Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0BD62CDA911EF8CA5046C762E951A.roa
File: A4F0BD62CDA911EF8CA5046C762E951A.roa (raw, json)
Hash identifier: tDlc/71hW4PuqNnqrwPZscYEp19vDV6Qh82kmTRnsHI=
Subject key identifier: 78:28:5E:00:A7:D5:30:C9:62:E3:CB:39:80:25:D0:0B:46:0F:53:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010145
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0BD62CDA911EF8CA5046C762E951A.roa
Signing time: Wed 08 Jan 2025 10:16:37 +0000
ROA not before: Wed 08 Jan 2025 10:16:34 +0000
ROA not after: Sat 13 Dec 2025 10:16:34 +0000
asID: 984
IP address blocks: 156.255.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65861 (0x10145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 10:16:34 2025 GMT
Not After : Dec 13 10:16:34 2025 GMT
Subject: CN=677e5085-815a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:41:07:90:c3:63:50:0e:0f:d8:98:b2:cb:
42:cd:02:79:49:67:51:ca:c9:82:9f:69:0a:57:8f:
71:02:f1:ed:b6:3e:a6:4e:ee:10:2d:fb:a9:5a:09:
18:ff:c7:e9:a1:00:b5:5b:e8:88:cf:4b:88:2c:88:
7b:d3:a6:db:17:4a:2b:dc:09:79:83:4b:ee:d5:4d:
b1:39:2f:04:ec:aa:00:03:78:a5:9b:4c:ce:1d:a5:
f6:c7:d8:f2:c4:7c:f9:6a:07:08:95:44:b6:02:97:
64:74:37:19:ff:f4:fc:8b:9f:c1:1b:73:4c:d2:54:
3f:d1:8e:37:83:4e:70:0a:34:ad:f6:1a:0f:e4:12:
37:7f:45:1d:b7:92:69:90:7f:05:21:05:e7:2c:c8:
ea:f6:9a:d0:bf:b6:a9:ca:ab:5a:02:8d:63:a3:40:
bb:a0:17:e3:69:c1:71:71:4d:3f:13:7d:7a:e2:dc:
2f:42:2f:86:9f:b6:1d:03:e2:ab:4e:d5:4d:60:07:
bd:8f:fd:03:52:22:c7:43:dc:c1:00:78:1b:00:8a:
93:8d:31:a1:37:01:35:b3:fb:71:40:92:b0:0d:26:
08:62:8b:49:49:b5:3c:17:df:b4:67:70:98:7d:a1:
3c:2f:32:e9:6f:c2:62:2b:8c:44:a2:88:52:ae:90:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:5E:00:A7:D5:30:C9:62:E3:CB:39:80:25:D0:0B:46:0F:53:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0BD62CDA911EF8CA5046C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.37.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e4:7b:f5:9d:35:d5:9e:21:68:a6:c1:12:32:b4:dd:f1:70:
5e:36:e5:22:1b:c8:ff:38:28:71:de:34:d9:30:af:69:b0:0f:
ff:b5:d4:d0:74:aa:8a:5e:36:58:50:c4:c9:08:56:25:e5:07:
75:fc:6f:80:c5:9c:a0:17:47:83:c8:fd:b7:a2:67:fd:08:ca:
29:d7:23:30:56:ce:c9:e2:bb:df:d5:cf:0d:dd:03:1f:4d:96:
07:fc:d3:14:33:81:92:3d:5a:45:14:1f:a9:66:a7:e2:16:da:
70:56:40:ec:4e:d4:2e:f9:2b:8b:93:11:34:d2:eb:02:0d:20:
b2:37:1a:bd:88:b1:af:66:5c:d8:0b:9e:f2:a5:2a:17:43:e8:
e1:2b:53:59:81:f9:f0:a5:ff:ce:04:8b:94:eb:40:ce:be:b2:
3a:26:2e:45:f2:58:75:70:a2:36:c5:70:9a:32:65:5e:8a:1f:
ec:39:c9:0e:12:91:2d:dc:74:39:8f:57:cf:c1:ab:3e:76:11:
c5:fd:d2:c9:13:22:ef:ad:a7:fc:62:13:f3:9a:49:c7:32:ce:
31:6c:28:da:f3:43:f1:e8:60:16:52:32:6d:88:09:4f:d2:be:
a2:66:85:c2:94:9f:23:f8:f0:71:db:e3:d5:6e:6d:8a:61:24:
95:e5:ff:96
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQFFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MTAxNjM0WhcNMjUxMjEzMTAxNjM0WjAYMRYw
FAYDVQQDEw02NzdlNTA4NS04MTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtk1BB5DDY1AOD9iYsstCzQJ5SWdRysmCn2kKV49xAvHttj6mTu4QLfup
WgkY/8fpoQC1W+iIz0uILIh706bbF0or3Al5g0vu1U2xOS8E7KoAA3ilm0zOHaX2
x9jyxHz5agcIlUS2ApdkdDcZ//T8i5/BG3NM0lQ/0Y43g05wCjSt9hoP5BI3f0Ud
t5JpkH8FIQXnLMjq9prQv7apyqtaAo1jo0C7oBfjacFxcU0/E3164twvQi+Gn7Yd
A+KrTtVNYAe9j/0DUiLHQ9zBAHgbAIqTjTGhNwE1s/txQJKwDSYIYotJSbU8F9+0
Z3CYfaE8LzLpb8JiK4xEoohSrpAhFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHgo
XgCn1TDJYuPLOYAl0AtGD1N/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNEYwQkQ2MkNEQTkxMUVGOENBNTA0NkM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP8lMA0GCSqGSIb3DQEBCwUA
A4IBAQBE5Hv1nTXVniFopsESMrTd8XBeNuUiG8j/OChx3jTZMK9psA//tdTQdKqK
XjZYUMTJCFYl5Qd1/G+AxZygF0eDyP23omf9CMop1yMwVs7J4rvf1c8N3QMfTZYH
/NMUM4GSPVpFFB+pZqfiFtpwVkDsTtQu+SuLkxE00usCDSCyNxq9iLGvZlzYC57y
pSoXQ+jhK1NZgfnwpf/OBIuU60DOvrI6Ji5F8lh1cKI2xXCaMmVeih/sOckOEpEt
3HQ5j1fPwas+dhHF/dLJEyLvraf8YhPzmknHMs4xbCja80Px6GAWUjJtiAlP0r6i
ZoXClJ8j+PBx2+PVbm2KYSSV5f+W
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:24 2025 by rpki-client