Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F8ECBE5EF211EFABBC3F97762E951A.roa
File: 00F8ECBE5EF211EFABBC3F97762E951A.roa (raw, json)
Hash identifier: bdrWwvmuk1tiHVH5MoIZAFOptJFRHW1r5PNmuTBrBP4=
Subject key identifier: 97:39:4A:A3:28:B2:23:E9:10:A1:3F:14:14:7E:B5:F3:AE:B2:22:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F8ECBE5EF211EFABBC3F97762E951A.roa
Signing time: Tue 20 Aug 2024 12:44:56 +0000
ROA not before: Tue 20 Aug 2024 12:44:53 +0000
ROA not after: Tue 27 May 2025 12:44:53 +0000
asID: 399077
IP address blocks: 156.251.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43500 (0xa9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:44:53 2024 GMT
Not After : May 27 12:44:53 2025 GMT
Subject: CN=66c48fc8-6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:3d:f9:fc:0a:c3:27:6e:12:0a:b5:df:30:
ce:dc:c4:4f:12:20:a3:49:a7:73:82:44:04:5a:9c:
71:3a:6c:75:84:6b:f5:aa:31:8d:ca:6e:41:c4:40:
46:4e:a0:97:23:3d:09:da:0a:f7:8b:45:d5:b6:d9:
1f:c5:4e:29:33:ca:79:59:49:c4:d8:91:1f:a2:b6:
fa:ce:9f:e7:e0:f9:80:77:1a:af:68:ad:d5:59:64:
9b:10:f7:11:1f:ee:6b:13:c9:d9:8c:74:d3:bc:05:
18:58:8a:f3:4d:e4:81:00:84:3d:88:2d:9c:7f:82:
ed:2b:7f:f9:3f:a3:2e:79:e6:7a:80:d8:4a:52:94:
ed:16:87:3c:5b:5a:ca:20:07:85:fd:16:f1:9e:e8:
74:21:4f:90:55:1c:f7:15:e3:c1:4e:92:26:fe:cf:
e3:29:96:4d:28:61:cd:81:c6:f3:ee:4a:64:e1:a9:
1d:02:a7:bc:f8:ea:c9:15:30:55:51:31:0f:08:03:
99:ff:eb:3e:8c:68:45:29:c0:00:b1:4a:c7:bf:9a:
77:34:26:32:68:df:ad:3f:5c:42:85:07:3d:e5:9c:
36:4c:19:38:9f:6a:3f:85:0d:dd:69:56:a9:ff:0c:
d6:13:1e:42:ef:c0:82:c6:bf:2a:e6:7f:e3:41:5a:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:4A:A3:28:B2:23:E9:10:A1:3F:14:14:7E:B5:F3:AE:B2:22:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F8ECBE5EF211EFABBC3F97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.25.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d3:35:dd:29:ea:ce:48:13:c7:9f:ff:ef:b8:f9:07:40:67:
f3:8a:f6:fd:59:b1:a1:00:1d:7f:08:32:f5:43:fe:b0:9e:a9:
21:2b:ea:a8:2b:7d:f5:85:eb:38:10:70:bd:bd:44:be:0d:24:
f8:c5:fc:ba:7b:5d:92:12:62:f8:c6:79:cc:d8:fe:fc:3a:b9:
de:72:08:f0:e2:47:af:9d:e3:86:ad:6c:ea:90:5a:e9:f5:ce:
9f:04:42:f3:ee:6c:a3:b1:05:ca:4f:ec:29:08:c5:69:6d:ba:
46:58:54:c6:7c:b0:83:dc:8e:74:dd:e3:72:0f:99:8e:48:ea:
a0:b7:78:d1:84:8b:ee:f3:81:ec:15:2d:a1:4c:dd:c0:62:72:
52:38:77:e1:f0:aa:bb:48:61:c3:b7:e4:d6:3d:15:85:6f:9b:
a3:85:51:c1:8c:f7:ee:25:39:cf:a1:9a:4e:72:45:b0:9a:e4:
2d:de:ad:33:0e:a4:cf:08:61:06:46:ac:34:3d:85:b8:21:b0:
21:65:93:3f:4b:31:7d:46:19:ba:ab:f2:0c:e3:73:e4:a6:00:
11:77:d6:f9:ba:43:04:43:63:c6:f9:2a:59:95:28:8f:ff:0f:
05:7b:b0:b4:cd:96:46:42:0b:a9:bd:3f:1c:a0:e3:42:d4:6a:
07:79:28:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKnsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTI0NDUzWhcNMjUwNTI3MTI0NDUzWjAYMRYw
FAYDVQQDEw02NmM0OGZjOC02YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsw09+fwKwyduEgq13zDO3MRPEiCjSadzgkQEWpxxOmx1hGv1qjGNym5B
xEBGTqCXIz0J2gr3i0XVttkfxU4pM8p5WUnE2JEforb6zp/n4PmAdxqvaK3VWWSb
EPcRH+5rE8nZjHTTvAUYWIrzTeSBAIQ9iC2cf4LtK3/5P6MueeZ6gNhKUpTtFoc8
W1rKIAeF/Rbxnuh0IU+QVRz3FePBTpIm/s/jKZZNKGHNgcbz7kpk4akdAqe8+OrJ
FTBVUTEPCAOZ/+s+jGhFKcAAsUrHv5p3NCYyaN+tP1xChQc95Zw2TBk4n2o/hQ3d
aVap/wzWEx5C78CCxr8q5n/jQVqxkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJc5
SqMosiPpEKE/FBR+tfOusiJpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMEY4RUNCRTVFRjIxMUVGQUJCQzNGOTc3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPsZMA0GCSqGSIb3DQEBCwUA
A4IBAQA50zXdKerOSBPHn//vuPkHQGfzivb9WbGhAB1/CDL1Q/6wnqkhK+qoK331
hes4EHC9vUS+DST4xfy6e12SEmL4xnnM2P78Ornecgjw4kevneOGrWzqkFrp9c6f
BELz7myjsQXKT+wpCMVpbbpGWFTGfLCD3I503eNyD5mOSOqgt3jRhIvu84HsFS2h
TN3AYnJSOHfh8Kq7SGHDt+TWPRWFb5ujhVHBjPfuJTnPoZpOckWwmuQt3q0zDqTP
CGEGRqw0PYW4IbAhZZM/SzF9Rhm6q/IM43PkpgARd9b5ukMEQ2PG+SpZlSiP/w8F
e7C0zZZGQgupvT8coONC1GoHeSie
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org