Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ECB1FFA1FE611EF9140CD477DDC24C2.roa
File: 6ECB1FFA1FE611EF9140CD477DDC24C2.roa (raw, json)
Hash identifier: AQsk93h+GOnucZLVrrtTT0OXQ3PzWGK5ZUhY/m6qU9o=
Subject key identifier: CC:37:FB:04:B5:A8:CA:26:F6:5C:37:5D:B8:E4:1E:65:28:56:58:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8E37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ECB1FFA1FE611EF9140CD477DDC24C2.roa
Signing time: Sat 01 Jun 2024 07:13:23 +0000
ROA not before: Sat 01 Jun 2024 07:13:20 +0000
ROA not after: Sat 06 Jul 2024 07:13:20 +0000
asID: 272092
IP address blocks: 156.227.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 25 Jun 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36407 (0x8e37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 07:13:20 2024 GMT
Not After : Jul 6 07:13:20 2024 GMT
Subject: CN=665aca13-cadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:f8:f0:a5:aa:31:f8:34:69:b4:32:1c:b0:
9b:9d:c3:4f:67:d1:37:04:1e:ad:de:86:d6:fc:1d:
bc:a8:c4:8a:65:42:40:69:2c:10:51:e0:c4:8f:cb:
f9:3b:76:8f:3f:13:94:32:5d:39:9c:55:49:98:58:
55:b0:e1:7e:72:7f:e8:87:a2:cc:06:29:0b:08:14:
1a:5d:dd:0e:a7:02:df:f4:16:e9:4b:60:69:c3:19:
b5:45:d0:8f:87:8d:e6:65:c4:78:a3:a0:5b:3d:3b:
33:78:40:da:33:24:e7:15:f8:ee:4a:aa:39:9f:bf:
ac:f5:75:6a:8c:ff:37:5e:02:5a:cc:f5:da:85:bb:
69:8e:eb:72:bb:68:16:cf:31:a8:15:fe:43:09:ab:
fe:d3:b4:63:1c:2e:f2:f1:0f:33:af:5a:3b:e7:d2:
c4:b0:a3:27:9d:d2:38:d0:1a:2c:13:ea:e8:3c:81:
60:64:65:20:fe:a4:ed:9a:36:76:8b:d9:41:32:20:
f0:aa:e6:89:6e:dc:49:ac:22:c7:99:ec:8c:7e:52:
40:11:00:80:95:dc:2c:e0:cc:28:77:e0:62:8b:c1:
d4:15:e6:30:dc:9d:fc:b7:74:bb:50:b7:e6:1e:9e:
87:20:98:f1:50:d7:fb:e2:3b:63:06:c6:4e:2f:59:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:FB:04:B5:A8:CA:26:F6:5C:37:5D:B8:E4:1E:65:28:56:58:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ECB1FFA1FE611EF9140CD477DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.21.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6b:74:df:28:25:01:ba:85:d1:db:07:4e:a7:89:6d:2d:36:
00:97:11:38:27:d3:48:ce:cf:fb:67:92:d1:68:18:5f:d0:91:
b1:80:9c:e8:dc:88:09:b3:07:14:c8:51:8d:0f:45:86:79:47:
86:bf:eb:a0:e6:a0:e8:24:8c:b9:cc:f0:0a:c3:a3:af:3a:70:
f9:3d:ff:14:e1:b9:4c:2d:9f:27:6a:7b:4f:5d:37:d3:9a:f6:
d6:38:c4:bd:29:77:6b:18:d0:3a:27:d3:44:2b:7b:4c:cf:24:
c0:3e:2e:31:4d:80:82:5a:a3:b0:9c:ed:18:13:23:68:44:be:
f4:92:31:11:60:5f:c0:e8:9e:4f:5b:be:49:10:75:3e:53:79:
f2:85:99:ee:24:0d:7a:1a:86:72:b6:ef:bd:16:54:15:8f:8e:
e7:a0:86:9f:4b:b9:fd:bc:bc:db:d0:75:45:30:a1:61:f9:83:
f4:bf:2c:99:49:60:23:55:86:cd:45:97:fc:10:cc:3e:ba:7c:
76:a8:d2:74:69:88:99:a0:75:76:94:7d:fb:59:fb:65:5f:20:
60:e4:19:64:ad:22:86:7b:a6:2d:40:9b:e2:8b:7f:e3:15:a1:
f4:11:dc:0b:d2:d4:9a:7b:fa:ac:80:59:ad:ec:57:9e:49:8b:
20:f6:2b:6a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAI43MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNjAxMDcxMzIwWhcNMjQwNzA2MDcxMzIwWjAYMRYw
FAYDVQQDEw02NjVhY2ExMy1jYWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA50z48KWqMfg0abQyHLCbncNPZ9E3BB6t3obW/B28qMSKZUJAaSwQUeDE
j8v5O3aPPxOUMl05nFVJmFhVsOF+cn/oh6LMBikLCBQaXd0OpwLf9BbpS2Bpwxm1
RdCPh43mZcR4o6BbPTszeEDaMyTnFfjuSqo5n7+s9XVqjP83XgJazPXahbtpjuty
u2gWzzGoFf5DCav+07RjHC7y8Q8zr1o759LEsKMnndI40BosE+roPIFgZGUg/qTt
mjZ2i9lBMiDwquaJbtxJrCLHmeyMflJAEQCAldws4Mwod+Bii8HUFeYw3J38t3S7
ULfmHp6HIJjxUNf74jtjBsZOL1lMqwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMw3
+wS1qMom9lw3XbjkHmUoVlh7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RUNCMUZGQTFGRTYxMUVGOTE0MENENDc3RERDMjRDMi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOMVMA0GCSqGSIb3DQEBCwUA
A4IBAQBYa3TfKCUBuoXR2wdOp4ltLTYAlxE4J9NIzs/7Z5LRaBhf0JGxgJzo3IgJ
swcUyFGND0WGeUeGv+ug5qDoJIy5zPAKw6OvOnD5Pf8U4blMLZ8nantPXTfTmvbW
OMS9KXdrGNA6J9NEK3tMzyTAPi4xTYCCWqOwnO0YEyNoRL70kjERYF/A6J5PW75J
EHU+U3nyhZnuJA16GoZytu+9FlQVj47noIafS7n9vLzb0HVFMKFh+YP0vyyZSWAj
VYbNRZf8EMw+unx2qNJ0aYiZoHV2lH37WftlXyBg5BlkrSKGe6YtQJvii3/jFaH0
EdwL0tSae/qsgFmt7FeeSYsg9itq
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:50:35 2024 by rpki-client on console-fra.rpki-client.org