Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49EA90525F1611EFB2410D8F762E951A.roa
File: 49EA90525F1611EFB2410D8F762E951A.roa (raw, json)
Hash identifier: H0vC3H1FX8NJIgSYrwEFhxnluDYbLJdg20VZ8uJ5r/Y=
Subject key identifier: 28:07:76:C8:C5:49:8A:83:E9:EE:3D:01:CB:93:7B:9D:6B:23:92:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49EA90525F1611EFB2410D8F762E951A.roa
Signing time: Tue 20 Aug 2024 17:04:41 +0000
ROA not before: Tue 20 Aug 2024 17:04:37 +0000
ROA not after: Tue 21 Jan 2025 17:04:37 +0000
asID: 63199
IP address blocks: 156.230.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43616 (0xaa60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:04:37 2024 GMT
Not After : Jan 21 17:04:37 2025 GMT
Subject: CN=66c4cca8-bbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:51:d9:c3:ff:bb:69:d6:fd:4c:80:0c:61:
8f:30:de:e8:3b:6b:dd:60:1f:1c:93:21:c7:06:9e:
80:e2:07:62:f8:2f:22:11:e9:91:b3:c8:0f:93:17:
82:36:f2:67:0c:93:7b:8b:62:82:94:23:82:0a:b1:
f5:54:72:ca:da:f8:6c:05:c4:72:7d:8e:15:ae:0f:
f1:88:d0:eb:5e:8c:2e:4c:20:f8:12:fc:5e:00:06:
ad:a5:8b:e1:42:c9:f9:96:06:a2:cd:c0:12:b6:8b:
c8:71:74:c1:53:08:70:c0:d7:c3:fe:3a:ae:1b:ce:
23:0f:f1:a3:59:67:2f:d1:79:b5:81:15:6d:2f:7d:
27:81:e5:4e:96:0a:cf:41:e5:cb:52:52:cc:c6:60:
57:9b:d2:31:4d:a9:92:fa:a0:22:7e:48:6c:47:45:
89:02:16:41:4c:67:97:95:d1:85:e2:9a:7b:3d:18:
1e:f9:1f:48:64:04:d4:5a:71:04:f0:fd:a4:e1:0a:
f7:28:27:cc:c3:e4:b7:34:a9:5f:1b:50:f9:16:e6:
fd:97:1e:af:01:45:b7:dc:f5:77:f3:03:5e:d9:7b:
69:19:3b:c6:e1:91:7c:fb:c0:e1:32:84:59:a5:d8:
32:65:88:96:28:77:60:7a:cb:90:30:fc:2d:9c:3b:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:07:76:C8:C5:49:8A:83:E9:EE:3D:01:CB:93:7B:9D:6B:23:92:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49EA90525F1611EFB2410D8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.60.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:77:65:4d:87:e2:35:b8:a0:56:30:f6:4e:9f:85:a6:72:80:
9c:59:c3:b3:95:69:40:61:22:e8:f0:f5:83:a7:99:a3:63:2c:
09:f7:c6:7c:17:fd:75:c4:38:ae:97:93:aa:45:f3:0a:2d:fa:
95:09:19:a9:e6:50:12:d6:35:9a:59:e0:09:0e:9b:ad:72:97:
7b:f8:a5:77:1c:ce:d4:33:68:74:70:4c:43:e8:86:ac:4d:08:
14:68:33:72:42:ea:db:f6:99:e9:96:67:d4:38:0a:12:38:e8:
46:a8:55:bd:bc:ba:c7:3d:46:7a:32:35:6a:30:df:62:bf:ab:
a1:f2:03:8b:ff:6d:35:96:71:0a:0e:ff:db:45:d3:89:4b:1b:
80:ec:d4:1b:06:36:f4:78:9e:71:b5:e1:2b:9c:f6:27:e7:66:
ae:fc:d9:22:32:b2:fd:64:e3:23:2d:c1:4a:f8:07:31:0b:61:
55:b3:b0:cc:1c:82:90:22:22:0a:09:93:9e:7a:bd:80:d0:18:
9b:f6:bb:97:be:86:13:aa:f3:a5:50:86:c9:9f:5e:5d:69:4e:
12:88:11:4d:86:6e:52:15:74:4b:21:5e:c3:07:34:9b:76:d6:
4c:32:9a:ef:4d:a9:16:b2:fe:a0:dd:ba:bd:84:de:f4:db:ba:
8e:f2:16:05
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKpgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTcwNDM3WhcNMjUwMTIxMTcwNDM3WjAYMRYw
FAYDVQQDEw02NmM0Y2NhOC1iYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA595R2cP/u2nW/UyADGGPMN7oO2vdYB8ckyHHBp6A4gdi+C8iEemRs8gP
kxeCNvJnDJN7i2KClCOCCrH1VHLK2vhsBcRyfY4Vrg/xiNDrXowuTCD4EvxeAAat
pYvhQsn5lgaizcAStovIcXTBUwhwwNfD/jquG84jD/GjWWcv0Xm1gRVtL30ngeVO
lgrPQeXLUlLMxmBXm9IxTamS+qAifkhsR0WJAhZBTGeXldGF4pp7PRge+R9IZATU
WnEE8P2k4Qr3KCfMw+S3NKlfG1D5Fub9lx6vAUW33PV38wNe2XtpGTvG4ZF8+8Dh
MoRZpdgyZYiWKHdgesuQMPwtnDtjLwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCgH
dsjFSYqD6e49AcuTe51rI5JQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OUVBOTA1MjVGMTYxMUVGQjI0MTBEOEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOY8MA0GCSqGSIb3DQEBCwUA
A4IBAQCjd2VNh+I1uKBWMPZOn4WmcoCcWcOzlWlAYSLo8PWDp5mjYywJ98Z8F/11
xDiul5OqRfMKLfqVCRmp5lAS1jWaWeAJDputcpd7+KV3HM7UM2h0cExD6IasTQgU
aDNyQurb9pnplmfUOAoSOOhGqFW9vLrHPUZ6MjVqMN9iv6uh8gOL/201lnEKDv/b
RdOJSxuA7NQbBjb0eJ5xteErnPYn52au/NkiMrL9ZOMjLcFK+AcxC2FVs7DMHIKQ
IiIKCZOeer2A0Bib9ruXvoYTqvOlUIbJn15daU4SiBFNhm5SFXRLIV7DBzSbdtZM
MprvTakWsv6g3bq9hN7027qO8hYF
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:28 2024 by rpki-client on console-fra.rpki-client.org