Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646E466AC99411EF94D88A7A762E951A.roa
File: 646E466AC99411EF94D88A7A762E951A.roa (raw, json)
Hash identifier: cMQbNzQqzIYt/DmRGoPK9QONlA+6+flhoaSY7PpNA/E=
Subject key identifier: 3F:0F:A3:EB:9D:19:A4:6E:47:79:A2:74:D3:3C:5A:01:55:37:16:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F603
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646E466AC99411EF94D88A7A762E951A.roa
Signing time: Fri 03 Jan 2025 05:34:25 +0000
ROA not before: Fri 03 Jan 2025 05:34:21 +0000
ROA not after: Mon 13 Dec 2027 05:34:21 +0000
asID: 17561
IP address blocks: 156.233.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62979 (0xf603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 3 05:34:21 2025 GMT
Not After : Dec 13 05:34:21 2027 GMT
Subject: CN=677776e1-41b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:06:1b:da:98:fe:53:d7:1b:6e:ce:6b:35:
02:93:bf:13:e9:c7:b8:6c:7d:b4:d6:12:74:3e:77:
ee:cb:ef:ed:28:ca:63:27:69:04:f3:b9:98:8b:71:
f6:1e:14:fb:af:1e:0b:2a:1b:19:5b:2f:60:a8:00:
90:42:f9:0f:d9:43:65:f8:78:50:fb:cd:0c:2f:1c:
2f:25:7b:dd:08:02:fa:b7:0c:02:37:92:eb:32:33:
e6:ad:6c:f7:b7:20:b1:c0:9c:3f:59:1c:d0:63:a6:
2e:30:d8:24:f1:9e:19:a1:a4:36:30:8d:46:c9:47:
88:02:bb:1a:b3:9e:a6:80:40:11:b6:9c:6b:25:23:
75:91:55:a9:de:1f:92:0b:97:61:86:b5:89:03:9f:
c2:99:6e:dd:0d:b3:7a:7b:e3:05:ab:b7:66:61:9b:
80:a5:5d:48:d9:d5:2e:93:8d:8a:68:81:2c:dd:cd:
f6:de:b7:f6:69:83:c9:0d:fc:4a:2c:8a:ac:0e:70:
4f:d1:9e:6e:9e:a9:be:ec:43:2f:20:ff:e2:6a:d6:
1e:3a:c3:0d:4a:ba:4d:b4:cc:71:26:16:1e:9c:3b:
44:a0:15:16:75:f7:81:1b:6d:e3:2f:2e:2c:7b:97:
7f:74:e5:e4:4e:82:2e:78:c5:0d:e8:35:01:4a:8b:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:A3:EB:9D:19:A4:6E:47:79:A2:74:D3:3C:5A:01:55:37:16:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646E466AC99411EF94D88A7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3b:9b:cb:c2:22:e0:bf:96:29:c7:68:7f:f3:40:5e:6d:ae:
91:f8:0c:04:57:e5:48:bc:62:fb:88:cd:93:2c:db:76:a2:f7:
87:6b:34:d9:e2:7f:35:65:cc:a8:13:7d:75:95:13:bf:5d:1f:
b0:4d:e8:10:f4:bb:e1:68:cf:de:78:80:36:31:42:8c:e0:2f:
30:5e:ae:14:92:1e:de:5c:05:7d:1a:1b:47:b7:4f:c5:47:b0:
d0:f3:c9:f1:e0:4b:67:6c:95:95:e1:ca:17:0e:d0:e8:46:09:
68:02:7a:6f:67:9e:3f:89:c7:e6:5f:37:16:dd:6b:8d:9c:a8:
28:9f:99:c8:01:0f:dd:d2:34:79:44:7b:4e:61:9a:08:4d:a0:
06:3d:70:01:48:0b:3b:49:da:72:99:4b:38:0e:aa:67:33:d0:
3c:f0:2d:04:2e:17:ed:75:e5:90:a1:13:5b:57:26:ae:7c:7f:
3d:28:39:26:0e:9d:0b:e5:ef:60:b4:5a:b3:9e:c5:8c:15:4a:
95:bf:7b:ca:e4:61:42:5e:de:7a:67:08:80:ac:c6:6b:b3:c7:
1b:f2:a9:59:a3:c6:bf:ae:57:a9:69:90:61:62:ef:8d:94:79:
3e:e7:64:0e:76:fa:7e:93:b4:44:c2:cd:62:51:60:b3:2b:5c:
eb:12:a4:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPYDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTAzMDUzNDIxWhcNMjcxMjEzMDUzNDIxWjAYMRYw
FAYDVQQDEw02Nzc3NzZlMS00MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA27UGG9qY/lPXG27OazUCk78T6ce4bH201hJ0Pnfuy+/tKMpjJ2kE87mY
i3H2HhT7rx4LKhsZWy9gqACQQvkP2UNl+HhQ+80MLxwvJXvdCAL6twwCN5LrMjPm
rWz3tyCxwJw/WRzQY6YuMNgk8Z4ZoaQ2MI1GyUeIArsas56mgEARtpxrJSN1kVWp
3h+SC5dhhrWJA5/CmW7dDbN6e+MFq7dmYZuApV1I2dUuk42KaIEs3c323rf2aYPJ
DfxKLIqsDnBP0Z5unqm+7EMvIP/iatYeOsMNSrpNtMxxJhYenDtEoBUWdfeBG23j
Ly4se5d/dOXkToIueMUN6DUBSovgswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD8P
o+udGaRuR3midNM8WgFVNxYjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDZFNDY2QUM5OTQxMUVGOTREODhBN0E3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOmGMA0GCSqGSIb3DQEBCwUA
A4IBAQBTO5vLwiLgv5Ypx2h/80Beba6R+AwEV+VIvGL7iM2TLNt2oveHazTZ4n81
ZcyoE311lRO/XR+wTegQ9LvhaM/eeIA2MUKM4C8wXq4Ukh7eXAV9GhtHt0/FR7DQ
88nx4EtnbJWV4coXDtDoRgloAnpvZ54/icfmXzcW3WuNnKgon5nIAQ/d0jR5RHtO
YZoITaAGPXABSAs7SdpymUs4DqpnM9A88C0ELhftdeWQoRNbVyaufH89KDkmDp0L
5e9gtFqznsWMFUqVv3vK5GFCXt56ZwiArMZrs8cb8qlZo8a/rlepaZBhYu+NlHk+
52QOdvp+k7REws1iUWCzK1zrEqRP
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:43 2025 by rpki-client