Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7146AD0B5F911EF80807B89762E951A.roa
File: E7146AD0B5F911EF80807B89762E951A.roa (raw, json)
Hash identifier: pNg7uRhFnV5NPKmOoY1Hkv2pRZV7LaSTuuIDyXer4rc=
Subject key identifier: 12:CD:6A:8C:6F:66:25:D0:E1:8A:93:C7:F2:CF:56:63:65:2E:61:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E142
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7146AD0B5F911EF80807B89762E951A.roa
Signing time: Mon 09 Dec 2024 06:50:40 +0000
ROA not before: Mon 09 Dec 2024 06:50:36 +0000
ROA not after: Thu 06 Feb 2025 06:50:36 +0000
asID: 149014
IP address blocks: 156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Feb 2025 06:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57666 (0xe142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 9 06:50:36 2024 GMT
Not After : Feb 6 06:50:36 2025 GMT
Subject: CN=67569340-f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:4c:57:d3:e6:8e:3d:4a:03:57:59:cb:d6:
7b:e8:bb:32:80:64:98:8c:b7:43:40:58:f2:22:ec:
85:a3:9f:57:39:58:5f:0f:07:03:a4:43:cd:b9:31:
37:23:b3:45:33:7e:ab:c1:7a:85:f5:a1:1b:0d:77:
0c:33:b3:fb:da:16:4b:ac:f3:b5:96:da:46:fe:72:
30:6f:9c:5b:89:ec:20:17:2b:4c:1c:e0:1f:ca:2a:
44:08:97:77:73:b8:e1:71:61:0b:f2:d4:5a:dc:ef:
1a:47:2b:58:8f:ce:f4:87:18:76:1b:46:36:6a:ed:
c8:86:cf:79:a8:b5:20:12:6d:7f:b3:ce:8b:6a:ae:
4f:d2:ca:83:4c:60:db:f2:98:53:e2:1b:88:84:7b:
75:57:3d:60:fb:e8:05:c3:c0:ae:81:89:e7:fe:ce:
e9:aa:69:3d:e3:90:42:2f:f1:8d:fb:a1:df:66:f6:
4d:e9:4d:eb:64:59:7b:ca:ff:f8:04:6f:62:bb:19:
7b:09:74:29:32:8c:1e:e0:9e:22:7e:5e:08:03:7e:
25:26:cc:f3:e0:42:ea:98:07:7f:94:e0:b6:50:42:
a6:bd:a9:b0:77:63:30:c1:28:58:64:6c:1b:c8:d3:
a5:a7:4b:74:d3:33:8f:20:c0:29:fb:0d:c8:5d:a4:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CD:6A:8C:6F:66:25:D0:E1:8A:93:C7:F2:CF:56:63:65:2E:61:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7146AD0B5F911EF80807B89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:34:9e:24:dd:aa:48:cf:3b:be:36:b0:1b:30:12:0c:d8:3b:
35:f1:fa:4d:2d:67:4b:9e:da:cd:09:d3:5e:9c:5f:3e:e1:69:
10:9a:2f:a3:14:36:c8:7f:3c:7d:5a:1b:f6:dd:2f:f3:b5:59:
e5:39:df:b3:1e:fd:a0:2e:f7:06:4a:71:c9:e3:ed:7b:54:c6:
0f:b4:87:68:0e:96:8b:92:6d:70:ba:9c:3e:e9:14:ed:96:a0:
9c:ac:de:21:bb:aa:c9:3b:fd:69:8c:e2:99:85:39:73:38:06:
8c:3f:9a:c9:12:c4:22:56:27:06:33:3d:74:34:7e:95:69:6b:
47:c9:14:b2:ff:2b:0c:ef:63:d0:da:97:06:47:6c:6a:8b:7a:
fb:49:46:30:f4:84:cd:53:96:ed:e1:31:0c:0d:e7:7f:a9:dc:
01:0e:20:1a:68:b2:a7:1e:83:d5:10:f5:37:0c:56:b5:52:d8:
f2:27:a2:68:64:c8:26:fe:bf:a0:ca:f6:0f:03:46:83:86:7d:
e7:32:59:7d:3b:ea:65:6c:73:84:57:e6:cf:aa:23:5e:54:dd:
8b:68:d6:06:04:b4:8e:d4:67:35:4e:5e:c7:4d:ad:4f:93:4e:
87:9d:34:15:85:5b:f4:0e:4e:ed:74:95:c3:4f:49:15:f7:a9:
17:fd:f9:71
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAOFCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMjA5MDY1MDM2WhcNMjUwMjA2MDY1MDM2WjAYMRYw
FAYDVQQDEw02NzU2OTM0MC1mMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzFlMV9Pmjj1KA1dZy9Z76LsygGSYjLdDQFjyIuyFo59XOVhfDwcDpEPN
uTE3I7NFM36rwXqF9aEbDXcMM7P72hZLrPO1ltpG/nIwb5xbiewgFytMHOAfyipE
CJd3c7jhcWEL8tRa3O8aRytYj870hxh2G0Y2au3Ihs95qLUgEm1/s86Laq5P0sqD
TGDb8phT4huIhHt1Vz1g++gFw8CugYnn/s7pqmk945BCL/GN+6HfZvZN6U3rZFl7
yv/4BG9iuxl7CXQpMowe4J4ifl4IA34lJszz4ELqmAd/lOC2UEKmvamwd2MwwShY
ZGwbyNOlp0t00zOPIMAp+w3IXaS8HwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBLN
aoxvZiXQ4YqTx/LPVmNlLmGVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNzE0NkFEMEI1RjkxMUVGODA4MDdCODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOx8MA0GCSqGSIb3DQEBCwUA
A4IBAQBvNJ4k3apIzzu+NrAbMBIM2Ds18fpNLWdLntrNCdNenF8+4WkQmi+jFDbI
fzx9Whv23S/ztVnlOd+zHv2gLvcGSnHJ4+17VMYPtIdoDpaLkm1wupw+6RTtlqCc
rN4hu6rJO/1pjOKZhTlzOAaMP5rJEsQiVicGMz10NH6VaWtHyRSy/ysM72PQ2pcG
R2xqi3r7SUYw9ITNU5bt4TEMDed/qdwBDiAaaLKnHoPVEPU3DFa1UtjyJ6JoZMgm
/r+gyvYPA0aDhn3nMll9O+plbHOEV+bPqiNeVN2LaNYGBLSO1Gc1Tl7HTa1Pk06H
nTQVhVv0Dk7tdJXDT0kV96kX/flx
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:56 2025 by rpki-client