Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E7BB52C28411EFA7CB9C92762E951A.roa
File: F4E7BB52C28411EFA7CB9C92762E951A.roa (raw, json)
Hash identifier: 9rtY2k3Jy8/0/9ipD5YfGE2UXihVmF8lVWNkdQ92/Iw=
Subject key identifier: D3:E6:B2:A0:40:59:3A:EA:07:EC:19:EC:55:7A:A3:5D:4D:C6:77:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E919
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E7BB52C28411EFA7CB9C92762E951A.roa
Signing time: Wed 25 Dec 2024 05:56:17 +0000
ROA not before: Wed 25 Dec 2024 05:56:14 +0000
ROA not after: Wed 10 Dec 2025 05:56:14 +0000
asID: 984
IP address blocks: 156.228.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59673 (0xe919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 05:56:14 2024 GMT
Not After : Dec 10 05:56:14 2025 GMT
Subject: CN=676b9e81-9ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:33:44:de:16:de:cc:f4:dd:dd:23:82:4d:
4f:b1:be:20:dc:34:68:43:33:1c:c3:8d:77:f0:5e:
f6:30:0e:02:1d:dd:0f:5f:cd:b3:71:6c:b1:f9:d6:
1d:8c:0f:76:cd:48:39:5c:af:55:a0:de:cd:ad:6b:
64:7f:e8:23:65:67:ac:41:c1:75:68:a3:bf:41:37:
27:c5:4b:b2:25:49:27:73:f3:fa:44:f7:96:99:b3:
cb:49:aa:2c:b9:91:2c:0e:9d:f3:62:c8:7e:f3:20:
4f:f7:f7:2e:48:b8:fb:fc:c1:07:10:38:ca:96:68:
51:45:42:ab:49:13:02:73:51:d0:63:7f:23:df:00:
a7:cd:82:d1:42:1c:3f:17:06:ea:6f:5e:ea:b0:7d:
2a:87:c7:23:02:96:80:27:9e:b9:bc:01:9d:c0:c6:
e9:39:89:d3:2f:20:b9:0d:bc:9b:98:64:69:b9:1d:
22:66:30:b5:76:49:54:39:18:7c:aa:91:cf:df:c8:
00:1d:75:c3:d3:7b:f2:c7:d6:3e:56:d6:73:1a:dc:
19:9f:b4:8b:41:49:3b:bf:0a:68:fa:a9:a7:ad:cc:
1d:8f:f4:bf:75:f2:8c:80:87:08:10:ca:88:28:79:
87:07:43:33:de:73:8b:d0:38:bc:6b:a9:c5:de:86:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:B2:A0:40:59:3A:EA:07:EC:19:EC:55:7A:A3:5D:4D:C6:77:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E7BB52C28411EFA7CB9C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:92:f5:dd:e8:95:43:3b:6e:06:fd:ce:b6:2d:22:d3:b0:26:
95:88:e8:82:d7:86:1c:65:e6:c3:5f:96:53:22:56:1b:75:8b:
d3:3b:6c:ac:b6:78:11:6e:49:23:df:16:1c:e5:bd:44:c6:8d:
f1:d8:d0:e5:a8:aa:6a:26:4f:96:4e:0a:87:70:85:72:d5:c6:
42:e3:ae:eb:99:3a:dd:42:00:d6:d1:c2:3c:02:ea:c3:19:05:
80:94:a2:01:f5:87:a4:f7:9e:26:9e:4c:bc:9b:a6:af:a9:32:
3f:ed:da:c0:4e:6f:ec:d0:25:0a:7d:ce:d9:ff:dc:73:17:dd:
8c:b9:f3:8f:72:0a:23:73:06:98:a6:b7:43:ff:99:cc:b8:bb:
cb:c4:62:62:41:5a:14:f6:c3:3b:dd:a8:6d:4c:0f:94:62:23:
9d:f7:b8:2a:2f:5c:fe:23:bf:e1:7d:19:0d:c7:38:6a:c2:d0:
75:99:ca:b4:1c:b4:0d:89:fe:b8:0f:7f:fb:0a:be:e4:d6:2c:
a3:67:3d:6e:5d:b8:10:1c:49:78:f7:f6:4b:29:80:c4:f2:13:
ca:1b:51:12:3b:16:8b:ca:3f:ab:56:ff:9e:4e:4a:f5:87:99:
ce:e7:b5:d2:cc:7c:25:46:d2:e0:94:63:d7:67:3d:30:32:c8:
dc:99:8c:6c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOkZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDU1NjE0WhcNMjUxMjEwMDU1NjE0WjAYMRYw
FAYDVQQDEw02NzZiOWU4MS05YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnbozRN4W3sz03d0jgk1Psb4g3DRoQzMcw4138F72MA4CHd0PX82zcWyx
+dYdjA92zUg5XK9VoN7NrWtkf+gjZWesQcF1aKO/QTcnxUuyJUknc/P6RPeWmbPL
SaosuZEsDp3zYsh+8yBP9/cuSLj7/MEHEDjKlmhRRUKrSRMCc1HQY38j3wCnzYLR
Qhw/Fwbqb17qsH0qh8cjApaAJ565vAGdwMbpOYnTLyC5DbybmGRpuR0iZjC1dklU
ORh8qpHP38gAHXXD03vyx9Y+VtZzGtwZn7SLQUk7vwpo+qmnrcwdj/S/dfKMgIcI
EMqIKHmHB0Mz3nOL0Di8a6nF3oYDkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNPm
sqBAWTrqB+wZ7FV6o11NxnfqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNEU3QkI1MkMyODQxMUVGQTdDQjlDOTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQsMA0GCSqGSIb3DQEBCwUA
A4IBAQCrkvXd6JVDO24G/c62LSLTsCaViOiC14YcZebDX5ZTIlYbdYvTO2ystngR
bkkj3xYc5b1Exo3x2NDlqKpqJk+WTgqHcIVy1cZC467rmTrdQgDW0cI8AurDGQWA
lKIB9Yek954mnky8m6avqTI/7drATm/s0CUKfc7Z/9xzF92MufOPcgojcwaYprdD
/5nMuLvLxGJiQVoU9sM73ahtTA+UYiOd97gqL1z+I7/hfRkNxzhqwtB1mcq0HLQN
if64D3/7Cr7k1iyjZz1uXbgQHEl49/ZLKYDE8hPKG1ESOxaLyj+rVv+eTkr1h5nO
57XSzHwlRtLglGPXZz0wMsjcmYxs
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:22 2025 by rpki-client