRz7+urKvXDe+I
ucqaxhfcoAUiEDRobJKvrwbKIq7cc4I5p/RupRP2Od+t2ORgfLrXJ3zvKbqR2bhx
ISjhA0RtrOTFyBI1+f4EXmB0fmSoitj6YHrSMfFzOHPCc3WztD4bLQZzv3BeT5uW
L1WJK2M616Lto9/OEscvSRo06B9eTUG6JvlPxPGVQsFADA5/QpuEU5zTeNAtGjSC
lkMqcAKBATL6YudKr8OBbO/teSlZJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCR2
ty6ONxIR9XEO28TImBBQrHT7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzE1RDk3MEMyN0ExMUVGODYwNTU0NTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOOXMA0GCSqGSIb3DQEBCwUA
A4IBAQC5HYZ0MIaeOfBDapBdbtI0+QCGjOTjgN35/98LK8ov2vzCXP7yzxanLFlo
9RQGuOqc5YbwO0xa3lh4eFkCmww0i57MFOSXC0WBxMK+pr7jtzYqo2iFG9cb6Tue
ROlT5Y7sORDzEewMI8piG6YeH0LHchRDS8yGLcWuYgIV7Em9O89wJaEG8JxIc9LM
gI2iumIH9BdJ4+SAbn53uFtLDTtsrNBnsKnQMqhDVgXMilRhhedDLpIpCGeejuUN
NTXWggaRM6c40isEqKwFS5wJodNECLP45eXKt9qXC62XI+jxOi2Kr6scZEt9tsVd
QB794LElL5OjxJh45IOUb3fsIBdn
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:28 2025 by rpki-client