Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABD0BC30C97711EF96BB92B8762E951A.roa
File: ABD0BC30C97711EF96BB92B8762E951A.roa (raw, json)
Hash identifier: i0jNWn508nzejGC73mjahc1dcOnDHP9QpnHX5XqRxHk=
Subject key identifier: 10:F1:A9:E5:E7:AC:AC:06:3C:0B:F7:D0:A0:B9:E1:35:A0:A8:14:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABD0BC30C97711EF96BB92B8762E951A.roa
Signing time: Fri 03 Jan 2025 02:08:49 +0000
ROA not before: Fri 03 Jan 2025 02:08:46 +0000
ROA not after: Mon 13 Dec 2027 02:08:46 +0000
asID: 17561
IP address blocks: 156.227.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62709 (0xf4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 02:08:46 2025 GMT
Not After : Dec 13 02:08:46 2027 GMT
Subject: CN=677746b1-11ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:f1:90:4c:99:a8:83:e4:ea:e7:1f:a7:17:
19:e2:3a:6c:39:d6:c9:97:f9:53:01:73:e8:1b:5a:
47:c4:69:bf:5d:14:38:6e:07:36:3d:b4:ef:71:1a:
f6:a5:1f:00:dc:57:f6:5f:5f:9b:ce:d2:9b:9e:0e:
4a:8d:ee:f6:45:82:8c:79:79:0e:17:b6:ef:bb:96:
f5:73:c5:92:ac:ac:1a:11:2b:7e:e5:e1:b2:6e:6b:
30:f6:5c:62:4c:b1:a3:7d:34:9a:76:cc:ad:0e:0f:
24:12:88:49:97:26:6b:de:77:fa:b7:c4:bc:b0:cc:
9d:60:ac:dc:63:45:66:b9:c8:27:a0:64:bf:c4:70:
17:72:d0:d3:55:ab:9f:26:a5:a9:55:c8:67:93:ec:
f1:95:7b:04:dc:ad:4c:89:50:0f:c9:b6:ad:33:61:
cd:d8:1b:57:8b:31:36:92:99:4f:e2:44:17:29:ad:
3c:14:24:eb:d5:09:03:ab:03:9e:9e:f0:b7:02:d7:
2d:c4:ad:b9:26:74:54:ce:21:18:03:25:22:8a:c4:
eb:24:d4:27:86:ef:b7:5e:94:e6:52:a5:46:e0:26:
dc:69:76:de:1b:32:95:88:bc:73:2e:7a:40:a6:dd:
45:57:3f:e2:be:32:0f:d7:28:e2:12:07:65:7e:b4:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:A9:E5:E7:AC:AC:06:3C:0B:F7:D0:A0:B9:E1:35:A0:A8:14:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABD0BC30C97711EF96BB92B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.108.0/24
Signature Algorithm: sha256WithRSAEncryption
15:69:21:4a:d0:3b:11:b9:e7:ef:fb:f3:02:e6:c7:b9:6c:f8:
ee:06:8e:07:8a:ea:5d:26:ab:ca:1d:74:61:a4:19:86:48:c8:
01:3d:dc:5c:31:17:7c:c8:42:96:d7:72:ae:df:c7:df:ca:c0:
f6:bf:03:92:4e:21:be:08:91:0d:25:7a:90:45:42:69:76:57:
37:16:3b:80:25:1e:0b:21:04:df:2d:dc:eb:2e:8b:d8:fe:f2:
35:80:f9:cb:de:4a:2c:79:da:1e:f8:c9:04:f3:51:fd:f5:64:
38:bc:87:fc:81:2b:5f:1e:be:73:e6:60:51:95:3f:47:85:44:
c9:5a:e5:d1:29:da:f3:d0:e3:07:55:03:47:99:af:54:55:a1:
7d:1e:cc:c9:15:3a:3a:92:03:73:30:cb:bd:c8:c5:a1:de:ab:
6b:06:e0:7b:1f:e2:34:62:ed:0d:9c:a0:56:b7:86:e1:39:6c:
88:d9:53:2a:a5:8a:9f:28:3a:30:73:e4:95:ee:c0:65:aa:5a:
4a:63:48:c5:64:9b:d9:6d:de:37:b9:5c:4c:cc:70:d3:41:ff:
7c:aa:5b:37:5a:82:df:f3:07:dd:a3:95:7a:c5:e1:d4:97:71:
6a:03:8f:02:d5:96:89:22:9a:5a:16:ed:4c:b7:a1:c7:07:43:
20:d3:96:13
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPT1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDIwODQ2WhcNMjcxMjEzMDIwODQ2WjAYMRYw
FAYDVQQDEw02Nzc3NDZiMS0xMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz9rxkEyZqIPk6ucfpxcZ4jpsOdbJl/lTAXPoG1pHxGm/XRQ4bgc2PbTv
cRr2pR8A3Ff2X1+bztKbng5Kje72RYKMeXkOF7bvu5b1c8WSrKwaESt+5eGybmsw
9lxiTLGjfTSadsytDg8kEohJlyZr3nf6t8S8sMydYKzcY0VmucgnoGS/xHAXctDT
VaufJqWpVchnk+zxlXsE3K1MiVAPybatM2HN2BtXizE2kplP4kQXKa08FCTr1QkD
qwOenvC3AtctxK25JnRUziEYAyUiisTrJNQnhu+3XpTmUqVG4CbcaXbeGzKViLxz
LnpApt1FVz/ivjIP1yjiEgdlfrTSfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBDx
qeXnrKwGPAv30KC54TWgqBTyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQkQwQkMzMEM5NzcxMUVGOTZCQjkyQjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnONsMA0GCSqGSIb3DQEBCwUA
A4IBAQAVaSFK0DsRuefv+/MC5se5bPjuBo4HiupdJqvKHXRhpBmGSMgBPdxcMRd8
yEKW13Ku38ffysD2vwOSTiG+CJENJXqQRUJpdlc3FjuAJR4LIQTfLdzrLovY/vI1
gPnL3kosedoe+MkE81H99WQ4vIf8gStfHr5z5mBRlT9HhUTJWuXRKdrz0OMHVQNH
ma9UVaF9HszJFTo6kgNzMMu9yMWh3qtrBuB7H+I0Yu0NnKBWt4bhOWyI2VMqpYqf
KDowc+SV7sBlqlpKY0jFZJvZbd43uVxMzHDTQf98qls3WoLf8wfdo5V6xeHUl3Fq
A48C1ZaJIppaFu1Mt6HHB0Mg05YT
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:56:33 2025 by rpki-client