Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B60A741ACC9311EF99869268762E951A.roa
File: B60A741ACC9311EF99869268762E951A.roa (raw, json)
Hash identifier: xtN1IiJD+2DwcDBApABN4vDCanpPEOSf1LmCbRS7O0c=
Subject key identifier: 2A:17:57:39:B2:74:EF:FE:90:57:73:45:21:85:39:F9:33:51:D8:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F922
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B60A741ACC9311EF99869268762E951A.roa
Signing time: Tue 07 Jan 2025 01:07:06 +0000
ROA not before: Tue 07 Jan 2025 01:07:02 +0000
ROA not after: Mon 13 Dec 2027 01:07:02 +0000
asID: 17561
IP address blocks: 156.227.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63778 (0xf922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 01:07:02 2025 GMT
Not After : Dec 13 01:07:02 2027 GMT
Subject: CN=677c7e3a-fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:58:f3:1d:38:f6:8e:a0:ec:5d:ee:68:17:
30:60:cd:57:dd:19:2f:d4:9d:be:3b:be:65:36:22:
bc:9c:27:80:22:23:9f:1a:ea:6d:99:5b:e4:f6:fd:
0e:7a:fe:a1:36:fb:d7:13:b2:c8:32:ab:2a:56:94:
d6:a9:2f:3e:7d:9c:94:e7:7b:0e:d9:03:5a:0c:20:
5f:cf:9d:2d:d2:d9:cd:94:95:3d:e2:90:10:df:d0:
74:30:8a:4f:46:66:46:a8:95:03:b9:ec:60:0a:4a:
42:d5:cb:50:40:22:53:04:48:61:0e:dc:8f:d8:1e:
e7:f2:25:9b:39:0d:31:f8:a1:f6:9c:0a:23:bf:e1:
2e:26:2f:9a:53:b8:c7:b1:c5:7b:a3:28:4d:23:d7:
a6:91:97:a0:20:23:94:4f:e9:3d:5e:a6:22:e2:ac:
de:0f:b3:e4:a5:4f:00:d0:3a:c1:74:a3:51:1a:a2:
13:85:cd:35:01:6b:7f:ee:d6:12:ed:9c:bf:e5:ae:
31:29:7a:9f:fd:5d:88:53:9e:35:96:98:07:9d:c6:
6f:7c:7f:ca:49:d6:80:2f:61:a2:ee:3f:24:8b:d5:
57:33:fc:6f:bf:2e:8b:24:9f:e3:1c:ed:98:29:f9:
87:fe:74:0d:77:78:95:62:a6:c8:34:b3:93:3f:25:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:17:57:39:B2:74:EF:FE:90:57:73:45:21:85:39:F9:33:51:D8:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B60A741ACC9311EF99869268762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.69.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f6:03:1f:60:82:b9:e9:e5:99:8d:10:f6:09:3d:da:57:84:
9d:17:c2:65:76:d5:d3:7e:24:cc:0d:8e:a3:49:3f:3d:b5:eb:
42:b4:8e:b0:49:15:6c:26:6d:ab:f4:00:31:49:96:4d:8c:c6:
ba:eb:9c:42:2f:a0:30:a0:12:73:8f:4e:26:51:b4:aa:70:67:
81:69:e9:62:f2:fa:0a:79:87:eb:6a:cd:50:37:56:df:30:21:
73:e3:4e:a7:be:31:7a:d4:22:10:a2:44:d3:29:41:02:7d:12:
7a:f0:2a:92:da:20:ac:f4:66:35:ae:f2:ef:bd:94:23:7a:a4:
7f:8f:39:5c:2c:2e:28:bf:b6:94:da:35:88:45:ec:a7:d9:13:
9d:4f:43:ac:11:dc:e9:20:62:6b:bb:81:69:23:6c:ae:47:60:
b0:6c:99:dd:0d:ce:48:58:85:23:17:f3:c1:d5:24:60:31:b8:
85:02:08:8b:6b:eb:4d:a8:05:69:9a:bf:ea:6f:d2:5d:9e:87:
6d:91:69:0b:0c:ac:69:9a:66:61:ec:28:eb:85:7f:90:bd:63:
1b:0b:90:1c:d1:93:ef:3c:9a:4c:d2:1f:f5:23:85:f5:b1:97:
ec:5e:9a:72:51:c5:f5:50:e7:7b:70:97:a0:32:00:1c:59:b5:
43:c7:1d:ef
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPkiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDEwNzAyWhcNMjcxMjEzMDEwNzAyWjAYMRYw
FAYDVQQDEw02NzdjN2UzYS1mZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3BdY8x049o6g7F3uaBcwYM1X3Rkv1J2+O75lNiK8nCeAIiOfGuptmVvk
9v0Oev6hNvvXE7LIMqsqVpTWqS8+fZyU53sO2QNaDCBfz50t0tnNlJU94pAQ39B0
MIpPRmZGqJUDuexgCkpC1ctQQCJTBEhhDtyP2B7n8iWbOQ0x+KH2nAojv+EuJi+a
U7jHscV7oyhNI9emkZegICOUT+k9XqYi4qzeD7PkpU8A0DrBdKNRGqIThc01AWt/
7tYS7Zy/5a4xKXqf/V2IU541lpgHncZvfH/KSdaAL2Gi7j8ki9VXM/xvvy6LJJ/j
HO2YKfmH/nQNd3iVYqbINLOTPyVCbwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCoX
VzmydO/+kFdzRSGFOfkzUdhrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNjBBNzQxQUNDOTMxMUVGOTk4NjkyNjg3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnONFMA0GCSqGSIb3DQEBCwUA
A4IBAQBn9gMfYIK56eWZjRD2CT3aV4SdF8JldtXTfiTMDY6jST89tetCtI6wSRVs
Jm2r9AAxSZZNjMa665xCL6AwoBJzj04mUbSqcGeBaeli8voKeYfras1QN1bfMCFz
406nvjF61CIQokTTKUECfRJ68CqS2iCs9GY1rvLvvZQjeqR/jzlcLC4ov7aU2jWI
Reyn2ROdT0OsEdzpIGJru4FpI2yuR2CwbJndDc5IWIUjF/PB1SRgMbiFAgiLa+tN
qAVpmr/qb9JdnodtkWkLDKxpmmZh7CjrhX+QvWMbC5Ac0ZPvPJpM0h/1I4X1sZfs
XppyUcX1UOd7cJegMgAcWbVDxx3v
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:00:33 2025 by rpki-client