Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81D3841CCD2311EFBBBBBF87762E951A.roa
File: 81D3841CCD2311EFBBBBBF87762E951A.roa (raw, json)
Hash identifier: ZAT4vOqaewGTSR+fkslaepqjj2SHbdOzYL1yR2rxpGQ=
Subject key identifier: 41:21:0E:EF:98:8E:28:C0:ED:D8:2D:41:1C:84:2B:7D:1B:E0:1A:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FD87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81D3841CCD2311EFBBBBBF87762E951A.roa
Signing time: Tue 07 Jan 2025 18:16:26 +0000
ROA not before: Tue 07 Jan 2025 18:16:22 +0000
ROA not after: Sat 13 Dec 2025 18:16:22 +0000
asID: 984
IP address blocks: 156.241.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64903 (0xfd87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 18:16:22 2025 GMT
Not After : Dec 13 18:16:22 2025 GMT
Subject: CN=677d6f7a-e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:db:cc:a8:a5:6d:8a:7a:7e:cd:45:f6:56:
7b:6e:63:d6:0f:e7:be:40:2c:d9:ed:32:60:44:46:
59:76:53:e8:1e:b5:87:58:2f:36:88:3c:e5:a5:2f:
77:53:12:1c:89:78:88:96:f9:db:d2:fe:4d:55:32:
a7:49:bc:3e:3b:e7:a7:4b:8c:36:4d:a4:0c:73:f5:
5d:66:54:a3:54:8c:21:30:52:15:06:16:08:e3:45:
72:08:f2:1a:c7:f7:85:d8:c8:3c:83:e9:dc:e4:9a:
e6:f9:df:69:3f:5c:6a:8e:fe:e7:65:9d:f4:41:ce:
78:1d:f2:56:b9:0c:0a:9a:90:e7:82:b8:6f:d0:20:
d4:b0:0e:c6:af:da:d5:e9:fe:a7:a4:cd:2c:b1:62:
23:33:4b:76:31:84:86:05:80:0d:86:7d:49:60:17:
7b:28:e7:2b:e0:e4:11:a6:cb:66:d9:40:d6:02:9d:
28:4c:14:95:3d:a5:1a:09:c0:e3:6a:b6:a8:f1:a9:
58:57:ab:c7:b9:27:8f:d8:ae:49:99:2b:c6:49:d4:
53:01:07:e4:c7:26:07:e0:c1:4c:d4:74:32:52:cd:
6f:a0:6b:d3:53:2a:90:8a:f9:5a:1a:b2:ae:00:49:
e8:dd:ef:e2:58:4d:00:ea:1b:41:b8:70:5b:18:28:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:0E:EF:98:8E:28:C0:ED:D8:2D:41:1C:84:2B:7D:1B:E0:1A:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81D3841CCD2311EFBBBBBF87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.206.0/24
Signature Algorithm: sha256WithRSAEncryption
39:00:75:21:a3:43:e1:63:aa:f6:9a:9c:ae:c9:00:57:a2:27:
e6:46:0a:2c:b3:0b:46:d6:eb:a0:22:28:00:be:1d:f1:ed:62:
02:bf:48:31:4e:2d:3b:a1:00:b1:f3:52:c6:96:62:18:26:7a:
ee:90:ec:97:0c:f7:88:77:68:ce:d1:25:d7:a3:cf:02:b6:cc:
fa:c7:cd:3a:30:b4:c7:28:12:37:3a:b0:7d:e6:ef:11:b2:b0:
36:a9:1a:75:d0:3f:76:ce:ad:c8:ba:98:7d:55:81:07:dd:24:
26:84:c7:ce:6c:8c:3a:96:24:a7:ab:0b:57:11:77:a7:e6:d0:
ea:32:5c:c4:03:35:9c:43:54:53:17:33:5f:7f:03:fd:0c:01:
48:80:cf:3c:c3:0d:86:ae:a0:42:b9:0e:bd:16:f7:df:7c:f9:
f3:29:60:d1:86:97:d4:3c:74:0c:17:b6:5c:9e:32:97:48:22:
68:14:91:5c:79:f1:f3:a4:d6:b8:21:3a:a4:42:a1:1f:6e:bb:
fe:ff:97:6b:9f:b2:6b:33:6c:35:8a:d2:23:d3:0e:f3:5b:f5:
4d:04:bc:75:a0:c9:8d:5e:f0:5a:3e:eb:ab:1f:2e:b8:8d:21:
4c:cc:26:80:89:b8:5e:31:b4:3b:7a:3f:b5:ec:07:cf:24:62:
c8:5b:2a:52
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP2HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTgxNjIyWhcNMjUxMjEzMTgxNjIyWjAYMRYw
FAYDVQQDEw02NzdkNmY3YS1lNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwfXbzKilbYp6fs1F9lZ7bmPWD+e+QCzZ7TJgREZZdlPoHrWHWC82iDzl
pS93UxIciXiIlvnb0v5NVTKnSbw+O+enS4w2TaQMc/VdZlSjVIwhMFIVBhYI40Vy
CPIax/eF2Mg8g+nc5Jrm+d9pP1xqjv7nZZ30Qc54HfJWuQwKmpDngrhv0CDUsA7G
r9rV6f6npM0ssWIjM0t2MYSGBYANhn1JYBd7KOcr4OQRpstm2UDWAp0oTBSVPaUa
CcDjarao8alYV6vHuSeP2K5JmSvGSdRTAQfkxyYH4MFM1HQyUs1voGvTUyqQivla
GrKuAEno3e/iWE0A6htBuHBbGChL+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEEh
Du+YjijA7dgtQRyEK30b4BojMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MUQzODQxQ0NEMjMxMUVGQkJCQkJGODc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHOMA0GCSqGSIb3DQEBCwUA
A4IBAQA5AHUho0PhY6r2mpyuyQBXoifmRgosswtG1uugIigAvh3x7WICv0gxTi07
oQCx81LGlmIYJnrukOyXDPeId2jO0SXXo88Ctsz6x806MLTHKBI3OrB95u8RsrA2
qRp10D92zq3Iuph9VYEH3SQmhMfObIw6liSnqwtXEXen5tDqMlzEAzWcQ1RTFzNf
fwP9DAFIgM88ww2GrqBCuQ69FvfffPnzKWDRhpfUPHQMF7ZcnjKXSCJoFJFcefHz
pNa4ITqkQqEfbrv+/5drn7JrM2w1itIj0w7zW/VNBLx1oMmNXvBaPuurHy64jSFM
zCaAibheMbQ7ej+17AfPJGLIWypS
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:31 2025 by rpki-client