Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA1FF036C27911EFADAB464E762E951A.roa
File: FA1FF036C27911EFADAB464E762E951A.roa (raw, json)
Hash identifier: zdqoyuMD3eCU4HZW/4YM+Od+0lPrXSlRXMjkyHiyW3M=
Subject key identifier: C2:4A:7A:5C:9D:03:63:C5:18:BB:24:15:45:7D:A6:BF:66:D4:E6:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E891
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA1FF036C27911EFADAB464E762E951A.roa
Signing time: Wed 25 Dec 2024 04:37:42 +0000
ROA not before: Wed 25 Dec 2024 04:37:38 +0000
ROA not after: Wed 10 Dec 2025 04:37:38 +0000
asID: 984
IP address blocks: 156.227.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59537 (0xe891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 04:37:38 2024 GMT
Not After : Dec 10 04:37:38 2025 GMT
Subject: CN=676b8c15-cbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:27:ab:da:9f:55:39:67:aa:47:78:42:e8:
b8:02:bb:d4:64:ef:2b:4f:68:60:ba:3e:76:70:5d:
d9:60:cb:c4:fe:bd:dd:c8:4a:9a:4a:4f:86:0f:66:
65:2e:ed:9b:16:47:c9:f5:54:3a:ef:47:28:eb:5f:
0f:7a:5c:d4:40:f9:00:10:59:59:8b:ed:90:59:e4:
e9:35:cf:a3:c6:b5:fc:7a:90:92:64:2e:27:9d:ee:
9b:93:c5:9f:c1:7f:14:2d:b6:5f:3b:bc:ed:39:31:
32:6b:54:03:ac:51:b0:9b:70:ca:77:0a:7b:43:ba:
2c:80:37:7d:df:e2:4b:b4:c4:53:f7:29:cd:50:90:
4b:dc:1c:f2:ae:9a:ac:1c:41:f1:ad:c8:db:17:4e:
0f:a5:ac:bd:66:91:89:0b:05:2e:43:b3:f7:44:5d:
c7:e7:89:31:dd:f3:c3:af:fa:b6:25:a7:ec:13:d1:
2e:22:01:08:7d:86:1e:3a:ad:49:65:d3:55:3e:98:
84:1c:bc:1d:bf:ce:bf:4a:2f:2d:a0:d6:60:ef:75:
c1:91:44:b7:45:b1:9b:4f:0e:a6:ed:7a:7c:2f:61:
75:7c:28:4b:17:9b:f0:3e:41:ef:b3:85:ac:6c:49:
e4:f3:70:a3:67:3f:02:b2:4c:b4:2a:7c:28:9a:48:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:7A:5C:9D:03:63:C5:18:BB:24:15:45:7D:A6:BF:66:D4:E6:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA1FF036C27911EFADAB464E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e1:be:a1:af:a2:b4:52:30:54:6c:fa:56:cb:b7:c1:ca:ce:
69:9b:79:c8:38:fc:45:48:a4:e9:bd:1a:9c:86:75:a8:ac:c5:
14:98:4f:f5:d8:ba:01:6a:1b:49:46:11:fb:9e:39:70:6e:6e:
c3:cd:5e:5e:49:ab:6d:2b:e4:76:10:79:45:40:13:1c:72:a8:
d1:86:1e:69:d7:4d:48:4c:d5:23:a8:3e:a3:63:32:89:17:a7:
ed:03:1d:9b:ff:8f:4a:f7:bb:fc:6d:9a:c9:d0:a6:bc:78:5f:
68:8b:7c:fe:69:91:06:f0:91:4f:35:bc:4e:0b:78:aa:e4:7c:
eb:1d:11:23:a8:3a:ca:e3:43:0d:28:92:26:15:19:24:db:1c:
2d:0a:b0:d0:06:f6:f2:3c:a8:62:f8:02:c7:29:57:d4:b6:e6:
9e:54:fe:40:09:e9:6d:4e:ef:e1:1b:88:a6:2b:44:6f:b5:a8:
69:74:f1:f5:f9:64:f1:6e:cb:84:0f:df:d2:e2:47:42:59:3f:
2f:0c:fd:94:92:da:a8:bf:d7:f3:c9:1d:14:7a:2d:d8:3f:87:
84:46:c8:1d:0e:62:0c:51:d8:a2:cb:b5:4e:44:9d:8f:09:b8:
fa:71:e5:31:e5:47:b0:24:87:21:80:9a:2e:87:3f:71:56:09:
dd:62:fb:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOiRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDQzNzM4WhcNMjUxMjEwMDQzNzM4WjAYMRYw
FAYDVQQDEw02NzZiOGMxNS1jYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA40Ynq9qfVTlnqkd4Qui4ArvUZO8rT2hguj52cF3ZYMvE/r3dyEqaSk+G
D2ZlLu2bFkfJ9VQ670co618PelzUQPkAEFlZi+2QWeTpNc+jxrX8epCSZC4nne6b
k8WfwX8ULbZfO7ztOTEya1QDrFGwm3DKdwp7Q7osgDd93+JLtMRT9ynNUJBL3Bzy
rpqsHEHxrcjbF04Ppay9ZpGJCwUuQ7P3RF3H54kx3fPDr/q2JafsE9EuIgEIfYYe
Oq1JZdNVPpiEHLwdv86/Si8toNZg73XBkUS3RbGbTw6m7Xp8L2F1fChLF5vwPkHv
s4WsbEnk83CjZz8Csky0KnwomkjKWQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMJK
elydA2PFGLskFUV9pr9m1OZwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQTFGRjAzNkMyNzkxMUVGQURBQjQ2NEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOOEMA0GCSqGSIb3DQEBCwUA
A4IBAQCU4b6hr6K0UjBUbPpWy7fBys5pm3nIOPxFSKTpvRqchnWorMUUmE/12LoB
ahtJRhH7njlwbm7DzV5eSattK+R2EHlFQBMccqjRhh5p101ITNUjqD6jYzKJF6ft
Ax2b/49K97v8bZrJ0Ka8eF9oi3z+aZEG8JFPNbxOC3iq5HzrHREjqDrK40MNKJIm
FRkk2xwtCrDQBvbyPKhi+ALHKVfUtuaeVP5ACeltTu/hG4imK0RvtahpdPH1+WTx
bsuED9/S4kdCWT8vDP2Uktqov9fzyR0Uei3YP4eERsgdDmIMUdiiy7VORJ2PCbj6
ceUx5UewJIchgJouhz9xVgndYvue
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:39:41 2025 by rpki-client