Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF9FE058D24811EF882AB5B8762E951A.roa
File: CF9FE058D24811EF882AB5B8762E951A.roa (raw, json)
Hash identifier: K1SQ9sqhX8VQjfDwRpb0YjFSFQX6BFMuAWUX3BvRwDQ=
Subject key identifier: D4:45:C0:A3:58:0C:AC:E4:D3:4F:28:D3:09:C7:1F:12:E6:14:DD:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0106E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF9FE058D24811EF882AB5B8762E951A.roa
Signing time: Tue 14 Jan 2025 07:26:03 +0000
ROA not before: Tue 14 Jan 2025 07:26:00 +0000
ROA not after: Tue 18 Feb 2025 07:26:00 +0000
asID: 214413
IP address blocks: 156.252.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67298 (0x106e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 14 07:26:00 2025 GMT
Not After : Feb 18 07:26:00 2025 GMT
Subject: CN=6786118b-29d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:6b:c8:04:a2:c1:51:a7:6a:e9:6f:02:40:
08:b4:81:00:3d:58:5d:8f:fd:fb:ff:d0:5a:b7:48:
09:c5:d1:da:81:d2:f3:c7:9a:21:b3:f9:7f:03:70:
e3:4c:2c:5f:fa:06:d2:81:ab:75:13:10:8c:de:bc:
94:28:11:85:18:17:bd:d9:5f:dc:74:24:9d:51:1b:
14:7e:ea:6a:91:cd:77:55:ce:a0:53:84:f8:02:eb:
ba:37:fb:29:54:67:ab:61:70:75:1f:98:1c:f3:68:
71:12:ef:b0:0c:23:e1:90:62:85:50:a2:24:f9:23:
46:c2:cd:4a:ae:47:88:64:0a:81:1d:54:01:70:a4:
fe:26:03:08:61:6e:03:a6:52:2a:c5:8c:ca:65:6e:
7f:0b:47:53:76:3c:2f:6a:d2:c3:80:52:c6:73:92:
d5:cb:5b:44:fd:cf:a1:00:0e:88:ee:c8:75:93:db:
89:92:d7:c4:3f:7b:22:b4:01:31:10:a3:37:a6:20:
a3:34:2f:cf:8e:19:46:be:f3:57:e6:c1:74:c4:3f:
6e:2e:1e:cc:1a:75:da:fc:d8:1c:51:4e:2b:a5:96:
44:1d:1a:d7:f1:e0:f8:9c:3e:0a:9f:84:4b:00:d6:
50:05:59:27:b8:6f:ef:0b:e8:5f:db:0b:e3:7b:d0:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:45:C0:A3:58:0C:AC:E4:D3:4F:28:D3:09:C7:1F:12:E6:14:DD:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF9FE058D24811EF882AB5B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:70:87:78:4b:fb:39:f6:bd:f7:cc:7e:b4:fb:bf:60:be:f7:
86:2d:0b:16:b5:a4:f0:c3:5c:5a:c2:33:2b:07:06:03:0b:37:
a5:05:a5:e2:e0:34:9a:d1:0a:3b:2c:cb:95:74:ba:b0:f6:aa:
25:f7:39:83:17:03:c5:c1:02:a4:86:6d:f2:7f:23:20:51:1c:
ad:6f:5e:5f:58:c9:8f:f0:71:98:ab:53:b2:21:b8:b7:74:63:
ff:59:e2:75:2e:c5:94:56:42:a8:c3:be:44:96:24:43:9e:01:
2e:6f:7a:ba:de:12:1d:cd:fd:14:f4:66:6f:6e:f9:b6:35:1d:
c8:37:30:bd:9e:e6:2d:08:42:f3:ef:6e:76:87:b4:1e:bd:54:
3a:59:55:7c:37:d9:6e:76:e7:5d:33:d9:0b:5e:06:9e:c3:b4:
d3:7c:36:01:f7:1a:f1:52:ea:9e:39:61:0b:da:08:ec:64:ad:
54:b0:02:b2:b3:1d:ea:2c:f0:00:fd:c3:a4:5c:f2:55:5e:95:
a2:0d:a8:a7:72:b4:e6:9b:22:17:b2:99:ac:e6:32:ae:ad:a3:
6b:41:6b:b6:e1:74:f8:bb:74:1e:54:48:dc:a6:6c:9f:26:df:
d0:2a:30:a0:c2:59:be:26:63:27:f3:97:cf:f4:f2:7e:15:1f:
b4:1f:dd:5d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQbiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE0MDcyNjAwWhcNMjUwMjE4MDcyNjAwWjAYMRYw
FAYDVQQDEw02Nzg2MTE4Yi0yOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlfpryASiwVGnaulvAkAItIEAPVhdj/37/9Bat0gJxdHagdLzx5ohs/l/
A3DjTCxf+gbSgat1ExCM3ryUKBGFGBe92V/cdCSdURsUfupqkc13Vc6gU4T4Auu6
N/spVGerYXB1H5gc82hxEu+wDCPhkGKFUKIk+SNGws1KrkeIZAqBHVQBcKT+JgMI
YW4DplIqxYzKZW5/C0dTdjwvatLDgFLGc5LVy1tE/c+hAA6I7sh1k9uJktfEP3si
tAExEKM3piCjNC/PjhlGvvNX5sF0xD9uLh7MGnXa/NgcUU4rpZZEHRrX8eD4nD4K
n4RLANZQBVknuG/vC+hf2wvje9AykwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNRF
wKNYDKzk008o0wnHHxLmFN2pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRjlGRTA1OEQyNDgxMUVGODgyQUI1Qjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnPweMA0GCSqGSIb3DQEBCwUA
A4IBAQCLcId4S/s59r33zH60+79gvveGLQsWtaTww1xawjMrBwYDCzelBaXi4DSa
0Qo7LMuVdLqw9qol9zmDFwPFwQKkhm3yfyMgURytb15fWMmP8HGYq1OyIbi3dGP/
WeJ1LsWUVkKow75EliRDngEub3q63hIdzf0U9GZvbvm2NR3INzC9nuYtCELz7252
h7QevVQ6WVV8N9lududdM9kLXgaew7TTfDYB9xrxUuqeOWEL2gjsZK1UsAKysx3q
LPAA/cOkXPJVXpWiDaincrTmmyIXspms5jKuraNrQWu24XT4u3QeVEjcpmyfJt/Q
KjCgwlm+JmMn85fP9PJ+FR+0H91d
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:42:31 2025 by rpki-client