Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6060F6D0D2F411EF83748682762E951A.roa
File: 6060F6D0D2F411EF83748682762E951A.roa (raw, json)
Hash identifier: dqtRE3lU1qGWdFqtwek6LGCAH7uUtvH/ng0f/YLS8JQ=
Subject key identifier: 9D:BA:55:D6:83:23:77:9F:81:B8:C0:32:54:6D:30:B1:E1:10:D2:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 010797
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6060F6D0D2F411EF83748682762E951A.roa
Signing time: Wed 15 Jan 2025 03:54:10 +0000
ROA not before: Wed 15 Jan 2025 03:54:06 +0000
ROA not after: Sat 03 Jan 2026 03:54:06 +0000
asID: 984
IP address blocks: 156.249.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67479 (0x10797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 15 03:54:06 2025 GMT
Not After : Jan 3 03:54:06 2026 GMT
Subject: CN=67873162-1d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:93:fc:94:f7:2b:18:f2:bf:1b:0a:18:0b:
88:33:82:8c:07:bf:b0:78:ec:a5:33:d5:af:dd:17:
d1:0b:c4:ba:c6:6f:1d:3d:24:7e:dc:bc:33:3c:4c:
5f:bf:cb:c3:ea:90:5c:4c:06:e9:43:83:20:fd:98:
49:bd:b8:fa:75:d4:2e:b7:61:75:4e:a8:9e:eb:1a:
96:58:9f:3f:2f:2a:ac:0e:b4:6e:05:e6:a0:98:95:
cf:3c:d8:c3:1c:98:d5:70:1f:03:b8:d6:21:7f:22:
0a:53:94:3e:79:9e:62:94:8c:76:56:e2:7f:df:af:
5e:b3:4f:dd:80:c0:0f:60:1c:3b:c9:ac:4c:2d:1a:
b5:02:c2:7c:d8:14:97:5b:b0:c0:a6:0d:48:66:8a:
1e:ed:89:78:42:a3:ad:eb:78:cc:5c:26:d3:78:a1:
cf:81:dd:30:e9:dc:15:a3:95:25:f8:ee:a1:40:db:
6a:48:3a:7f:82:18:f0:d3:ad:2f:d9:58:5c:16:7e:
31:22:65:47:ae:f5:79:47:5f:bf:18:a5:ad:58:5a:
18:0d:bc:98:37:0c:d1:1d:af:62:ac:37:0d:d6:91:
a9:43:83:6b:28:c7:ab:0a:21:fd:b7:c0:22:ef:52:
51:13:ba:a7:96:1f:d2:a1:4e:64:05:a0:4b:33:72:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BA:55:D6:83:23:77:9F:81:B8:C0:32:54:6D:30:B1:E1:10:D2:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6060F6D0D2F411EF83748682762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.105.0/24
Signature Algorithm: sha256WithRSAEncryption
48:96:db:e2:0f:aa:2b:4f:85:76:7e:3b:60:15:37:a3:bd:9f:
7e:02:2e:a2:0b:4f:ad:9e:2a:14:62:50:88:98:23:b2:9a:83:
eb:23:70:91:9e:5e:0b:77:53:c7:62:66:f0:bf:fc:52:96:d5:
bf:5d:e0:72:55:30:cb:b1:f5:0c:ce:f9:f0:9e:dc:3b:a0:ac:
75:cf:89:e3:4c:13:58:83:fa:a1:ed:db:1d:ce:2d:a6:89:1b:
32:11:d8:f3:a8:65:b1:50:dc:5c:bd:a0:4f:d0:9b:63:71:57:
93:d6:f0:37:05:87:da:85:53:c0:20:1b:7b:35:0d:62:ef:50:
2a:b1:94:ae:9e:69:fe:4a:7d:0e:bf:b7:46:b7:c6:9a:41:d0:
f4:94:63:4c:72:e4:e0:d7:ff:fc:ce:c9:f9:4d:56:5e:b0:bb:
cc:0d:88:85:36:b7:f7:b7:98:bf:51:83:92:95:8a:00:f1:51:
fc:ca:f8:81:e5:20:97:1c:6c:9d:e2:4c:cd:a9:ef:af:dc:55:
d2:fd:8e:dd:2a:16:b3:6e:71:d6:8d:3b:26:71:fb:ab:f0:5f:
ea:a1:e2:c4:06:62:db:61:08:50:8c:eb:05:89:62:94:d7:b8:
31:e1:92:fd:8c:74:4d:8f:b0:ed:0a:cc:4d:b2:9c:64:19:2d:
84:0a:58:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAQeXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTE1MDM1NDA2WhcNMjYwMTAzMDM1NDA2WjAYMRYw
FAYDVQQDEw02Nzg3MzE2Mi0xZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0xST/JT3KxjyvxsKGAuIM4KMB7+weOylM9Wv3RfRC8S6xm8dPSR+3Lwz
PExfv8vD6pBcTAbpQ4Mg/ZhJvbj6ddQut2F1Tqie6xqWWJ8/LyqsDrRuBeagmJXP
PNjDHJjVcB8DuNYhfyIKU5Q+eZ5ilIx2VuJ/369es0/dgMAPYBw7yaxMLRq1AsJ8
2BSXW7DApg1IZooe7Yl4QqOt63jMXCbTeKHPgd0w6dwVo5Ul+O6hQNtqSDp/ghjw
060v2VhcFn4xImVHrvV5R1+/GKWtWFoYDbyYNwzRHa9irDcN1pGpQ4NrKMerCiH9
t8Ai71JRE7qnlh/SoU5kBaBLM3KADQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ26
VdaDI3efgbjAMlRtMLHhENKTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MDYwRjZEMEQyRjQxMUVGODM3NDg2ODI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlpMA0GCSqGSIb3DQEBCwUA
A4IBAQBIltviD6orT4V2fjtgFTejvZ9+Ai6iC0+tnioUYlCImCOymoPrI3CRnl4L
d1PHYmbwv/xSltW/XeByVTDLsfUMzvnwntw7oKx1z4njTBNYg/qh7dsdzi2miRsy
EdjzqGWxUNxcvaBP0JtjcVeT1vA3BYfahVPAIBt7NQ1i71AqsZSunmn+Sn0Ov7dG
t8aaQdD0lGNMcuTg1//8zsn5TVZesLvMDYiFNrf3t5i/UYOSlYoA8VH8yviB5SCX
HGyd4kzNqe+v3FXS/Y7dKhazbnHWjTsmcfur8F/qoeLEBmLbYQhQjOsFiWKU17gx
4ZL9jHRNj7DtCsxNspxkGS2EClh8
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:44 2025 by rpki-client