Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7CDCD22CD2D11EF9238EB4A762E951A.roa
File: E7CDCD22CD2D11EF9238EB4A762E951A.roa (raw, json)
Hash identifier: QMtgvx5deAL8ktfsgEgRCCM8J+i4CSYqet+iEE5BhYA=
Subject key identifier: 31:B4:EC:D0:03:85:C8:6E:03:18:65:DD:91:AD:74:31:16:20:F3:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7CDCD22CD2D11EF9238EB4A762E951A.roa
Signing time: Tue 07 Jan 2025 19:30:52 +0000
ROA not before: Tue 07 Jan 2025 19:30:48 +0000
ROA not after: Mon 13 Dec 2027 19:30:48 +0000
asID: 17561
IP address blocks: 156.241.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64985 (0xfdd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 19:30:48 2025 GMT
Not After : Dec 13 19:30:48 2027 GMT
Subject: CN=677d80ec-cdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:16:39:bd:bd:41:77:d9:42:d0:b7:d1:4e:
62:d3:76:8e:ca:33:68:16:4e:19:64:0d:fb:63:a2:
43:7a:12:2a:45:17:f1:0d:67:25:0b:15:b4:79:ce:
66:a3:0e:7a:3d:08:fe:77:44:85:df:75:92:d5:73:
70:cf:1d:cb:11:d9:d1:25:f5:bd:46:1d:f3:28:3a:
7f:f9:c3:1a:65:63:5a:3a:11:25:e2:e4:70:76:2d:
50:94:42:a0:38:2d:f2:70:40:07:4a:82:a8:33:91:
e5:62:6e:73:83:81:45:e3:7f:aa:8f:75:3f:b9:d7:
10:09:8a:33:f5:32:f8:9b:d4:e0:32:e8:0f:b5:07:
cc:99:b9:80:03:66:8f:ba:3c:8d:f9:a1:af:70:cb:
24:00:15:3a:8c:5f:22:33:7d:5a:78:65:a5:75:d3:
dd:ed:a8:25:4c:70:c3:83:9f:fd:a0:1c:58:4c:5b:
3d:34:21:0e:df:f8:1a:84:c9:3f:13:90:d2:22:6c:
06:36:78:98:c0:85:79:91:9e:bb:44:6d:dd:75:f1:
a2:89:59:38:29:83:49:c0:2e:f6:b7:b5:57:1f:12:
3a:d5:4b:c4:c8:19:82:67:e0:96:7a:6d:86:e4:b6:
a1:51:5e:c4:ff:70:00:db:43:4d:39:8d:1c:99:56:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B4:EC:D0:03:85:C8:6E:03:18:65:DD:91:AD:74:31:16:20:F3:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7CDCD22CD2D11EF9238EB4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ed:0a:88:76:83:62:c7:a4:ad:6f:96:fe:54:cf:7c:01:ed:
26:e0:d0:85:97:41:ae:b7:78:12:02:d8:97:af:04:fe:e1:a6:
51:77:d7:97:07:d8:61:08:17:93:1e:12:37:25:46:87:60:84:
41:f9:1a:18:08:6d:4e:c8:aa:4d:e6:cb:31:2f:8f:8c:bd:f5:
9d:ec:83:8c:56:71:91:20:24:df:be:75:1a:c9:a3:19:9f:82:
f5:eb:18:72:6a:9d:ff:cc:4f:12:f5:c9:89:5f:7c:09:7e:91:
52:fc:67:ba:6f:5d:cf:2a:66:e9:39:f8:76:70:75:9f:3e:44:
9b:0b:4c:4a:0a:84:de:c8:0f:b7:ce:d8:43:db:a2:2e:9b:03:
43:27:5c:1e:ea:a7:44:ba:cd:9b:4a:89:24:ec:2e:8e:41:57:
40:66:5c:f6:d8:fe:d0:8b:d5:5a:dd:f7:ba:45:3d:63:fe:6a:
53:7c:fa:fa:e5:6b:e9:c6:ee:23:40:94:f3:38:d2:94:7f:93:
be:02:ca:79:b6:ed:87:d8:15:52:ac:9c:92:03:83:74:bc:40:
62:b6:e3:46:d6:1e:1e:63:45:58:19:ef:d7:2e:95:55:df:b0:
3c:20:d3:2f:f0:e0:ef:ec:b9:df:ce:35:ec:69:ed:f2:9b:b4:
e4:aa:b4:d6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP3ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTkzMDQ4WhcNMjcxMjEzMTkzMDQ4WjAYMRYw
FAYDVQQDEw02NzdkODBlYy1jZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAubwWOb29QXfZQtC30U5i03aOyjNoFk4ZZA37Y6JDehIqRRfxDWclCxW0
ec5mow56PQj+d0SF33WS1XNwzx3LEdnRJfW9Rh3zKDp/+cMaZWNaOhEl4uRwdi1Q
lEKgOC3ycEAHSoKoM5HlYm5zg4FF43+qj3U/udcQCYoz9TL4m9TgMugPtQfMmbmA
A2aPujyN+aGvcMskABU6jF8iM31aeGWlddPd7aglTHDDg5/9oBxYTFs9NCEO3/ga
hMk/E5DSImwGNniYwIV5kZ67RG3ddfGiiVk4KYNJwC72t7VXHxI61UvEyBmCZ+CW
em2G5LahUV7E/3AA20NNOY0cmVbHawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDG0
7NADhchuAxhl3ZGtdDEWIPMIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FN0NEQ0QyMkNEMkQxMUVGOTIzOEVCNEE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPH7MA0GCSqGSIb3DQEBCwUA
A4IBAQCM7QqIdoNix6Stb5b+VM98Ae0m4NCFl0Gut3gSAtiXrwT+4aZRd9eXB9hh
CBeTHhI3JUaHYIRB+RoYCG1OyKpN5ssxL4+MvfWd7IOMVnGRICTfvnUayaMZn4L1
6xhyap3/zE8S9cmJX3wJfpFS/Ge6b13PKmbpOfh2cHWfPkSbC0xKCoTeyA+3zthD
26IumwNDJ1we6qdEus2bSokk7C6OQVdAZlz22P7Qi9Va3fe6RT1j/mpTfPr65Wvp
xu4jQJTzONKUf5O+Asp5tu2H2BVSrJySA4N0vEBituNG1h4eY0VYGe/XLpVV37A8
INMv8ODv7LnfzjXsae3ym7TkqrTW
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:43 2025 by rpki-client