Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E59297AC28611EF9D5C649B762E951A.roa
File: 6E59297AC28611EF9D5C649B762E951A.roa (raw, json)
Hash identifier: tZzAyXHE2ySUmhzfr3exmYq0YL3hBXSD1y5+S+ki48c=
Subject key identifier: EA:BD:45:0E:F6:43:60:B3:B9:EC:54:BE:0B:89:32:35:D9:60:F5:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E92B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E59297AC28611EF9D5C649B762E951A.roa
Signing time: Wed 25 Dec 2024 06:06:50 +0000
ROA not before: Wed 25 Dec 2024 06:06:47 +0000
ROA not after: Wed 10 Dec 2025 06:06:47 +0000
asID: 984
IP address blocks: 156.228.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59691 (0xe92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 25 06:06:47 2024 GMT
Not After : Dec 10 06:06:47 2025 GMT
Subject: CN=676ba0fa-dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:d2:aa:7d:42:f8:4f:9e:58:c9:e5:4d:b5:
8b:8b:dd:5e:4b:3b:78:21:84:96:a0:4a:0f:d3:3e:
39:72:4a:3c:36:8f:e7:6c:36:bf:b2:55:d8:07:3f:
b4:d9:01:01:70:82:0f:f7:59:b4:d9:8f:d1:ff:ca:
a6:11:5c:bf:e0:33:7f:23:ed:01:13:b7:fb:bf:01:
8b:42:b3:0b:d4:31:2f:8a:ae:27:c2:9d:9b:a5:19:
07:b3:5d:6b:2f:31:48:99:4a:43:b2:68:38:f1:4e:
d1:3f:cf:1c:3b:54:a0:84:ce:48:85:78:bb:e9:f3:
1b:2a:f7:b0:6c:62:36:71:b6:67:d7:06:1b:c6:76:
3b:e5:62:08:ed:f0:d2:8a:0c:11:45:a1:4a:eb:2b:
07:f9:e4:f7:53:16:6b:80:bc:f1:89:dd:98:d0:ec:
d1:aa:10:57:72:de:5c:ff:49:3a:7a:6e:d3:3a:e0:
be:04:79:c2:fe:aa:38:e4:b8:bd:1a:4f:9d:78:09:
be:32:95:5a:31:51:53:2d:36:88:ff:98:54:c4:2b:
16:2e:e5:24:ae:d0:49:1f:e6:3a:41:6e:1d:60:50:
13:73:ce:44:40:bc:72:6d:6d:21:1f:00:49:21:37:
60:c6:07:ee:f2:aa:4e:e3:e1:05:9f:5e:54:0d:02:
10:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:45:0E:F6:43:60:B3:B9:EC:54:BE:0B:89:32:35:D9:60:F5:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E59297AC28611EF9D5C649B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:aa:30:f5:4a:e1:aa:33:09:4a:da:d2:89:c1:30:03:8e:6b:
8b:f4:f7:95:49:0d:d7:22:49:7a:ee:5a:2b:d3:d9:cb:1d:bb:
13:6a:e0:25:0d:89:f0:d7:d5:37:db:26:3b:9d:69:66:76:91:
4c:69:3e:3d:ce:f3:47:61:d8:76:52:53:64:e2:10:89:43:48:
84:a1:82:4e:35:b8:4f:70:7a:20:29:79:2a:f9:71:01:08:a2:
68:4a:60:ba:77:df:90:2d:9c:3e:65:f4:c4:9f:5b:57:51:02:
a6:ef:b5:d3:76:18:4f:2f:a2:a5:08:8a:bf:37:68:90:66:21:
ee:a3:21:d7:13:a1:90:c6:7b:6f:bb:77:29:4f:ed:07:93:72:
cd:f5:4d:4b:19:94:8d:85:08:65:5a:c5:22:a2:3a:d9:0e:8b:
0a:60:6f:20:cb:bb:79:3e:c1:ca:fe:44:97:f4:77:bc:b2:52:
50:62:3e:5a:c1:47:93:66:7f:92:78:6c:a4:67:6e:33:7c:87:
16:d2:eb:45:02:bb:68:fc:26:a2:3a:b0:1f:27:25:42:fd:db:
bd:0e:64:4e:d8:a6:e9:1c:18:2f:ee:55:0e:45:39:3a:e2:cc:
cc:bd:0d:3f:5b:3d:81:f4:df:1b:fb:7c:07:10:7f:1c:63:7b:
c6:60:94:6d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOkrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjI1MDYwNjQ3WhcNMjUxMjEwMDYwNjQ3WjAYMRYw
FAYDVQQDEw02NzZiYTBmYS1kYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsoDSqn1C+E+eWMnlTbWLi91eSzt4IYSWoEoP0z45cko8No/nbDa/slXY
Bz+02QEBcIIP91m02Y/R/8qmEVy/4DN/I+0BE7f7vwGLQrML1DEviq4nwp2bpRkH
s11rLzFImUpDsmg48U7RP88cO1SghM5IhXi76fMbKvewbGI2cbZn1wYbxnY75WII
7fDSigwRRaFK6ysH+eT3UxZrgLzxid2Y0OzRqhBXct5c/0k6em7TOuC+BHnC/qo4
5Li9Gk+deAm+MpVaMVFTLTaI/5hUxCsWLuUkrtBJH+Y6QW4dYFATc85EQLxybW0h
HwBJITdgxgfu8qpO4+EFn15UDQIQ2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOq9
RQ72Q2CzuexUvguJMjXZYPWsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RTU5Mjk3QUMyODYxMUVGOUQ1QzY0OUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOQ1MA0GCSqGSIb3DQEBCwUA
A4IBAQCtqjD1SuGqMwlK2tKJwTADjmuL9PeVSQ3XIkl67lor09nLHbsTauAlDYnw
19U32yY7nWlmdpFMaT49zvNHYdh2UlNk4hCJQ0iEoYJONbhPcHogKXkq+XEBCKJo
SmC6d9+QLZw+ZfTEn1tXUQKm77XTdhhPL6KlCIq/N2iQZiHuoyHXE6GQxntvu3cp
T+0Hk3LN9U1LGZSNhQhlWsUiojrZDosKYG8gy7t5PsHK/kSX9He8slJQYj5awUeT
Zn+SeGykZ24zfIcW0utFArto/CaiOrAfJyVC/du9DmRO2KbpHBgv7lUORTk64szM
vQ0/Wz2B9N8b+3wHEH8cY3vGYJRt
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:13 2025 by rpki-client