Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A3C930AC32011EFA900DD55762E951A.roa
File: 6A3C930AC32011EFA900DD55762E951A.roa (raw, json)
Hash identifier: fxhr6A24DsxQeIkQjaB8fWb1C3VjYv25KRdAl4lPqTg=
Subject key identifier: F7:5B:28:75:7E:23:77:4B:38:E2:44:8F:89:2E:84:0D:83:F8:41:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EA19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A3C930AC32011EFA900DD55762E951A.roa
Signing time: Thu 26 Dec 2024 00:29:06 +0000
ROA not before: Thu 26 Dec 2024 00:00:02 +0000
ROA not after: Wed 10 Dec 2025 00:00:02 +0000
asID: 984
IP address blocks: 156.228.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59929 (0xea19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 00:00:02 2024 GMT
Not After : Dec 10 00:00:02 2025 GMT
Subject: CN=676ca352-9caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:40:da:28:68:91:33:8b:26:88:5d:f1:99:
6a:83:c8:c5:cc:7a:26:59:0f:c8:44:86:c8:0e:1a:
72:2f:55:49:bb:e1:a8:df:0f:b4:ca:37:7e:65:58:
f8:f6:44:fb:03:39:3a:f7:5c:00:b9:92:a0:85:10:
37:49:9a:47:f9:66:68:48:d6:c8:ef:3c:24:8c:ea:
c9:69:50:01:f2:72:9c:ec:f4:3e:94:7a:0c:34:86:
9d:41:75:98:d6:24:ae:5f:d2:37:a6:f9:36:90:b5:
6d:f0:e3:ea:88:c9:03:62:33:a8:a0:f9:03:10:a2:
1c:db:cf:b8:54:ed:df:7d:18:6a:ef:8e:02:08:f5:
06:2c:e2:d2:89:8f:21:4f:5f:bf:59:7d:79:40:16:
22:5e:57:aa:d1:4b:56:50:ce:1d:92:cb:8c:0f:23:
a2:d6:89:56:73:d4:e2:f0:4e:e6:e6:c1:fc:6a:ff:
9c:1d:df:8b:94:fc:60:a2:08:dc:68:4b:2b:91:a6:
11:51:be:73:3d:50:1c:73:38:f5:5e:13:00:f4:ca:
03:32:ca:c4:76:fa:88:49:f9:01:c5:8a:94:75:04:
12:36:da:7c:76:7f:b4:2a:c6:6c:b1:36:d3:83:51:
8b:de:6c:c2:e8:c2:88:19:08:c7:d5:ff:f4:4b:af:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:28:75:7E:23:77:4B:38:E2:44:8F:89:2E:84:0D:83:F8:41:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A3C930AC32011EFA900DD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.219.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a4:a0:b9:9b:ac:57:3c:1f:59:46:90:a8:e8:60:bf:02:33:
33:37:37:1a:a2:96:2f:30:18:f7:cd:07:a0:fe:0f:aa:4c:dc:
46:39:20:60:a5:cf:a7:24:4d:98:ab:68:64:9c:eb:d2:a6:36:
6b:f8:43:51:21:10:b5:4b:60:38:14:a4:23:57:3b:08:e5:c6:
75:f4:26:b4:92:8e:c8:ec:c5:92:a8:a0:75:81:68:c1:2f:cc:
db:4a:79:b2:fa:6b:0a:02:04:1f:f6:a3:5d:a4:8d:5b:fc:ed:
4c:fe:95:6d:cd:be:ec:10:9a:17:0f:37:27:3c:5d:d3:de:f6:
de:6d:07:ce:bd:69:3f:29:06:8f:be:89:27:9b:65:a9:37:a5:
76:cf:1e:35:63:49:3e:bb:c6:45:15:1c:d1:9b:58:cd:a6:c2:
fa:f1:71:0a:eb:b1:9e:10:50:12:d0:1f:d3:74:07:07:4a:0b:
e3:49:7e:69:8c:47:be:36:18:0e:c5:d1:70:74:96:84:63:fd:
7b:6b:b1:c6:2b:52:56:f6:ef:d1:2f:a4:89:10:7b:e4:79:e6:
9f:a7:23:18:37:79:50:20:5b:4e:4a:31:75:ca:df:ac:c2:7d:
37:6f:5b:14:f7:ae:7c:e9:47:21:a5:25:2d:2e:1e:45:6c:b7:
dd:c4:a6:ac
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOoZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI2MDAwMDAyWhcNMjUxMjEwMDAwMDAyWjAYMRYw
FAYDVQQDEw02NzZjYTM1Mi05Y2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtTlA2ihokTOLJohd8Zlqg8jFzHomWQ/IRIbIDhpyL1VJu+Go3w+0yjd+
ZVj49kT7Azk691wAuZKghRA3SZpH+WZoSNbI7zwkjOrJaVAB8nKc7PQ+lHoMNIad
QXWY1iSuX9I3pvk2kLVt8OPqiMkDYjOooPkDEKIc28+4VO3ffRhq744CCPUGLOLS
iY8hT1+/WX15QBYiXleq0UtWUM4dksuMDyOi1olWc9Ti8E7m5sH8av+cHd+LlPxg
ogjcaEsrkaYRUb5zPVAcczj1XhMA9MoDMsrEdvqISfkBxYqUdQQSNtp8dn+0KsZs
sTbTg1GL3mzC6MKIGQjH1f/0S6+dRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPdb
KHV+I3dLOOJEj4kuhA2D+EFxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QTNDOTMwQUMzMjAxMUVGQTkwMERENTU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOTbMA0GCSqGSIb3DQEBCwUA
A4IBAQBypKC5m6xXPB9ZRpCo6GC/AjMzNzcaopYvMBj3zQeg/g+qTNxGOSBgpc+n
JE2Yq2hknOvSpjZr+ENRIRC1S2A4FKQjVzsI5cZ19Ca0ko7I7MWSqKB1gWjBL8zb
Snmy+msKAgQf9qNdpI1b/O1M/pVtzb7sEJoXDzcnPF3T3vbebQfOvWk/KQaPvokn
m2WpN6V2zx41Y0k+u8ZFFRzRm1jNpsL68XEK67GeEFAS0B/TdAcHSgvjSX5pjEe+
NhgOxdFwdJaEY/17a7HGK1JW9u/RL6SJEHvkeeafpyMYN3lQIFtOSjF1yt+swn03
b1sU96586UchpSUtLh5FbLfdxKas
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:14 2025 by rpki-client