Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC81042E9B511EF8D4627AA762E951A.roa
File: 7CC81042E9B511EF8D4627AA762E951A.roa (raw, json)
Hash identifier: xb4/uvzDzBJhIRcwNN3t9M/hfHaFwCXMvrABbngVlzs=
Subject key identifier: 69:E0:6E:24:04:6D:DD:AA:0E:7B:F3:9A:A9:BB:47:7D:09:9D:D6:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0121A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC81042E9B511EF8D4627AA762E951A.roa
Signing time: Thu 13 Feb 2025 02:51:56 +0000
ROA not before: Thu 13 Feb 2025 02:51:52 +0000
ROA not after: Wed 31 Dec 2025 02:51:52 +0000
asID: 17561
IP address blocks: 156.236.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 13 Apr 2025 00:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74150 (0x121a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 13 02:51:52 2025 GMT
Not After : Dec 31 02:51:52 2025 GMT
Subject: CN=67ad5e4c-a4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:5f:99:26:f4:bd:79:49:8a:82:e3:9c:56:
5f:83:4f:7c:22:6b:27:51:79:4c:4a:61:e3:77:35:
8f:da:e8:be:1f:06:3a:9a:a8:0d:0f:45:a0:94:6b:
0b:e4:09:05:73:af:11:cf:fb:91:01:69:21:eb:0a:
b9:a0:be:c7:74:09:e1:e1:02:f6:d5:33:68:71:9c:
a1:24:19:4c:39:ff:dc:d9:28:9a:e0:7a:f1:c3:6b:
cf:82:bd:ac:7f:c4:a3:00:7f:45:a7:e7:a3:98:95:
17:1d:26:e3:93:f6:b9:5d:47:b1:98:7b:4e:3a:4c:
f2:00:a9:33:ec:23:72:3d:40:ef:4e:1e:89:db:e1:
bc:76:00:5b:00:7a:29:b9:e8:50:0c:a4:d6:f7:f2:
f5:2d:b0:b5:a9:ea:7c:88:15:b6:d2:13:6e:50:8d:
03:63:a4:58:20:c2:9f:52:0c:45:08:15:1f:82:b2:
66:80:77:1d:d7:30:f4:08:02:3e:bc:e6:b0:7f:29:
2d:3e:8e:b8:fe:70:54:92:97:df:26:bb:f2:41:21:
c5:c7:52:26:b9:ac:bf:92:c6:16:fe:45:3b:56:7f:
07:db:7a:a6:d1:ff:cf:04:3f:ad:68:55:eb:b7:ec:
7a:40:8f:d4:07:fc:1d:16:5c:27:0e:e2:ac:8e:a7:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:6E:24:04:6D:DD:AA:0E:7B:F3:9A:A9:BB:47:7D:09:9D:D6:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC81042E9B511EF8D4627AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:65:03:7b:63:ab:11:2f:bb:e6:7f:3d:03:9f:fa:ab:a2:6f:
68:24:b5:eb:89:f6:af:dd:6a:99:35:6f:54:76:af:e1:d5:d9:
1e:29:ec:77:22:57:3a:d6:8b:bb:36:65:b4:28:02:aa:59:bd:
78:54:6c:d8:91:bc:12:74:d3:34:69:79:45:9d:3f:78:90:9d:
93:14:9e:2b:31:9e:ec:07:e8:67:12:32:5c:5a:4c:70:f0:b8:
8c:0c:26:f5:cb:a7:f7:e2:96:0c:b2:70:09:d0:29:81:ab:a0:
0e:6c:d3:27:5c:54:9f:38:10:7c:2b:69:86:c2:6c:cd:98:00:
4f:fb:b5:1d:e1:63:eb:a5:1c:f5:df:36:0b:65:4f:2a:be:dd:
79:bb:ba:00:d9:28:e1:bf:cc:d5:46:49:b9:f5:de:b0:23:05:
59:33:cc:29:0b:4d:c1:c6:0a:65:43:49:0a:f4:e9:35:68:16:
b3:72:e9:f4:1d:df:00:53:47:0e:fa:5d:c5:17:29:ac:9b:66:
3d:48:f7:d1:5b:42:fa:11:c2:51:de:35:57:b8:63:74:7b:a0:
cc:84:e9:51:d6:f4:1e:b6:3d:62:83:d1:bc:d3:89:5d:f3:87:
5c:47:76:47:21:eb:5a:ab:79:b3:72:f2:a6:60:23:50:65:6d:
57:b8:b8:4d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDASGmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjEzMDI1MTUyWhcNMjUxMjMxMDI1MTUyWjAYMRYw
FAYDVQQDEw02N2FkNWU0Yy1hNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxw5fmSb0vXlJioLjnFZfg098ImsnUXlMSmHjdzWP2ui+HwY6mqgND0Wg
lGsL5AkFc68Rz/uRAWkh6wq5oL7HdAnh4QL21TNocZyhJBlMOf/c2Sia4Hrxw2vP
gr2sf8SjAH9Fp+ejmJUXHSbjk/a5XUexmHtOOkzyAKkz7CNyPUDvTh6J2+G8dgBb
AHopuehQDKTW9/L1LbC1qep8iBW20hNuUI0DY6RYIMKfUgxFCBUfgrJmgHcd1zD0
CAI+vOawfyktPo64/nBUkpffJrvyQSHFx1Imuay/ksYW/kU7Vn8H23qm0f/PBD+t
aFXrt+x6QI/UB/wdFlwnDuKsjqdrOQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGng
biQEbd2qDnvzmqm7R30JndY3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Q0M4MTA0MkU5QjUxMUVGOEQ0NjI3QUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwiMA0GCSqGSIb3DQEBCwUA
A4IBAQCxZQN7Y6sRL7vmfz0Dn/qrom9oJLXrifav3WqZNW9Udq/h1dkeKex3Ilc6
1ou7NmW0KAKqWb14VGzYkbwSdNM0aXlFnT94kJ2TFJ4rMZ7sB+hnEjJcWkxw8LiM
DCb1y6f34pYMsnAJ0CmBq6AObNMnXFSfOBB8K2mGwmzNmABP+7Ud4WPrpRz13zYL
ZU8qvt15u7oA2Sjhv8zVRkm59d6wIwVZM8wpC03BxgplQ0kK9Ok1aBazcun0Hd8A
U0cO+l3FFymsm2Y9SPfRW0L6EcJR3jVXuGN0e6DMhOlR1vQetj1ig9G804ld84dc
R3ZHIetaq3mzcvKmYCNQZW1XuLhN
-----END CERTIFICATE-----
Generated at Fri Apr 11 18:20:47 2025 by rpki-client