Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1072A6CCCB911EF97B3026F762E951A.roa
File: D1072A6CCCB911EF97B3026F762E951A.roa (raw, json)
Hash identifier: t6MD3XM4CTd+UornlXzwwEPlXw5CBRoRbGTciDKAqEk=
Subject key identifier: F0:09:FF:F6:69:B2:F7:6E:B8:6C:AB:EC:55:6C:72:39:9A:83:6F:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FA02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1072A6CCCB911EF97B3026F762E951A.roa
Signing time: Tue 07 Jan 2025 05:39:52 +0000
ROA not before: Tue 07 Jan 2025 05:39:48 +0000
ROA not after: Sat 13 Dec 2025 05:39:48 +0000
asID: 984
IP address blocks: 156.233.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64002 (0xfa02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 05:39:48 2025 GMT
Not After : Dec 13 05:39:48 2025 GMT
Subject: CN=677cbe28-4201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:39:6a:d5:8f:64:a3:53:7b:61:03:29:4d:
20:b8:36:3e:0f:07:49:1f:c3:45:d5:2b:5e:3a:c7:
31:35:73:4d:62:76:d1:da:2e:32:2e:9d:6a:3e:74:
57:aa:a5:a6:50:01:44:1d:2f:85:d6:cb:fb:28:9f:
86:88:18:b1:db:8b:63:87:8c:23:5c:3a:9a:f9:7f:
bb:d2:e8:6c:50:53:c4:17:6a:d5:87:26:43:e5:20:
7a:66:97:56:b8:51:8a:b4:cd:f7:b3:42:c6:ca:3b:
d3:ec:83:3b:9c:f0:17:46:43:6b:98:37:b9:f2:24:
75:b2:39:42:07:ab:65:6c:b9:16:a8:28:6b:5b:84:
31:df:08:97:ad:1b:3f:4c:2a:e7:b2:5f:79:dc:cb:
e3:ca:90:9a:c5:02:ba:91:b3:7e:f4:72:78:4a:7e:
61:2d:19:cf:b2:62:61:95:8b:21:08:57:cd:38:c4:
6d:12:6c:f6:bb:2c:a8:e6:f1:67:e9:77:42:3b:e2:
8a:5d:ad:ea:1a:08:f4:da:fa:3e:17:60:ba:90:d2:
bb:ae:8f:d6:33:57:ee:f1:42:bf:bd:c1:c8:f1:8c:
e3:8c:8e:cb:05:68:f4:b1:ec:b2:4f:cf:5c:73:09:
01:d4:e4:4d:e0:69:ab:1c:79:06:23:13:e9:b4:7d:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:09:FF:F6:69:B2:F7:6E:B8:6C:AB:EC:55:6C:72:39:9A:83:6F:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1072A6CCCB911EF97B3026F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d3:91:62:ec:9d:0f:1d:c8:f5:70:bb:83:0e:f2:13:f7:75:
55:a2:2a:bb:80:54:67:81:f5:37:a8:f3:b1:f9:22:ba:13:a8:
96:96:de:b1:26:c0:a9:ab:9e:ef:6e:41:65:02:6b:1a:8f:82:
e2:30:c6:f7:52:8f:c3:59:28:ad:cb:d0:e7:4a:67:6f:2c:09:
55:89:ca:51:83:da:f5:06:18:47:95:0e:84:c7:4b:90:56:5b:
7d:fa:e2:84:52:b5:90:83:9d:9d:c1:b0:cd:c0:50:09:2c:1c:
67:fa:a9:50:cc:7b:ec:f5:e6:de:45:01:7e:b1:2b:a0:4f:59:
3e:70:5d:aa:98:45:2b:d4:61:2e:0d:e5:a0:05:5f:fc:f3:05:
ca:9a:09:6a:f5:aa:5f:76:63:8d:1f:10:64:f2:89:58:1d:10:
cd:fb:69:02:60:55:eb:32:38:e0:f7:70:46:2e:65:d9:e9:1d:
8f:03:67:80:2d:da:3d:bc:02:3e:e3:b7:aa:31:ef:7a:ca:35:
81:3c:4b:09:0a:40:18:91:a8:60:1f:45:63:97:90:e6:0d:60:
d0:dc:7c:fb:50:83:ad:9c:3a:34:1f:b1:dc:8e:cf:6c:29:87:
17:8c:c5:bf:74:2e:b2:a6:5d:f5:34:6f:c2:bb:3a:00:7a:39:
f1:bc:53:14
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPoCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDUzOTQ4WhcNMjUxMjEzMDUzOTQ4WjAYMRYw
FAYDVQQDEw02NzdjYmUyOC00MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxSA5atWPZKNTe2EDKU0guDY+DwdJH8NF1SteOscxNXNNYnbR2i4yLp1q
PnRXqqWmUAFEHS+F1sv7KJ+GiBix24tjh4wjXDqa+X+70uhsUFPEF2rVhyZD5SB6
ZpdWuFGKtM33s0LGyjvT7IM7nPAXRkNrmDe58iR1sjlCB6tlbLkWqChrW4Qx3wiX
rRs/TCrnsl953MvjypCaxQK6kbN+9HJ4Sn5hLRnPsmJhlYshCFfNOMRtEmz2uyyo
5vFn6XdCO+KKXa3qGgj02vo+F2C6kNK7ro/WM1fu8UK/vcHI8YzjjI7LBWj0seyy
T89ccwkB1ORN4GmrHHkGIxPptH3i+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPAJ
//ZpsvduuGyr7FVscjmag2+kMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTA3MkE2Q0NDQjkxMUVGOTdCMzAyNkY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOkLMA0GCSqGSIb3DQEBCwUA
A4IBAQBe05Fi7J0PHcj1cLuDDvIT93VVoiq7gFRngfU3qPOx+SK6E6iWlt6xJsCp
q57vbkFlAmsaj4LiMMb3Uo/DWSity9DnSmdvLAlVicpRg9r1BhhHlQ6Ex0uQVlt9
+uKEUrWQg52dwbDNwFAJLBxn+qlQzHvs9ebeRQF+sSugT1k+cF2qmEUr1GEuDeWg
BV/88wXKmglq9apfdmONHxBk8olYHRDN+2kCYFXrMjjg93BGLmXZ6R2PA2eALdo9
vAI+47eqMe96yjWBPEsJCkAYkahgH0Vjl5DmDWDQ3Hz7UIOtnDo0H7Hcjs9sKYcX
jMW/dC6ypl31NG/CuzoAejnxvFMU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:48:51 2025 by rpki-client