Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4A83DFAC33411EFA7BD546A762E951A.roa
File: A4A83DFAC33411EFA7BD546A762E951A.roa (raw, json)
Hash identifier: Xf9xPhAIyG/9TqVeXQzrCy0EOREVtBJZd8Wcf6sNdx0=
Subject key identifier: 2C:E1:7F:4C:24:34:AC:F3:56:9A:34:1D:73:C7:AE:AE:28:FD:7D:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EB39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4A83DFAC33411EFA7BD546A762E951A.roa
Signing time: Thu 26 Dec 2024 02:53:54 +0000
ROA not before: Thu 26 Dec 2024 02:53:50 +0000
ROA not after: Wed 10 Dec 2025 02:53:50 +0000
asID: 984
IP address blocks: 156.244.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60217 (0xeb39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 02:53:50 2024 GMT
Not After : Dec 10 02:53:50 2025 GMT
Subject: CN=676cc542-6468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:ef:0b:5b:c5:ec:1f:c3:35:a4:33:d2:38:
5f:81:0d:b9:89:3f:90:bc:0a:b4:10:70:fc:6a:fa:
ae:64:15:ae:c1:04:40:a6:ff:7d:0c:2d:61:d2:f7:
90:df:c1:5d:d1:06:71:76:3b:f4:e3:ed:46:74:4c:
ac:55:46:ec:ce:d6:7d:c9:28:73:d6:92:5b:da:b2:
c4:3a:b9:7b:59:e3:eb:45:47:c5:f7:ba:f1:de:12:
75:f3:3d:2b:c4:12:69:b6:d7:0f:a0:b9:52:73:88:
d5:1e:39:65:6c:21:ae:6e:ee:9d:b2:77:54:1d:5b:
83:03:dd:69:45:51:4d:72:0f:f0:79:d0:4a:7b:16:
c1:16:19:0c:5f:70:58:1e:d1:c3:c9:7a:d6:9f:0d:
80:99:84:40:a0:81:d4:37:a0:23:88:f9:08:80:92:
07:23:f3:0a:20:92:97:56:c6:d6:9c:fd:bb:15:57:
c5:3d:c9:21:98:af:62:f7:a1:4f:1b:b7:ec:5d:06:
bb:9d:bf:c7:96:02:da:2f:c8:92:c6:0c:6e:fa:c6:
b3:19:39:c3:63:38:06:5c:62:5a:5e:c7:77:6c:6f:
74:75:5c:bc:58:62:2b:06:51:1f:4d:7d:47:0c:ae:
7b:ff:9b:dc:ef:71:31:31:04:29:04:3c:8f:e0:96:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E1:7F:4C:24:34:AC:F3:56:9A:34:1D:73:C7:AE:AE:28:FD:7D:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4A83DFAC33411EFA7BD546A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:21:e6:51:cf:4b:83:12:08:b1:6f:30:16:c7:c4:42:c0:77:
b9:51:bf:ac:ed:14:7b:29:f2:c5:a3:4c:a7:de:40:5a:35:d8:
5e:8f:f3:e6:fd:91:f6:c4:75:6d:41:a9:cc:b5:40:4b:c7:68:
6f:75:60:70:70:0b:5e:02:7d:5d:ea:0b:80:90:8a:0f:b6:2d:
a7:4a:8c:fb:2a:6c:cc:dd:5d:d2:f9:16:55:93:1c:dd:41:0c:
07:db:20:98:b8:a6:60:9d:5d:db:ec:46:c6:a5:70:97:9e:65:
3c:c6:b0:09:8d:9f:f9:a1:d2:3a:22:55:f5:e1:f9:3e:91:3b:
7f:cc:83:aa:34:e8:f4:7a:0f:3b:3e:a9:be:13:6d:39:5b:14:
63:98:c6:06:b2:6f:c6:98:2a:ce:77:f5:26:97:22:dc:6e:5c:
96:e6:70:26:69:19:27:41:c5:22:6b:c6:e7:e7:5b:c9:24:a8:
4f:9d:28:bd:3e:a1:e7:02:4d:fc:d5:dd:e3:67:ee:a2:82:86:
2a:f4:c0:c4:0f:07:ba:0a:d8:bd:cb:1f:58:e2:d9:5b:65:d6:
ce:a0:4d:b5:d7:e8:0c:b9:f2:39:4c:d5:7d:87:d8:67:a7:ca:
a9:5d:ad:23:a6:a1:c0:80:d5:ea:f7:56:32:ea:e2:f9:9d:86:
4c:82:9a:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOs5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDI1MzUwWhcNMjUxMjEwMDI1MzUwWjAYMRYw
FAYDVQQDEw02NzZjYzU0Mi02NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvKnvC1vF7B/DNaQz0jhfgQ25iT+QvAq0EHD8avquZBWuwQRApv99DC1h
0veQ38Fd0QZxdjv04+1GdEysVUbsztZ9yShz1pJb2rLEOrl7WePrRUfF97rx3hJ1
8z0rxBJpttcPoLlSc4jVHjllbCGubu6dsndUHVuDA91pRVFNcg/wedBKexbBFhkM
X3BYHtHDyXrWnw2AmYRAoIHUN6AjiPkIgJIHI/MKIJKXVsbWnP27FVfFPckhmK9i
96FPG7fsXQa7nb/HlgLaL8iSxgxu+sazGTnDYzgGXGJaXsd3bG90dVy8WGIrBlEf
TX1HDK57/5vc73ExMQQpBDyP4JZTAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCzh
f0wkNKzzVpo0HXPHrq4o/X0+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNEE4M0RGQUMzMzQxMUVGQTdCRDU0NkE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPSYMA0GCSqGSIb3DQEBCwUA
A4IBAQA/IeZRz0uDEgixbzAWx8RCwHe5Ub+s7RR7KfLFo0yn3kBaNdhej/Pm/ZH2
xHVtQanMtUBLx2hvdWBwcAteAn1d6guAkIoPti2nSoz7KmzM3V3S+RZVkxzdQQwH
2yCYuKZgnV3b7EbGpXCXnmU8xrAJjZ/5odI6IlX14fk+kTt/zIOqNOj0eg87Pqm+
E205WxRjmMYGsm/GmCrOd/UmlyLcblyW5nAmaRknQcUia8bn51vJJKhPnSi9PqHn
Ak381d3jZ+6igoYq9MDEDwe6Cti9yx9Y4tlbZdbOoE211+gMufI5TNV9h9hnp8qp
Xa0jpqHAgNXq91Yy6uL5nYZMgpqU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:04 2025 by rpki-client