Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B8B7D30C1C611EF89AE0047762E951A.roa
File: 6B8B7D30C1C611EF89AE0047762E951A.roa (raw, json)
Hash identifier: pHsq2zdvwS4lMnBXD8bqQwt8X8b95i7oQk/srCCzMVo=
Subject key identifier: 74:27:CC:E0:74:56:E6:BD:F9:A3:CE:56:C0:61:98:3F:18:3F:09:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E871
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B8B7D30C1C611EF89AE0047762E951A.roa
Signing time: Tue 24 Dec 2024 07:12:22 +0000
ROA not before: Tue 24 Dec 2024 07:12:19 +0000
ROA not after: Wed 24 Dec 2025 07:12:19 +0000
asID: 140595
IP address blocks: 156.249.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59505 (0xe871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 24 07:12:19 2024 GMT
Not After : Dec 24 07:12:19 2025 GMT
Subject: CN=676a5ed6-ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:cf:3d:9c:ac:95:f4:0f:d8:e8:ff:88:10:
f9:c3:b3:e2:5b:75:27:e0:b2:ca:73:40:6e:26:0e:
5f:25:1f:32:cc:c0:df:23:55:de:6a:6d:54:25:52:
4c:9a:a0:ba:da:39:60:8b:0f:7b:bb:17:09:b2:43:
a4:d8:c3:72:65:78:8d:02:0b:7f:31:9d:b6:af:77:
f3:60:d4:d1:e8:83:1f:67:9f:ad:7c:f3:0f:09:c8:
4b:1f:f1:9b:84:b5:d0:8b:41:66:75:dd:37:3f:e9:
0d:cc:68:20:e7:9a:d0:9c:e8:87:fd:a5:e9:70:cc:
4b:a9:37:84:73:30:4c:4a:18:13:25:e2:56:f5:7c:
3c:cd:33:0b:b6:7c:76:ab:d9:46:13:8d:d0:77:b5:
8f:f5:e5:83:9e:88:e4:e0:ec:00:bf:8d:b6:15:62:
5e:89:83:cd:04:8a:5a:e1:bb:a0:69:bc:1e:5c:10:
54:fe:76:00:e4:45:90:ab:9e:ef:7c:a6:f8:1b:8a:
24:08:79:b2:11:1b:53:e1:24:6f:4d:54:65:7a:cc:
f9:d2:7b:ec:77:8a:d4:8a:87:06:db:8f:26:9e:a2:
7b:86:07:58:b7:5e:ba:2e:aa:91:b0:6c:d8:4e:4a:
37:e8:e9:97:66:46:16:03:01:1d:7d:f0:6d:04:f7:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:CC:E0:74:56:E6:BD:F9:A3:CE:56:C0:61:98:3F:18:3F:09:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B8B7D30C1C611EF89AE0047762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.82.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fb:75:9d:80:3b:ff:4e:9e:b5:db:48:5b:13:35:5b:25:96:
dc:3a:6e:b0:4c:1b:1f:fd:70:99:0a:3c:f7:56:7f:ec:4e:5b:
5a:5c:b0:4b:83:03:f3:75:ae:80:2f:d4:bd:da:d4:fb:a0:89:
6e:93:ed:15:d4:4b:8c:7a:36:88:81:6a:1e:57:cd:d7:c6:75:
60:97:13:50:72:9f:06:a2:8a:fa:10:f0:51:ee:aa:50:2a:ef:
21:a8:4f:ee:5a:ca:ed:ba:47:d5:5a:35:34:8e:39:99:61:1b:
b1:7e:14:fe:d7:e6:95:3f:c8:16:29:fe:ad:dc:f6:b0:81:21:
ae:36:dd:61:40:2d:4a:19:32:5f:33:43:de:02:7a:73:8b:b3:
3d:4d:26:a8:e4:df:3c:66:0f:e6:15:34:72:9e:8c:18:91:a7:
4b:8e:b1:e3:d3:f3:c1:8a:ef:79:34:3e:d7:04:91:d0:af:70:
0e:82:ea:d1:c4:ee:d2:ee:b2:24:0d:60:53:6c:58:7c:c1:cb:
c6:08:83:4c:27:1f:9d:0c:f7:7d:62:19:12:39:f6:b5:c1:bf:
c5:5a:58:57:76:70:4a:fd:13:f7:39:3d:f6:b0:76:7c:a3:a6:
e0:c1:53:4a:09:82:36:68:ce:ba:1c:41:08:cc:3c:13:b2:76:
58:83:2b:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOhxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI0MDcxMjE5WhcNMjUxMjI0MDcxMjE5WjAYMRYw
FAYDVQQDEw02NzZhNWVkNi1hYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwKXPPZyslfQP2Oj/iBD5w7PiW3Un4LLKc0BuJg5fJR8yzMDfI1Xeam1U
JVJMmqC62jlgiw97uxcJskOk2MNyZXiNAgt/MZ22r3fzYNTR6IMfZ5+tfPMPCchL
H/GbhLXQi0Fmdd03P+kNzGgg55rQnOiH/aXpcMxLqTeEczBMShgTJeJW9Xw8zTML
tnx2q9lGE43Qd7WP9eWDnojk4OwAv422FWJeiYPNBIpa4bugabweXBBU/nYA5EWQ
q57vfKb4G4okCHmyERtT4SRvTVRlesz50nvsd4rUiocG248mnqJ7hgdYt166LqqR
sGzYTko36OmXZkYWAwEdffBtBPcngQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHQn
zOB0Vua9+aPOVsBhmD8YPwk/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QjhCN0QzMEMxQzYxMUVGODlBRTAwNDc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPlSMA0GCSqGSIb3DQEBCwUA
A4IBAQAk+3WdgDv/Tp6120hbEzVbJZbcOm6wTBsf/XCZCjz3Vn/sTltaXLBLgwPz
da6AL9S92tT7oIluk+0V1EuMejaIgWoeV83XxnVglxNQcp8Goor6EPBR7qpQKu8h
qE/uWsrtukfVWjU0jjmZYRuxfhT+1+aVP8gWKf6t3PawgSGuNt1hQC1KGTJfM0Pe
Anpzi7M9TSao5N88Zg/mFTRynowYkadLjrHj0/PBiu95ND7XBJHQr3AOgurRxO7S
7rIkDWBTbFh8wcvGCINMJx+dDPd9YhkSOfa1wb/FWlhXdnBK/RP3OT32sHZ8o6bg
wVNKCYI2aM66HEEIzDwTsnZYgyu4
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:45 2025 by rpki-client