Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D7E4228CD3011EF9B74005A762E951A.roa
File: 7D7E4228CD3011EF9B74005A762E951A.roa (raw, json)
Hash identifier: ob+kxZvfuppBrvkDo6+/vFjO74UfcGIFHBtQ0MekjYg=
Subject key identifier: 6A:BD:E4:A8:69:3E:BD:0A:5C:91:88:5D:34:4E:F8:2B:92:E5:0F:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D7E4228CD3011EF9B74005A762E951A.roa
Signing time: Tue 07 Jan 2025 19:49:22 +0000
ROA not before: Tue 07 Jan 2025 19:49:18 +0000
ROA not after: Mon 13 Dec 2027 19:49:18 +0000
asID: 17561
IP address blocks: 156.242.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65005 (0xfded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 19:49:18 2025 GMT
Not After : Dec 13 19:49:18 2027 GMT
Subject: CN=677d8542-20e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:cc:7c:39:b4:e8:52:b5:ad:92:af:4b:77:
fd:7d:27:7e:a3:96:e7:e4:13:af:36:c1:4c:d0:18:
7e:70:21:ef:95:31:8d:8c:55:9f:3f:c9:c0:5a:a5:
d6:35:b2:39:28:f7:a5:5d:75:c0:2f:70:3d:40:03:
5b:d4:c8:f9:56:62:f0:2d:85:98:60:b9:97:8c:87:
9b:df:30:e0:68:21:e2:40:ae:bb:d1:79:ca:bd:89:
c5:3f:f1:ae:47:76:aa:e7:03:76:03:7c:bb:64:20:
18:bc:aa:2e:85:c8:a8:bb:20:f9:30:dc:b7:91:11:
26:3d:c8:32:8a:28:c3:ca:b0:60:34:8d:b4:8b:ec:
e8:a1:f6:1a:18:50:ea:93:37:0a:04:6b:0c:07:7a:
8e:91:e2:b8:0c:d8:35:16:43:05:1e:90:01:16:01:
1b:ef:ce:8f:4f:9f:84:df:b1:fb:7b:4a:c4:cd:94:
ac:54:e5:27:8e:fb:a7:6a:43:9f:3b:b2:ed:9f:1b:
23:05:b1:0b:4a:2c:ed:bf:e6:a5:ce:d7:35:f6:b4:
40:62:5d:7c:97:22:db:68:86:1a:d0:2b:bf:19:ca:
3c:27:d5:a3:ec:a0:10:fb:be:92:93:a7:1d:0b:26:
f9:92:a1:ee:a3:2c:3a:85:23:20:08:e8:c8:42:ce:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:E4:A8:69:3E:BD:0A:5C:91:88:5D:34:4E:F8:2B:92:E5:0F:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D7E4228CD3011EF9B74005A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f1:46:36:fa:49:32:d6:f3:e0:16:50:e1:98:3b:23:5f:58:
f4:3b:36:75:20:9d:a1:4a:c6:99:20:5d:cb:6d:ca:37:0f:ad:
9c:f7:0f:58:b3:f9:e2:58:88:f6:10:2e:ae:73:18:b7:b1:44:
f8:8f:52:a3:24:c4:ad:fb:ce:60:e8:05:e2:b5:b4:bc:55:a3:
26:57:3e:1a:bb:02:fe:9e:57:1e:dd:cd:5b:5d:9e:5a:bf:4f:
3e:2b:e6:74:cb:22:c8:2f:b1:35:1e:1d:e5:bd:57:38:e1:ed:
3c:55:7f:8f:ce:86:3f:30:7d:a5:37:13:60:09:42:12:8e:63:
85:ad:3e:0e:63:d8:0b:34:1e:ae:51:95:cb:7d:7f:90:c9:fd:
3a:63:72:e2:23:09:43:ae:ed:d6:2f:fd:fe:b4:7b:e3:72:ad:
57:63:be:17:6b:24:24:44:9c:0c:6f:e8:db:95:09:bf:44:f1:
fc:ab:41:7d:96:cb:3c:09:d1:22:eb:90:56:38:15:80:b9:41:
62:24:52:9b:11:f3:45:6c:94:f4:e2:fb:8a:f0:27:45:5f:b1:
1e:7c:43:cd:24:d4:ce:a5:3c:99:11:c1:67:0d:31:b8:37:77:
c2:36:93:30:81:88:fe:0a:1f:88:7e:13:7c:85:2a:a8:0a:ab:
ae:9e:76:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP3tMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTk0OTE4WhcNMjcxMjEzMTk0OTE4WjAYMRYw
FAYDVQQDEw02NzdkODU0Mi0yMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqTbMfDm06FK1rZKvS3f9fSd+o5bn5BOvNsFM0Bh+cCHvlTGNjFWfP8nA
WqXWNbI5KPelXXXAL3A9QANb1Mj5VmLwLYWYYLmXjIeb3zDgaCHiQK670XnKvYnF
P/GuR3aq5wN2A3y7ZCAYvKouhciouyD5MNy3kREmPcgyiijDyrBgNI20i+zoofYa
GFDqkzcKBGsMB3qOkeK4DNg1FkMFHpABFgEb786PT5+E37H7e0rEzZSsVOUnjvun
akOfO7LtnxsjBbELSiztv+alztc19rRAYl18lyLbaIYa0Cu/Gco8J9Wj7KAQ+76S
k6cdCyb5kqHuoyw6hSMgCOjIQs6xaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGq9
5KhpPr0KXJGIXTRO+CuS5Q+nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RDdFNDIyOENEMzAxMUVGOUI3NDAwNUE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPIbMA0GCSqGSIb3DQEBCwUA
A4IBAQCk8UY2+kky1vPgFlDhmDsjX1j0OzZ1IJ2hSsaZIF3Lbco3D62c9w9Ys/ni
WIj2EC6ucxi3sUT4j1KjJMSt+85g6AXitbS8VaMmVz4auwL+nlce3c1bXZ5av08+
K+Z0yyLIL7E1Hh3lvVc44e08VX+PzoY/MH2lNxNgCUISjmOFrT4OY9gLNB6uUZXL
fX+Qyf06Y3LiIwlDru3WL/3+tHvjcq1XY74XayQkRJwMb+jblQm/RPH8q0F9lss8
CdEi65BWOBWAuUFiJFKbEfNFbJT04vuK8CdFX7EefEPNJNTOpTyZEcFnDTG4N3fC
NpMwgYj+Ch+IfhN8hSqoCquunna7
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:52 2025 by rpki-client