Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F297B048CF6111EFB56C1C5F762E951A.roa
File: F297B048CF6111EFB56C1C5F762E951A.roa (raw, json)
Hash identifier: AsydlrUpG8KzlIdEmu417rY/a9Z6tbA5B2sfHxgGmes=
Subject key identifier: 0C:BD:15:3D:6A:1F:00:58:3A:2A:63:3D:33:53:E9:D0:0C:D2:9F:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010569
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F297B048CF6111EFB56C1C5F762E951A.roa
Signing time: Fri 10 Jan 2025 14:48:26 +0000
ROA not before: Fri 10 Jan 2025 14:48:22 +0000
ROA not after: Wed 05 Feb 2025 14:48:22 +0000
asID: 4809
IP address blocks: 156.242.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Feb 2025 14:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66921 (0x10569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 10 14:48:22 2025 GMT
Not After : Feb 5 14:48:22 2025 GMT
Subject: CN=6781333a-5a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:3d:ef:61:7b:c2:dc:e5:26:8d:95:60:1e:
1a:01:a3:41:94:60:45:33:3d:3a:8e:8b:a0:4f:c7:
ae:96:8f:c6:83:09:ea:2c:e9:8f:a0:46:ec:ce:df:
b8:4e:fc:8b:a5:60:0b:2d:b4:e2:a2:b0:cf:b6:b6:
2f:29:77:a2:73:c9:03:25:e3:07:74:bd:f3:b3:f8:
9d:61:91:b7:14:23:a5:3e:a4:90:57:01:e3:f3:60:
1a:e3:29:0b:6f:05:d4:31:5d:5b:c5:d9:ea:b8:d5:
0d:9c:56:1e:c0:c5:31:fc:3d:72:fd:fc:2d:f4:65:
1a:ce:e5:28:d3:b5:e5:80:f0:9b:45:aa:69:fc:07:
e3:65:af:40:d5:17:3a:7c:ea:b4:60:bb:8c:5b:d0:
10:7e:c3:a1:ce:8f:3e:c6:0a:95:73:05:7f:46:14:
ef:94:01:2f:b3:aa:24:52:ef:7e:ff:49:8d:22:b8:
40:c8:d9:4b:7a:05:e2:5d:c8:9b:c3:32:6d:72:ef:
77:17:9d:cb:6e:c8:1a:dc:3f:f8:2e:25:7d:82:d6:
49:ed:01:ad:c6:71:e0:1d:17:aa:10:7d:43:21:8c:
f0:ac:50:60:dc:dc:3a:fb:4a:08:41:71:23:a4:ee:
a5:b2:27:64:c0:73:c6:27:d9:df:cc:4a:8d:25:3e:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:15:3D:6A:1F:00:58:3A:2A:63:3D:33:53:E9:D0:0C:D2:9F:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F297B048CF6111EFB56C1C5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c8:df:0f:b3:79:f9:94:3f:a4:ed:fe:92:cb:be:05:8f:67:
4a:1e:cd:4f:f7:63:7d:5c:8e:62:97:e7:4e:b8:f3:dc:2e:5b:
ad:e1:97:e8:3e:29:86:66:c4:a1:0e:65:cf:00:e9:79:22:41:
90:b8:c5:3a:89:0d:7e:7b:38:b1:c8:f6:85:55:b9:93:f9:0f:
16:07:b2:f5:90:3d:64:97:34:31:1f:25:44:d1:be:a1:27:03:
82:59:e2:f5:09:33:bd:96:6f:99:8a:e9:20:bb:df:0f:84:21:
43:3c:99:4d:12:52:7d:6c:45:88:8d:13:f1:c2:98:5e:3d:b6:
9a:6e:23:a5:df:80:09:01:19:f8:38:0d:9a:39:de:a9:31:44:
b1:45:54:c1:a7:9b:13:c1:0a:05:9f:d7:64:77:c8:22:c3:eb:
6b:fd:80:69:99:11:4f:2a:3f:45:92:78:67:a7:e0:d9:3b:ad:
b2:f7:e1:81:f8:dc:a6:20:25:12:96:0e:3b:26:d2:29:77:cd:
b0:f1:95:33:32:1b:06:12:c7:5f:25:13:35:52:f5:22:d1:6c:
21:a6:ec:ce:c1:e5:ef:8e:1f:96:9b:a0:91:f0:eb:74:7e:53:
4d:c3:71:6f:9f:45:0d:a1:3f:9f:f1:b1:3b:39:3f:79:98:67:
7d:d9:52:9a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQVpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTEwMTQ0ODIyWhcNMjUwMjA1MTQ0ODIyWjAYMRYw
FAYDVQQDEw02NzgxMzMzYS01YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApJc972F7wtzlJo2VYB4aAaNBlGBFMz06jougT8eulo/GgwnqLOmPoEbs
zt+4TvyLpWALLbTiorDPtrYvKXeic8kDJeMHdL3zs/idYZG3FCOlPqSQVwHj82Aa
4ykLbwXUMV1bxdnquNUNnFYewMUx/D1y/fwt9GUazuUo07XlgPCbRapp/AfjZa9A
1Rc6fOq0YLuMW9AQfsOhzo8+xgqVcwV/RhTvlAEvs6okUu9+/0mNIrhAyNlLegXi
XcibwzJtcu93F53Lbsga3D/4LiV9gtZJ7QGtxnHgHReqEH1DIYzwrFBg3Nw6+0oI
QXEjpO6lsidkwHPGJ9nfzEqNJT6LcQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAy9
FT1qHwBYOipjPTNT6dAM0p9YMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMjk3QjA0OENGNjExMUVGQjU2QzFDNUY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPIIMA0GCSqGSIb3DQEBCwUA
A4IBAQAOyN8Ps3n5lD+k7f6Sy74Fj2dKHs1P92N9XI5il+dOuPPcLlut4ZfoPimG
ZsShDmXPAOl5IkGQuMU6iQ1+ezixyPaFVbmT+Q8WB7L1kD1klzQxHyVE0b6hJwOC
WeL1CTO9lm+Ziukgu98PhCFDPJlNElJ9bEWIjRPxwphePbaabiOl34AJARn4OA2a
Od6pMUSxRVTBp5sTwQoFn9dkd8giw+tr/YBpmRFPKj9Fknhnp+DZO62y9+GB+Nym
ICUSlg47JtIpd82w8ZUzMhsGEsdfJRM1UvUi0WwhpuzOweXvjh+Wm6CR8Ot0flNN
w3Fvn0UNoT+f8bE7OT95mGd92VKa
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:40:37 2025 by rpki-client