Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9194262C96F11EF8789D97F762E951A.roa
File: F9194262C96F11EF8789D97F762E951A.roa (raw, json)
Hash identifier: YhaBjPFOWKpdD/DhW0aAMU/iJNsQQMgwr7qV59p319o=
Subject key identifier: 46:79:5C:80:59:3C:44:E7:88:34:BC:A5:13:55:03:B4:01:0A:95:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F4AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9194262C96F11EF8789D97F762E951A.roa
Signing time: Fri 03 Jan 2025 01:13:43 +0000
ROA not before: Fri 03 Jan 2025 01:13:39 +0000
ROA not after: Mon 13 Dec 2027 01:13:39 +0000
asID: 17561
IP address blocks: 156.227.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62635 (0xf4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 01:13:39 2025 GMT
Not After : Dec 13 01:13:39 2027 GMT
Subject: CN=677739c7-d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:83:62:10:ac:c4:bf:cc:97:2d:d9:ff:63:
27:1f:44:de:3f:bf:f9:40:6e:59:e0:5c:b1:41:b3:
42:bf:35:5c:ef:82:05:d3:a9:3f:59:9f:88:ba:fe:
f7:f0:d4:d6:fa:63:b2:97:70:81:16:6c:81:d5:eb:
c4:79:1f:d8:b3:28:09:dc:00:8c:be:31:d0:4c:6d:
28:c0:98:47:b4:4d:d3:1e:92:a1:5b:c3:4e:67:31:
ee:8b:f2:a9:01:00:f4:09:a7:ed:fc:74:66:1a:a0:
0c:2e:f1:e1:c4:24:5a:27:6c:fd:a9:20:49:fe:72:
7f:99:d1:2b:90:62:72:4b:19:64:7d:f1:22:01:e5:
84:0e:ab:f2:e7:a0:65:dc:14:c1:e5:a5:36:3a:9d:
df:76:cb:2f:04:54:23:16:21:26:7d:33:c3:5e:07:
ab:3d:3c:f1:9e:83:99:42:e3:5e:d8:4f:be:e9:e8:
cb:ff:20:7f:d9:5f:17:f1:d8:c6:93:b0:aa:a7:8c:
c2:0b:c1:00:4d:0e:c7:28:e3:67:de:b9:fd:13:e7:
98:60:3a:20:06:08:a6:4c:de:9b:fc:f6:ab:9d:4b:
55:20:e6:72:80:67:fa:75:9f:c7:c5:d2:27:c3:27:
41:d6:93:c7:ad:29:8a:48:3c:bc:03:18:4f:c5:48:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:79:5C:80:59:3C:44:E7:88:34:BC:A5:13:55:03:B4:01:0A:95:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9194262C96F11EF8789D97F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.71.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:53:a9:22:98:63:e5:9e:c0:c9:98:29:b5:af:f4:0c:38:9c:
bf:dd:18:89:18:df:9f:40:29:2a:10:0b:fe:0e:b3:eb:f4:45:
8c:3f:f9:6b:37:24:f7:91:bd:bd:f6:09:6e:e8:01:68:c4:7a:
6e:ed:7d:1a:f3:93:38:8a:cc:31:77:f3:65:1d:30:fe:4f:6b:
b8:9b:c8:94:83:46:d1:43:52:34:d8:0a:09:c9:95:6c:12:cf:
14:6c:30:dd:9e:2e:44:03:59:8a:9a:82:f1:5a:24:e6:c8:5a:
54:19:51:c1:3c:36:5b:9b:77:db:af:21:9b:30:90:fe:a6:49:
e0:5f:c5:f7:59:ab:cd:63:b6:07:02:36:76:6c:39:6a:0e:21:
bf:97:a2:96:d8:52:56:68:52:0a:90:9e:f7:fd:fd:b4:e2:2d:
8a:c3:b1:75:19:75:4d:13:d9:b1:ac:ba:44:50:8f:5b:c9:13:
92:71:0c:02:26:23:92:69:33:eb:2c:80:82:f9:b0:eb:74:25:
fb:df:c5:ad:78:eb:65:95:e2:b5:aa:2b:31:be:8c:26:34:c6:
e3:38:a7:39:1d:c1:00:ba:53:74:e1:85:64:a8:31:11:41:b3:
d6:0c:6a:98:6a:92:64:8c:f1:63:8f:f5:83:06:0d:43:13:44:
f1:d7:09:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPSrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDExMzM5WhcNMjcxMjEzMDExMzM5WjAYMRYw
FAYDVQQDEw02Nzc3MzljNy1kOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw0GDYhCsxL/Mly3Z/2MnH0TeP7/5QG5Z4FyxQbNCvzVc74IF06k/WZ+I
uv738NTW+mOyl3CBFmyB1evEeR/YsygJ3ACMvjHQTG0owJhHtE3THpKhW8NOZzHu
i/KpAQD0Caft/HRmGqAMLvHhxCRaJ2z9qSBJ/nJ/mdErkGJySxlkffEiAeWEDqvy
56Bl3BTB5aU2Op3fdssvBFQjFiEmfTPDXgerPTzxnoOZQuNe2E++6ejL/yB/2V8X
8djGk7Cqp4zCC8EATQ7HKONn3rn9E+eYYDogBgimTN6b/ParnUtVIOZygGf6dZ/H
xdInwydB1pPHrSmKSDy8AxhPxUhe4wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEZ5
XIBZPETniDS8pRNVA7QBCpUVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOTE5NDI2MkM5NkYxMUVGODc4OUQ5N0Y3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnONHMA0GCSqGSIb3DQEBCwUA
A4IBAQC3U6kimGPlnsDJmCm1r/QMOJy/3RiJGN+fQCkqEAv+DrPr9EWMP/lrNyT3
kb299glu6AFoxHpu7X0a85M4iswxd/NlHTD+T2u4m8iUg0bRQ1I02AoJyZVsEs8U
bDDdni5EA1mKmoLxWiTmyFpUGVHBPDZbm3fbryGbMJD+pkngX8X3WavNY7YHAjZ2
bDlqDiG/l6KW2FJWaFIKkJ73/f204i2Kw7F1GXVNE9mxrLpEUI9byROScQwCJiOS
aTPrLICC+bDrdCX738WteOtlleK1qisxvowmNMbjOKc5HcEAulN04YVkqDERQbPW
DGqYapJkjPFjj/WDBg1DE0Tx1wl8
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:32 2025 by rpki-client