Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03049D0E5DCC11EF9720D579762E951A.roa
File: 03049D0E5DCC11EF9720D579762E951A.roa (raw, json)
Hash identifier: CQ3OJO23lZDAWvZO4t09jtL6nK70hKzo13odcXsV0Zo=
Subject key identifier: 30:B2:B6:F2:4E:62:02:58:86:7E:B8:D1:5A:FB:F6:61:C2:65:FC:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A853
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03049D0E5DCC11EF9720D579762E951A.roa
Signing time: Mon 19 Aug 2024 01:40:28 +0000
ROA not before: Mon 19 Aug 2024 01:40:24 +0000
ROA not after: Thu 31 Dec 2026 01:40:24 +0000
asID: 17561
IP address blocks: 156.253.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43091 (0xa853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 01:40:24 2024 GMT
Not After : Dec 31 01:40:24 2026 GMT
Subject: CN=66c2a28c-3205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d6:36:8e:d3:05:6c:9e:73:dc:5d:08:65:24:
06:86:a7:2e:00:0c:18:6b:0f:53:d5:a3:02:b3:68:
19:2c:b7:ee:d8:8b:9a:e6:9d:42:95:c5:ed:49:2b:
02:f6:06:80:e4:46:ad:30:12:c1:22:57:e4:ad:37:
16:da:b7:44:15:6d:19:eb:11:cf:aa:fb:7b:ea:21:
22:52:ec:6f:43:9f:97:dd:ee:ea:bf:7d:11:7e:22:
f5:f8:fe:b3:7b:e0:a5:10:0d:13:35:0d:11:be:02:
9e:ec:f2:67:de:2b:c6:1a:11:2a:af:a5:da:ce:ea:
44:7d:3c:0f:dd:82:b6:bd:e7:37:5c:64:83:39:cf:
81:e4:06:73:b5:41:76:10:63:13:bc:5f:53:81:37:
0e:00:aa:d4:0e:21:4b:50:38:2d:37:50:ec:da:ce:
62:c3:81:65:ec:5a:36:e6:92:7f:f9:54:03:e6:c7:
34:86:62:a6:e6:53:60:41:b0:ae:a8:26:d7:14:44:
c3:7b:10:de:67:93:34:d5:33:ba:a8:b1:29:cb:fb:
3d:a4:b8:21:36:04:bd:63:39:04:74:aa:a7:f2:e9:
bf:e3:4c:c5:b8:f3:11:67:be:29:05:91:a0:34:03:
51:56:b6:26:cf:42:68:d7:0d:b1:71:90:4c:87:92:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:B6:F2:4E:62:02:58:86:7E:B8:D1:5A:FB:F6:61:C2:65:FC:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03049D0E5DCC11EF9720D579762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e8:8b:d6:6e:64:72:4c:7e:ee:31:26:65:cb:a1:14:4e:d6:
ed:f6:78:be:f6:40:85:b5:d6:51:31:51:93:ee:38:df:d9:a5:
a4:e4:11:74:b7:fa:eb:97:3c:2e:89:7b:10:95:4d:d5:41:5a:
46:92:46:4b:71:49:95:f4:5e:b0:dc:17:28:a6:70:8d:46:9a:
d7:a8:4d:03:d7:82:c3:1e:bd:cb:a5:20:e9:4f:d3:31:01:f3:
d6:56:38:71:74:a5:39:c9:1e:d1:4e:27:c6:de:70:02:77:4a:
ab:6f:38:a3:f4:35:e1:62:3a:6e:7a:e6:f7:b7:08:68:e8:c1:
67:7a:fa:e0:a8:e5:7b:a2:61:30:f4:b4:cf:04:13:ba:cf:a3:
e8:4a:e6:9f:93:5b:41:93:bb:48:4d:39:02:1f:8b:ee:2e:36:
23:ee:b5:93:98:19:9a:b6:cd:9f:8b:40:9d:f8:67:a6:91:8c:
85:23:97:12:f2:7a:ec:dc:33:9d:59:5f:29:de:5c:98:41:7f:
9e:bf:0b:67:0b:a4:7e:dd:a0:dc:fa:70:c2:26:c1:f8:0e:76:
65:17:e5:b3:fc:e7:ea:92:8a:8b:8e:a2:48:43:fe:13:3c:dc:
49:25:d3:6a:28:25:84:34:ab:ce:5a:a8:fa:85:9a:08:96:99:
29:52:1a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:16 2024 by rpki-client on console-fra.rpki-client.org