Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ABA6DBECC1411EFB267D64F762E951A.roa
File: 6ABA6DBECC1411EFB267D64F762E951A.roa (raw, json)
Hash identifier: Spz3wY5fyIJf69dsWGHEyu3QTdfSw4n+Rv+K6Du4hPk=
Subject key identifier: BE:02:87:C7:87:01:9D:A5:6B:C7:21:EC:32:AD:BB:78:AC:83:A9:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F883
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ABA6DBECC1411EFB267D64F762E951A.roa
Signing time: Mon 06 Jan 2025 09:55:53 +0000
ROA not before: Mon 06 Jan 2025 09:55:50 +0000
ROA not after: Thu 06 Feb 2025 09:55:50 +0000
asID: 200373
IP address blocks: 156.228.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 09:55:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63619 (0xf883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 6 09:55:50 2025 GMT
Not After : Feb 6 09:55:50 2025 GMT
Subject: CN=677ba8a9-26a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:04:36:d2:eb:42:6b:01:07:0f:b7:12:e2:
73:62:80:33:60:4a:f7:4f:72:75:4b:e5:4e:99:65:
94:d7:22:39:8b:c4:e6:ea:d4:39:40:1a:6d:1c:75:
ff:c5:fd:fa:e5:4f:53:de:b5:1c:16:b0:a9:3d:2f:
68:a6:d4:aa:8e:15:45:79:2a:5f:fc:08:45:1c:db:
11:6c:16:b0:62:7b:53:d9:92:2b:af:a3:0b:42:87:
d2:ac:13:eb:58:29:f9:2b:ca:89:ad:b8:c8:0a:f0:
0b:58:09:39:0e:3d:db:ec:94:bd:4f:55:3e:cb:62:
8c:cd:13:d1:30:a0:5e:33:37:9d:cd:75:44:42:64:
52:80:84:be:98:73:fb:ce:9c:94:4c:65:25:bb:62:
80:07:61:a6:0b:2c:c5:de:fb:f5:e1:5b:4a:44:a0:
07:bc:81:d8:76:3b:ed:13:f2:2b:7c:80:5d:92:dd:
3e:24:2d:68:ba:3c:b0:4c:d3:84:8d:44:6a:ee:04:
4f:8d:af:8b:29:41:ba:d5:34:a5:bd:2f:7a:0a:53:
cb:71:3f:57:09:cd:29:12:52:93:9d:a8:0a:0a:30:
27:f7:dd:b0:2d:24:d6:b3:c9:11:e5:e8:b5:5b:4c:
74:ec:e2:da:53:2a:54:48:1d:16:34:f1:68:0e:ab:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:02:87:C7:87:01:9D:A5:6B:C7:21:EC:32:AD:BB:78:AC:83:A9:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6ABA6DBECC1411EFB267D64F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.80.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:54:64:0d:ce:f9:b5:e2:28:1d:97:73:c2:b4:2b:c9:e5:ab:
18:7e:5a:18:7c:20:a0:b7:7c:06:e5:ac:20:88:03:b3:36:e2:
25:35:f5:17:94:fc:99:23:32:43:db:ab:db:cd:93:5d:da:45:
fc:10:59:af:e6:49:3a:6e:76:09:e1:6c:56:a2:36:fd:d9:c7:
ea:08:06:79:f6:32:f4:f8:4d:32:ed:7c:58:73:27:a6:eb:ac:
23:83:f8:08:e5:d7:66:6e:76:ec:43:a3:4e:ef:4a:1d:8f:6d:
dd:3f:67:ab:86:69:6a:37:49:6e:cf:21:56:a7:78:b1:55:bb:
5b:d6:43:70:b1:4a:49:80:4a:97:a7:0f:52:6d:00:a3:03:e9:
d8:3b:c1:31:f8:14:73:3c:ab:7e:dc:05:62:08:94:8c:59:3b:
74:7e:77:e3:b7:48:47:ad:84:b0:d6:e7:b7:4d:84:19:05:55:
08:65:2a:90:b9:62:92:fe:21:31:e5:65:8f:d3:4b:ec:a8:57:
ea:03:24:86:81:39:dc:2a:47:2c:cf:ea:1f:47:75:c9:b8:07:
e3:af:e0:94:b7:93:cf:83:b5:7b:d5:ae:9a:fb:7d:e2:9f:37:
60:4b:3c:92:4a:4c:0f:2e:8f:62:6a:fb:a2:fd:c3:97:73:63:
fe:23:c8:5e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPiDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA2MDk1NTUwWhcNMjUwMjA2MDk1NTUwWjAYMRYw
FAYDVQQDEw02NzdiYThhOS0yNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxnYENtLrQmsBBw+3EuJzYoAzYEr3T3J1S+VOmWWU1yI5i8Tm6tQ5QBpt
HHX/xf365U9T3rUcFrCpPS9optSqjhVFeSpf/AhFHNsRbBawYntT2ZIrr6MLQofS
rBPrWCn5K8qJrbjICvALWAk5Dj3b7JS9T1U+y2KMzRPRMKBeMzedzXVEQmRSgIS+
mHP7zpyUTGUlu2KAB2GmCyzF3vv14VtKRKAHvIHYdjvtE/IrfIBdkt0+JC1oujyw
TNOEjURq7gRPja+LKUG61TSlvS96ClPLcT9XCc0pElKTnagKCjAn992wLSTWs8kR
5ei1W0x07OLaUypUSB0WNPFoDquX+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL4C
h8eHAZ2la8ch7DKtu3isg6nPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QUJBNkRCRUNDMTQxMUVGQjI2N0Q2NEY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnORQMA0GCSqGSIb3DQEBCwUA
A4IBAQC8VGQNzvm14igdl3PCtCvJ5asYfloYfCCgt3wG5awgiAOzNuIlNfUXlPyZ
IzJD26vbzZNd2kX8EFmv5kk6bnYJ4WxWojb92cfqCAZ59jL0+E0y7XxYcyem66wj
g/gI5ddmbnbsQ6NO70odj23dP2erhmlqN0luzyFWp3ixVbtb1kNwsUpJgEqXpw9S
bQCjA+nYO8Ex+BRzPKt+3AViCJSMWTt0fnfjt0hHrYSw1ue3TYQZBVUIZSqQuWKS
/iEx5WWP00vsqFfqAySGgTncKkcsz+ofR3XJuAfjr+CUt5PPg7V71a6a+33inzdg
SzySSkwPLo9iavui/cOXc2P+I8he
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:09 2025 by rpki-client