Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DCFFFC0F61C11EFBCE82493762E951A.roa
File: 9DCFFFC0F61C11EFBCE82493762E951A.roa (raw, json)
Hash identifier: +1TqZTQ/40+i7T7ihGSCzngef4mcHxtGvCCC2FCWL7o=
Subject key identifier: 9B:4F:0D:FC:8F:C4:E4:6D:D3:72:2E:C9:4D:3E:F9:5C:1B:F3:AD:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013F61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DCFFFC0F61C11EFBCE82493762E951A.roa
Signing time: Fri 28 Feb 2025 21:40:24 +0000
ROA not before: Fri 28 Feb 2025 21:40:20 +0000
ROA not after: Sun 13 Apr 2025 21:40:20 +0000
asID: 55320
IP address blocks: 156.244.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81761 (0x13f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 28 21:40:20 2025 GMT
Not After : Apr 13 21:40:20 2025 GMT
Subject: CN=67c22d48-48bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:92:bd:f2:d2:6e:28:b5:42:0e:e1:9a:fc:
60:b6:5f:cd:dc:ec:05:3e:ff:fc:8f:2d:7a:e4:37:
43:9d:8e:3b:d6:40:b2:0e:0e:8e:90:c7:d5:18:62:
0e:42:48:70:71:06:29:97:7a:39:1d:76:b6:58:37:
b0:cb:81:87:10:4f:96:8c:27:75:96:12:39:68:8e:
84:0e:60:f6:52:4e:19:34:0f:db:cc:65:a5:f0:f1:
13:d2:9d:d1:14:cd:23:b6:82:28:13:00:03:b2:48:
97:84:c3:97:88:5e:0b:1f:41:ae:e9:ec:b1:32:4f:
4c:fb:0b:ba:0b:a5:d5:cf:25:51:2d:b1:b1:2f:b4:
35:a1:8a:d1:c3:db:bc:f1:9c:09:5a:49:76:4a:33:
3b:81:10:d5:14:e6:77:e4:bc:18:27:27:d2:09:92:
06:58:ce:f3:73:ab:9f:3b:0d:90:ab:48:75:9f:e3:
6d:a1:c5:2b:60:23:c6:df:58:7d:48:9e:9f:21:2b:
2e:84:b8:fd:9b:02:e5:08:11:01:8d:34:f5:78:a3:
2b:2d:c1:0e:77:93:db:c0:77:1e:9a:14:0e:67:6b:
48:dc:f8:bd:40:c7:10:aa:a5:a8:bb:ba:0c:db:94:
bb:34:ce:01:11:4a:42:95:40:88:83:4d:96:c4:1f:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:0D:FC:8F:C4:E4:6D:D3:72:2E:C9:4D:3E:F9:5C:1B:F3:AD:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DCFFFC0F61C11EFBCE82493762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.24.0/24
Signature Algorithm: sha256WithRSAEncryption
02:3f:38:7f:05:5d:1d:ff:42:fa:19:58:0f:1d:00:ba:57:9a:
dc:63:ff:10:28:22:74:bb:b1:9e:18:19:88:a8:ef:48:f3:e9:
6c:8c:1e:27:e2:cc:92:84:24:a4:61:b9:31:42:a0:0a:c8:9f:
e4:5f:d8:a8:76:10:25:56:e9:89:c6:d0:eb:5f:88:fc:74:46:
12:aa:4a:37:88:d6:97:aa:93:18:02:3f:3b:c0:b2:63:77:64:
97:8f:1c:08:11:d4:08:d7:d6:98:1f:14:23:e1:93:10:70:ba:
a5:54:97:95:e5:86:b0:7c:73:7a:61:97:23:f1:d7:23:75:9f:
86:e7:76:41:8e:28:78:9a:02:c0:b7:54:ea:43:b1:68:c5:11:
8f:f9:03:ba:73:40:a8:50:1c:4a:d7:2a:6b:22:c2:82:ec:e2:
81:9b:95:dd:37:73:f7:9a:79:b5:d7:bd:ab:dc:67:13:cb:b7:
d9:9b:e9:69:3d:df:10:36:5a:0e:43:1f:e0:7c:c2:b9:13:d9:
a8:97:07:6d:3e:34:6b:33:ea:d5:1f:43:8c:80:0b:e1:0d:a3:
88:4d:e1:89:a5:7a:3a:df:6e:d9:e8:16:99:03:3b:64:d9:41:
6a:1b:08:00:66:88:df:8a:02:86:60:4e:f5:e3:83:a8:5d:fb:
52:32:f8:36
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAT9hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMjI4MjE0MDIwWhcNMjUwNDEzMjE0MDIwWjAYMRYw
FAYDVQQDEw02N2MyMmQ0OC00OGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAofmSvfLSbii1Qg7hmvxgtl/N3OwFPv/8jy165DdDnY471kCyDg6OkMfV
GGIOQkhwcQYpl3o5HXa2WDewy4GHEE+WjCd1lhI5aI6EDmD2Uk4ZNA/bzGWl8PET
0p3RFM0jtoIoEwADskiXhMOXiF4LH0Gu6eyxMk9M+wu6C6XVzyVRLbGxL7Q1oYrR
w9u88ZwJWkl2SjM7gRDVFOZ35LwYJyfSCZIGWM7zc6ufOw2Qq0h1n+NtocUrYCPG
31h9SJ6fISsuhLj9mwLlCBEBjTT1eKMrLcEOd5PbwHcemhQOZ2tI3Pi9QMcQqqWo
u7oM25S7NM4BEUpClUCIg02WxB+JJQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJtP
DfyPxORt03IuyU0++Vwb862AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RENGRkZDMEY2MUMxMUVGQkNFODI0OTM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQYMA0GCSqGSIb3DQEBCwUA
A4IBAQACPzh/BV0d/0L6GVgPHQC6V5rcY/8QKCJ0u7GeGBmIqO9I8+lsjB4n4syS
hCSkYbkxQqAKyJ/kX9iodhAlVumJxtDrX4j8dEYSqko3iNaXqpMYAj87wLJjd2SX
jxwIEdQI19aYHxQj4ZMQcLqlVJeV5YawfHN6YZcj8dcjdZ+G53ZBjih4mgLAt1Tq
Q7FoxRGP+QO6c0CoUBxK1yprIsKC7OKBm5XdN3P3mnm1172r3GcTy7fZm+lpPd8Q
NloOQx/gfMK5E9molwdtPjRrM+rVH0OMgAvhDaOITeGJpXo6327Z6BaZAztk2UFq
GwgAZojfigKGYE7144OoXftSMvg2
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:44 2025 by rpki-client