Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6430A514CD6B11EF8F2FD05E762E951A.roa
File: 6430A514CD6B11EF8F2FD05E762E951A.roa (raw, json)
Hash identifier: fnH6E+MKi/MM6vmLPJ1GR5ZbRVzKDjVearLhwmbFyos=
Subject key identifier: B7:10:4D:3E:31:71:CD:2D:CB:44:E3:76:0C:F0:01:42:F3:27:7B:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FF69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6430A514CD6B11EF8F2FD05E762E951A.roa
Signing time: Wed 08 Jan 2025 02:51:00 +0000
ROA not before: Wed 08 Jan 2025 02:50:56 +0000
ROA not after: Mon 13 Dec 2027 02:50:56 +0000
asID: 17561
IP address blocks: 156.248.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65385 (0xff69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 8 02:50:56 2025 GMT
Not After : Dec 13 02:50:56 2027 GMT
Subject: CN=677de814-d317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:00:81:97:5c:b5:fa:60:bf:81:90:8d:72:
da:05:f4:00:fa:09:8f:db:ad:16:31:f4:cc:d6:4e:
5e:63:b3:81:60:40:3d:5c:db:1d:c5:4a:52:f5:7b:
05:13:f5:7a:10:0d:f5:c7:f7:d4:05:11:d5:da:c1:
73:c8:6a:3d:97:ae:3a:06:a3:ad:05:8c:da:02:9d:
ae:78:00:0f:2b:b9:bb:4b:80:57:67:bb:bb:a3:d3:
51:cf:9f:df:a4:ba:60:dc:68:29:35:4a:be:50:5b:
67:3c:14:5d:46:09:85:9e:d4:c5:6f:9d:e6:1c:b7:
76:58:81:85:17:65:68:da:8e:f4:3b:6d:9b:36:d7:
13:e4:bc:59:30:da:de:b6:22:01:f2:27:59:bc:7e:
01:0e:58:12:46:a3:1a:ee:58:7d:74:bb:c7:68:03:
e1:c9:c0:6d:dc:ba:04:c7:82:54:8d:67:9d:33:26:
9a:0c:79:1d:fb:ff:dc:68:0d:7c:5a:58:ca:06:f0:
86:71:a6:b2:3a:af:33:8e:0c:26:08:e1:39:81:9d:
79:91:9b:b8:bc:3f:93:89:50:42:2a:c2:0f:9e:20:
37:a5:bf:7c:2c:dd:9b:44:55:c3:0f:f8:9a:df:20:
36:ea:93:40:e5:0d:41:fa:26:9e:83:1c:e6:7e:78:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:4D:3E:31:71:CD:2D:CB:44:E3:76:0C:F0:01:42:F3:27:7B:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6430A514CD6B11EF8F2FD05E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:91:43:df:01:ae:2a:06:f3:a3:74:6c:8a:af:de:6f:5c:91:
aa:31:c3:41:26:a6:03:4b:38:12:80:64:80:5d:0c:55:0d:1e:
45:bf:e0:cc:6c:67:19:f7:7b:03:8a:ae:33:0a:5a:d3:18:5b:
7f:a6:9c:13:40:a8:4b:fd:b2:98:11:20:ab:73:6b:5d:61:f7:
2e:2a:36:42:67:c2:e3:93:7b:e9:ae:1b:c1:7f:65:52:a9:18:
bd:5e:63:15:ad:02:da:74:44:be:55:a1:e1:02:16:26:60:ad:
09:b1:17:1b:9e:a0:2a:46:d5:86:9f:4d:06:a0:bd:80:3c:78:
51:0b:42:f7:d4:5c:03:10:13:25:50:2d:c0:36:8a:eb:34:6b:
a8:1c:85:ac:23:f8:3d:85:fb:15:6f:2e:6f:b5:48:fd:0e:98:
57:2d:4b:bd:4d:cd:21:90:99:af:66:5e:56:ea:18:d6:72:f0:
e8:b5:d1:b8:41:7f:01:14:0f:71:cf:8e:78:8e:8f:b0:1c:a7:
08:10:5e:05:3d:2d:4e:4a:4d:4f:57:a2:d9:eb:1c:66:48:48:
f4:5f:08:2b:45:db:20:6c:92:10:f1:14:bd:4e:a4:f5:64:2c:
f4:1b:3f:72:8f:66:64:9a:30:4e:27:ad:22:52:44:d3:ec:82:
86:0a:97:54
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAP9pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA4MDI1MDU2WhcNMjcxMjEzMDI1MDU2WjAYMRYw
FAYDVQQDEw02NzdkZTgxNC1kMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwY4AgZdctfpgv4GQjXLaBfQA+gmP260WMfTM1k5eY7OBYEA9XNsdxUpS
9XsFE/V6EA31x/fUBRHV2sFzyGo9l646BqOtBYzaAp2ueAAPK7m7S4BXZ7u7o9NR
z5/fpLpg3GgpNUq+UFtnPBRdRgmFntTFb53mHLd2WIGFF2Vo2o70O22bNtcT5LxZ
MNretiIB8idZvH4BDlgSRqMa7lh9dLvHaAPhycBt3LoEx4JUjWedMyaaDHkd+//c
aA18WljKBvCGcaayOq8zjgwmCOE5gZ15kZu4vD+TiVBCKsIPniA3pb98LN2bRFXD
D/ia3yA26pNA5Q1B+iaegxzmfnjjXwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLcQ
TT4xcc0ty0TjdgzwAULzJ3vaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDMwQTUxNENENkIxMUVGOEYyRkQwNUU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPgGMA0GCSqGSIb3DQEBCwUA
A4IBAQAckUPfAa4qBvOjdGyKr95vXJGqMcNBJqYDSzgSgGSAXQxVDR5Fv+DMbGcZ
93sDiq4zClrTGFt/ppwTQKhL/bKYESCrc2tdYfcuKjZCZ8Ljk3vprhvBf2VSqRi9
XmMVrQLadES+VaHhAhYmYK0JsRcbnqAqRtWGn00GoL2APHhRC0L31FwDEBMlUC3A
NorrNGuoHIWsI/g9hfsVby5vtUj9DphXLUu9Tc0hkJmvZl5W6hjWcvDotdG4QX8B
FA9xz454jo+wHKcIEF4FPS1OSk1PV6LZ6xxmSEj0XwgrRdsgbJIQ8RS9TqT1ZCz0
Gz9yj2ZkmjBOJ60iUkTT7IKGCpdU
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:26 2025 by rpki-client