Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD96A81CC94611EFB7A58B79762E951A.roa
File: AD96A81CC94611EFB7A58B79762E951A.roa (raw, json)
Hash identifier: gtPW+T1ZB9y1kknpovVKjsHQ1rX8vxdYo4EDkCvDpic=
Subject key identifier: 0C:97:C8:51:C9:8B:52:64:33:FA:9C:D8:02:41:0E:77:AB:FD:BF:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F364
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD96A81CC94611EFB7A58B79762E951A.roa
Signing time: Thu 02 Jan 2025 20:18:07 +0000
ROA not before: Thu 02 Jan 2025 20:18:03 +0000
ROA not after: Mon 13 Dec 2027 20:18:03 +0000
asID: 17561
IP address blocks: 156.225.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62308 (0xf364)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 2 20:18:03 2025 GMT
Not After : Dec 13 20:18:03 2027 GMT
Subject: CN=6776f47f-719d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:28:76:1b:aa:ab:b0:c3:bb:e3:32:01:0c:
7b:bf:50:a2:15:04:84:44:ea:d0:57:df:b1:1b:58:
40:d9:42:68:d1:e4:7d:a3:0e:83:7d:c2:d1:89:11:
d1:73:71:4f:9a:cb:8e:5b:60:85:4a:f1:2d:f8:3c:
21:1d:b0:c5:0f:bc:1e:a6:4e:1d:c7:26:40:7d:66:
29:8c:63:c8:e3:16:5f:7d:99:66:11:e3:72:24:4b:
fe:7f:2e:c1:a5:99:7f:33:00:f0:03:a5:3e:e1:22:
fa:17:f7:e2:df:cc:0d:a1:04:c2:d6:15:c6:0e:f0:
0f:13:5b:85:cf:b3:00:08:67:c7:c7:f9:29:b7:9b:
e4:b6:a8:61:f9:18:d8:e0:7b:b9:d4:b3:af:0c:30:
46:13:93:a2:3b:03:81:78:be:c3:22:8f:66:70:e2:
2c:04:dc:67:62:0d:56:38:4c:21:c1:f3:d1:d1:4d:
d1:43:a8:50:12:65:9f:1a:c9:8a:88:e2:f7:e1:4d:
07:0e:5b:db:f9:2a:2b:46:a8:c6:df:9e:ea:b7:21:
ed:35:ba:41:08:b5:0b:e8:9e:d3:a3:6f:2a:70:f2:
0a:04:1f:7c:07:c4:6b:65:1f:c8:76:62:f2:a9:a7:
ba:de:3d:a5:d3:99:5d:e9:8a:99:82:a5:c7:dc:4a:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:97:C8:51:C9:8B:52:64:33:FA:9C:D8:02:41:0E:77:AB:FD:BF:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD96A81CC94611EFB7A58B79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.45.0/24
Signature Algorithm: sha256WithRSAEncryption
88:49:1c:d6:1f:04:92:2a:74:85:38:08:a8:85:35:cf:06:f0:
bd:e3:d0:e0:4b:aa:43:40:af:95:eb:55:32:1d:8d:54:9a:7a:
8d:ae:68:19:64:19:03:d5:b2:f3:ef:ef:f9:b2:20:95:4f:20:
d0:7b:06:8a:c6:29:51:db:59:a2:3b:22:3b:f7:ee:90:c1:6d:
49:a6:c5:ff:33:c8:c9:0c:92:08:cf:9e:37:01:d0:e0:ee:f6:
01:17:cb:86:5c:fb:c2:58:30:b0:fb:4a:0f:06:91:a1:e2:38:
45:b6:57:49:87:0d:2e:51:10:d4:49:6d:9d:40:ed:b1:fd:2f:
c8:c2:d7:d8:b2:4f:88:4f:87:f0:ef:2d:5d:ce:61:71:49:b6:
bb:0a:c2:b6:74:d9:bf:f8:61:c0:19:a1:08:af:10:13:8a:d5:
49:a9:26:73:a8:6e:07:e2:41:11:a3:ff:03:62:0d:41:81:7e:
2e:ce:2e:f5:5a:2d:d9:a5:bd:36:66:64:a9:9e:47:ee:f9:e0:
c1:32:f1:24:62:6d:be:a0:46:62:95:1a:42:37:6b:09:9e:2b:
b7:ab:d2:a4:40:65:fb:08:f6:54:f6:77:a8:c7:09:ac:5c:f6:
22:dc:ff:36:3f:a7:e9:58:bc:e8:30:2f:7f:d0:18:33:c9:60:
cd:86:9b:3d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPNkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAyMjAxODAzWhcNMjcxMjEzMjAxODAzWjAYMRYw
FAYDVQQDEw02Nzc2ZjQ3Zi03MTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxnYodhuqq7DDu+MyAQx7v1CiFQSEROrQV9+xG1hA2UJo0eR9ow6DfcLR
iRHRc3FPmsuOW2CFSvEt+DwhHbDFD7wepk4dxyZAfWYpjGPI4xZffZlmEeNyJEv+
fy7BpZl/MwDwA6U+4SL6F/fi38wNoQTC1hXGDvAPE1uFz7MACGfHx/kpt5vktqhh
+RjY4Hu51LOvDDBGE5OiOwOBeL7DIo9mcOIsBNxnYg1WOEwhwfPR0U3RQ6hQEmWf
GsmKiOL34U0HDlvb+SorRqjG357qtyHtNbpBCLUL6J7To28qcPIKBB98B8RrZR/I
dmLyqae63j2l05ld6YqZgqXH3ErACQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAyX
yFHJi1JkM/qc2AJBDner/b9UMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDk2QTgxQ0M5NDYxMUVGQjdBNThCNzk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEtMA0GCSqGSIb3DQEBCwUA
A4IBAQCISRzWHwSSKnSFOAiohTXPBvC949DgS6pDQK+V61UyHY1UmnqNrmgZZBkD
1bLz7+/5siCVTyDQewaKxilR21miOyI79+6QwW1JpsX/M8jJDJIIz543AdDg7vYB
F8uGXPvCWDCw+0oPBpGh4jhFtldJhw0uURDUSW2dQO2x/S/IwtfYsk+IT4fw7y1d
zmFxSba7CsK2dNm/+GHAGaEIrxATitVJqSZzqG4H4kERo/8DYg1BgX4uzi71Wi3Z
pb02ZmSpnkfu+eDBMvEkYm2+oEZilRpCN2sJniu3q9KkQGX7CPZU9neoxwmsXPYi
3P82P6fpWLzoMC9/0BgzyWDNhps9
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:01 2025 by rpki-client