Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/6B46698EEEEE11EF911C519D762E951A.roa
File: 6B46698EEEEE11EF911C519D762E951A.roa (raw, json)
Hash identifier: Tu4GUApjh+qdeFTI+yn4KBIGDwp03a2AGvdYk9j0K9w=
Subject key identifier: 2A:7A:9A:2A:CE:8E:EB:AA:D4:9C:96:E0:64:F6:D8:85:20:2C:DA:C6
Certificate issuer: /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial: 68
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/6B46698EEEEE11EF911C519D762E951A.roa
Signing time: Wed 19 Feb 2025 18:22:04 +0000
ROA not before: Wed 19 Feb 2025 18:22:00 +0000
ROA not after: Tue 28 Feb 2045 18:22:00 +0000
asID: 328404
IP address blocks: 160.119.84.0/24 maxlen: 24
160.119.85.0/24 maxlen: 24
160.119.86.0/24 maxlen: 24
160.119.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Validity
Not Before: Feb 19 18:22:00 2025 GMT
Not After : Feb 28 18:22:00 2045 GMT
Subject: CN=67b6214c-3e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:dc:e1:d7:a2:bd:f9:58:81:7b:94:61:7d:
01:d6:4c:76:2b:b5:7c:02:65:08:a1:fa:89:ff:4f:
e0:7a:17:6f:4a:10:9a:6e:e6:2c:3e:00:8d:83:a1:
13:ee:7c:be:32:d9:dc:d9:b1:df:68:98:75:c0:81:
24:ee:6b:23:0f:07:3d:1a:57:e2:e3:c8:e2:7c:1d:
21:b6:2c:be:a5:0f:59:51:f6:13:91:74:6d:f1:ff:
0f:b4:00:36:12:9a:b9:5c:95:4d:39:ca:20:a5:68:
99:16:8e:a0:ee:e7:33:ec:b0:8c:ed:fa:74:8f:31:
22:fd:96:6a:fa:2a:14:8a:eb:06:12:76:23:36:f5:
91:cb:40:72:04:74:26:be:ae:bb:5a:61:ba:45:ab:
2d:13:1f:10:89:b8:19:d3:b5:ba:13:94:83:bd:57:
24:9c:ff:cc:73:8a:4f:cc:45:cc:16:e9:05:18:2d:
32:a2:ea:fe:f5:b6:59:b1:8b:3b:f0:ba:6e:bf:7d:
78:aa:34:83:7e:0a:dc:34:15:10:4b:36:80:f8:ab:
1e:31:f0:bb:c1:6e:56:a2:60:0d:1d:9d:0e:87:01:
c7:34:0b:7e:86:fe:a5:7c:3b:30:dd:9a:d9:89:3b:
90:bb:71:29:a5:99:dc:95:ac:6a:ff:e4:ad:75:9c:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:9A:2A:CE:8E:EB:AA:D4:9C:96:E0:64:F6:D8:85:20:2C:DA:C6
X509v3 Authority Key Identifier:
keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/6B46698EEEEE11EF911C519D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:0a:9b:0d:0a:16:6b:a7:f3:88:3b:d5:75:11:18:81:7f:ac:
da:2f:03:69:d9:6a:e1:e2:0a:3b:02:a6:d9:0a:91:be:97:78:
d5:e8:b5:ef:78:ba:5e:75:fa:5d:c0:31:8d:6a:72:97:33:7e:
ff:a2:65:91:29:a5:a5:ac:e0:08:9a:cd:5a:cf:c2:e6:23:45:
9b:67:3f:54:e6:6c:36:25:28:cc:ad:c3:1c:41:ec:0b:f5:59:
1a:fa:41:5b:68:87:dd:b6:4d:6a:8c:91:db:bd:74:4c:1a:97:
4a:f6:4f:e6:97:2f:94:87:f9:9f:b0:a6:86:30:30:9f:9c:15:
65:1c:64:e9:4d:7d:81:b8:61:a7:a2:c3:fa:07:f5:2d:f8:77:
5d:cd:bb:40:52:bc:bd:69:5e:99:e4:c3:a1:69:49:07:1d:6a:
81:f0:3a:37:6b:04:c2:22:ec:1c:ee:75:91:bf:07:77:bc:9c:
99:33:5f:f4:af:28:4f:35:c9:57:e2:64:02:52:a9:2a:90:f1:
31:f9:a1:5e:17:fa:73:7c:69:d5:9d:ea:ed:53:80:ad:e8:5a:
3b:95:9b:bb:c4:7e:2e:67:30:9e:18:04:a8:64:5e:1f:23:e5:
ad:2c:2d:b3:2f:9c:57:dd:d0:65:93:bc:80:9c:84:c6:4d:33:
84:6a:56:9e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBaDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
MEM1MUFSMTEwLwYDVQQFEygxRDY3MzhEM0JGQzYxMUQ4N0RGMERFNzQwM0QyNURB
MEY2NEVCMUUwMB4XDTI1MDIxOTE4MjIwMFoXDTQ1MDIyODE4MjIwMFowGDEWMBQG
A1UEAxMNNjdiNjIxNGMtM2U0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKCv3OHXor35WIF7lGF9AdZMdiu1fAJlCKH6if9P4HoXb0oQmm7mLD4AjYOh
E+58vjLZ3Nmx32iYdcCBJO5rIw8HPRpX4uPI4nwdIbYsvqUPWVH2E5F0bfH/D7QA
NhKauVyVTTnKIKVomRaOoO7nM+ywjO36dI8xIv2WavoqFIrrBhJ2Izb1kctAcgR0
Jr6uu1phukWrLRMfEIm4GdO1uhOUg71XJJz/zHOKT8xFzBbpBRgtMqLq/vW2WbGL
O/C6br99eKo0g34K3DQVEEs2gPirHjHwu8FuVqJgDR2dDocBxzQLfob+pXw7MN2a
2Yk7kLtxKaWZ3JWsav/krXWcZZECAwEAAaOCAqIwggKeMB0GA1UdDgQWBBQqepoq
zo7rqtScluBk9tiFICzaxjAfBgNVHSMEGDAWgBQdZzjTv8YR2H3w3nQD0l2g9k6x
4DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTBDNTEvQzc0MkYzODZBNjdGMTFFRkJBNTQ2MDgyNzYyRTk1MUEvSFdjNDA3
X0dFZGg5OE41MEE5SmRvUFpPc2VBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SFdjNDA3X0dFZGg5OE41MEE5SmRvUFpPc2VBLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTBDNTEvQzc0MkYzODZBNjdGMTFFRkJBNTQ2MDgyNzYyRTk1
MUEvNkI0NjY5OEVFRUVFMTFFRjkxMUM1MTlENzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqB3VDANBgkqhkiG9w0BAQsFAAOC
AQEAsAqbDQoWa6fziDvVdREYgX+s2i8Dadlq4eIKOwKm2QqRvpd41ei173i6XnX6
XcAxjWpylzN+/6JlkSmlpazgCJrNWs/C5iNFm2c/VOZsNiUozK3DHEHsC/VZGvpB
W2iH3bZNaoyR2710TBqXSvZP5pcvlIf5n7CmhjAwn5wVZRxk6U19gbhhp6LD+gf1
Lfh3Xc27QFK8vWlemeTDoWlJBx1qgfA6N2sEwiLsHO51kb8Hd7ycmTNf9K8oTzXJ
V+JkAlKpKpDxMfmhXhf6c3xp1Z3q7VOArehaO5Wbu8R+LmcwnhgEqGReHyPlrSwt
sy+cV93QZZO8gJyExk0zhGpWng==
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net