Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60452B1CCD2C11EF8DAC9F41762E951A.roa
File: 60452B1CCD2C11EF8DAC9F41762E951A.roa (raw, json)
Hash identifier: INu6fgoBnuMTc1/9i1ZPUBfkD0dg0pW6aEqN584cUWY=
Subject key identifier: D4:0E:B2:D6:B0:8C:2B:CA:AC:7F:01:86:05:4E:26:DA:C1:59:40:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FDCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60452B1CCD2C11EF8DAC9F41762E951A.roa
Signing time: Tue 07 Jan 2025 19:19:55 +0000
ROA not before: Tue 07 Jan 2025 19:19:51 +0000
ROA not after: Mon 13 Dec 2027 19:19:51 +0000
asID: 17561
IP address blocks: 156.241.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64973 (0xfdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 19:19:51 2025 GMT
Not After : Dec 13 19:19:51 2027 GMT
Subject: CN=677d7e5b-aad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:ff:7b:b6:50:71:ef:89:24:23:ac:fc:0a:
2f:eb:b2:76:86:d1:aa:9f:73:d2:c2:81:ae:8e:9f:
79:7c:1f:89:75:52:0e:c4:a7:23:15:d7:cb:9c:53:
d8:70:9a:b4:32:fd:1b:3c:11:d2:ae:b8:32:a9:40:
6d:ee:eb:97:32:3f:0a:dc:77:1a:cb:a1:f1:ce:5a:
6f:23:c8:5c:29:96:41:92:d4:2f:03:96:74:0d:76:
68:58:6f:e9:2b:b5:ad:6b:c5:b1:eb:bd:a8:f0:56:
d1:7b:5e:76:11:42:36:56:7b:c6:83:cf:22:52:34:
ff:b1:cf:1f:4c:ee:e9:37:bb:5f:49:33:c0:b8:2d:
ff:b4:ba:10:c7:4d:cf:d8:64:d0:f2:18:9f:43:31:
e9:87:ff:6c:96:e9:a8:21:d9:74:20:bb:dd:6e:a0:
f6:63:26:f3:9d:e2:d0:bd:a9:c4:34:76:df:dc:b8:
b5:33:43:a4:7d:a4:b1:8e:fe:bc:57:00:62:f3:ac:
c8:4a:0a:c8:4b:4e:d7:c0:c4:46:f9:66:5c:ef:4d:
8c:22:4b:7e:e5:a9:84:d8:9e:37:60:62:df:8d:3a:
49:51:36:4f:fc:57:68:9d:63:f7:24:c5:94:f1:c2:
6b:34:fe:7e:ee:60:61:54:a8:2a:64:9d:7a:5a:60:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:B2:D6:B0:8C:2B:CA:AC:7F:01:86:05:4E:26:DA:C1:59:40:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60452B1CCD2C11EF8DAC9F41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:34:07:91:5e:a1:e1:f4:d8:2e:a4:a6:18:30:1e:d1:3e:00:
b6:1f:3b:9f:a1:25:7f:ad:5e:cc:c9:78:8e:79:3a:23:23:b9:
0c:a7:3d:e4:07:37:b4:c2:8c:c3:52:7b:76:e0:1a:51:58:f6:
24:31:4a:ff:a2:58:b3:71:dc:64:7f:77:16:ee:e7:2a:12:27:
27:1e:0d:23:f3:45:9f:40:68:5d:06:81:41:66:b4:1c:d1:04:
98:04:a2:23:7a:1e:fc:cf:cd:35:cd:bd:d0:5b:7e:75:3c:11:
b0:53:a2:36:1a:82:45:59:0b:2b:ff:18:08:77:b2:55:1d:fa:
6d:a2:31:94:74:d1:ae:99:2f:cf:4a:4e:65:f1:f8:6d:c1:d0:
da:7b:7c:13:31:e7:70:16:33:7b:fc:d1:38:4a:1d:97:d7:10:
00:84:bc:16:24:d5:44:c2:f2:e8:c4:10:68:ef:f5:84:5a:af:
92:b1:cd:eb:1e:10:da:70:94:8c:54:5e:a6:c0:eb:27:22:0f:
f4:c0:2b:4e:e8:6b:05:ac:9b:69:cf:95:ef:5a:e7:17:c1:88:
87:20:5b:47:fa:a5:ff:2e:97:e0:5a:de:56:44:28:bc:8d:fe:
df:7d:58:10:d0:54:ae:a9:c2:b6:88:97:89:38:74:da:42:82:
92:71:63:e3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP3NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MTkxOTUxWhcNMjcxMjEzMTkxOTUxWjAYMRYw
FAYDVQQDEw02NzdkN2U1Yi1hYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxuj/e7ZQce+JJCOs/Aov67J2htGqn3PSwoGujp95fB+JdVIOxKcjFdfL
nFPYcJq0Mv0bPBHSrrgyqUBt7uuXMj8K3Hcay6HxzlpvI8hcKZZBktQvA5Z0DXZo
WG/pK7Wta8Wx672o8FbRe152EUI2VnvGg88iUjT/sc8fTO7pN7tfSTPAuC3/tLoQ
x03P2GTQ8hifQzHph/9slumoIdl0ILvdbqD2YybzneLQvanENHbf3Li1M0OkfaSx
jv68VwBi86zISgrIS07XwMRG+WZc702MIkt+5amE2J43YGLfjTpJUTZP/FdonWP3
JMWU8cJrNP5+7mBhVKgqZJ16WmDR8wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNQO
stawjCvKrH8BhgVOJtrBWUDSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MDQ1MkIxQ0NEMkMxMUVGOERBQzlGNDE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPHzMA0GCSqGSIb3DQEBCwUA
A4IBAQAvNAeRXqHh9NgupKYYMB7RPgC2HzufoSV/rV7MyXiOeTojI7kMpz3kBze0
wozDUnt24BpRWPYkMUr/olizcdxkf3cW7ucqEicnHg0j80WfQGhdBoFBZrQc0QSY
BKIjeh78z801zb3QW351PBGwU6I2GoJFWQsr/xgId7JVHfptojGUdNGumS/PSk5l
8fhtwdDae3wTMedwFjN7/NE4Sh2X1xAAhLwWJNVEwvLoxBBo7/WEWq+Ssc3rHhDa
cJSMVF6mwOsnIg/0wCtO6GsFrJtpz5XvWucXwYiHIFtH+qX/LpfgWt5WRCi8jf7f
fVgQ0FSuqcK2iJeJOHTaQoKScWPj
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:47 2025 by rpki-client