Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/062613C8C28A11EF8799E7B1762E951A.roa
File: 062613C8C28A11EF8799E7B1762E951A.roa (raw, json)
Hash identifier: 26ybZ0GbF2cQURM9uTva6UaTbGg+fy7VXM6tZhDyUNA=
Subject key identifier: 69:70:27:99:AB:40:9C:AD:77:A9:89:44:C3:ED:DB:20:92:9D:C0:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E957
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/062613C8C28A11EF8799E7B1762E951A.roa
Signing time: Wed 25 Dec 2024 06:32:34 +0000
ROA not before: Wed 25 Dec 2024 06:32:30 +0000
ROA not after: Wed 10 Dec 2025 06:32:30 +0000
asID: 984
IP address blocks: 156.228.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59735 (0xe957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:32:30 2024 GMT
Not After : Dec 10 06:32:30 2025 GMT
Subject: CN=676ba701-6871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:5c:7d:de:95:e6:c6:6f:69:3a:1a:e8:43:
2a:fb:9d:80:9d:98:68:aa:bb:39:78:e4:66:f0:8a:
c2:63:6c:a9:fb:eb:c0:75:0e:d9:d0:65:71:e8:2b:
3b:3c:5d:58:03:c5:56:a6:36:4d:bb:00:d7:6c:dc:
e7:5f:f7:23:4c:31:92:f0:96:89:b7:b0:8f:af:3d:
05:1d:30:98:2f:48:d7:40:a8:17:f5:6b:72:4a:5e:
fe:15:64:8b:72:51:44:a7:76:60:27:0a:31:8b:67:
94:c1:c7:52:89:5d:c9:52:27:93:63:09:83:2d:9e:
86:6d:29:1e:2c:87:10:81:53:29:92:2a:18:57:66:
41:a1:99:09:33:2c:e3:10:b6:b4:0a:1f:7f:ff:ac:
97:7f:81:a9:db:90:10:d4:27:0a:9f:b2:11:da:0d:
f2:55:6d:51:a2:22:bf:e3:a7:77:e3:03:11:4f:fe:
e1:71:6c:78:96:4e:9a:8d:02:4d:04:cc:06:0b:5a:
05:fb:24:c8:7f:9a:36:4f:7f:33:40:79:4c:a8:97:
18:cc:9c:15:a3:3b:ea:12:a3:8f:4a:a1:42:0a:59:
9d:c8:5a:ea:1a:83:3f:ba:9d:aa:ef:45:65:4b:78:
ba:4b:1a:47:31:71:01:ee:25:b4:9e:ed:2f:1c:30:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:27:99:AB:40:9C:AD:77:A9:89:44:C3:ED:DB:20:92:9D:C0:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/062613C8C28A11EF8799E7B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:29:bb:7d:b2:3c:79:92:19:76:a6:e1:64:64:49:ca:50:6b:
06:fc:e8:9e:33:c5:ec:b3:59:32:07:a3:f9:6e:43:58:9f:06:
de:74:28:56:73:7e:81:c1:8c:c9:4b:36:05:17:97:3d:98:14:
44:a4:6f:1b:ef:9d:89:2b:a2:b1:28:b0:03:1a:34:0b:ec:6e:
81:5c:8c:72:c8:11:44:91:78:35:e8:f9:d9:f5:bb:c9:fa:80:
a3:21:a1:ac:44:a4:e5:62:4b:36:3c:0f:9c:ea:57:fa:3a:70:
4a:54:3d:c5:4e:98:a4:9f:fc:5f:e2:21:bc:ff:f5:6d:62:19:
82:9e:ce:69:61:0a:47:d4:3f:97:2c:7c:9d:24:3e:c1:5b:81:
aa:2a:a6:51:1d:65:d7:35:e7:40:6a:8d:03:85:a6:44:e2:28:
98:cc:98:83:b3:c9:28:04:89:0c:59:26:38:53:82:49:28:0e:
19:a3:8d:85:5f:57:78:7f:0a:bf:5f:f5:6f:eb:6d:59:d5:e7:
ff:71:af:68:04:69:98:a6:d7:c2:03:14:b8:85:c2:42:bc:35:
a9:b1:44:7b:bc:be:2c:7d:63:49:47:2c:3e:6b:9c:8e:9c:1c:
e4:25:54:4e:a7:42:c5:38:5a:b5:8d:55:4d:69:1c:97:70:32:
87:44:f0:af
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOlXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDYzMjMwWhcNMjUxMjEwMDYzMjMwWjAYMRYw
FAYDVQQDEw02NzZiYTcwMS02ODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwotcfd6V5sZvaToa6EMq+52AnZhoqrs5eORm8IrCY2yp++vAdQ7Z0GVx
6Cs7PF1YA8VWpjZNuwDXbNznX/cjTDGS8JaJt7CPrz0FHTCYL0jXQKgX9WtySl7+
FWSLclFEp3ZgJwoxi2eUwcdSiV3JUieTYwmDLZ6GbSkeLIcQgVMpkioYV2ZBoZkJ
MyzjELa0Ch9//6yXf4Gp25AQ1CcKn7IR2g3yVW1RoiK/46d34wMRT/7hcWx4lk6a
jQJNBMwGC1oF+yTIf5o2T38zQHlMqJcYzJwVozvqEqOPSqFCClmdyFrqGoM/up2q
70VlS3i6SxpHMXEB7iW0nu0vHDDcbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGlw
J5mrQJytd6mJRMPt2yCSncASMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNjI2MTNDOEMyOEExMUVGODc5OUU3QjE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOR4MA0GCSqGSIb3DQEBCwUA
A4IBAQBLKbt9sjx5khl2puFkZEnKUGsG/OieM8Xss1kyB6P5bkNYnwbedChWc36B
wYzJSzYFF5c9mBREpG8b752JK6KxKLADGjQL7G6BXIxyyBFEkXg16PnZ9bvJ+oCj
IaGsRKTlYks2PA+c6lf6OnBKVD3FTpikn/xf4iG8//VtYhmCns5pYQpH1D+XLHyd
JD7BW4GqKqZRHWXXNedAao0DhaZE4iiYzJiDs8koBIkMWSY4U4JJKA4Zo42FX1d4
fwq/X/Vv621Z1ef/ca9oBGmYptfCAxS4hcJCvDWpsUR7vL4sfWNJRyw+a5yOnBzk
JVROp0LFOFq1jVVNaRyXcDKHRPCv
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:45:42 2025 by rpki-client