Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032A51F65EEF11EF8DB55584762E951A.roa
File: 032A51F65EEF11EF8DB55584762E951A.roa (raw, json)
Hash identifier: L8Qq+e3j8b0T1Bcof+m3Wpyo2+TWENHKvYUGGX6gBqM=
Subject key identifier: CF:51:E6:39:4A:64:C7:E3:2F:F0:1D:E1:F7:2F:5F:9D:9A:54:A2:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032A51F65EEF11EF8DB55584762E951A.roa
Signing time: Tue 20 Aug 2024 12:23:32 +0000
ROA not before: Tue 20 Aug 2024 12:23:15 +0000
ROA not after: Tue 27 May 2025 12:23:15 +0000
asID: 399077
IP address blocks: 156.251.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43460 (0xa9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:23:15 2024 GMT
Not After : May 27 12:23:15 2025 GMT
Subject: CN=66c48ac4-08ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:c2:90:5c:9f:84:d8:08:de:b7:2a:fc:83:
d7:4f:93:f3:7b:f5:0b:6e:32:21:8c:48:bf:92:b4:
52:92:4c:b4:95:63:2d:c7:4a:4c:ac:b6:6c:50:2a:
ff:ba:fd:a1:f1:70:01:a0:95:c9:9c:0b:73:5a:9e:
6f:ab:5b:2a:e1:38:54:18:3d:a2:a8:65:5e:f1:93:
8a:ac:2e:1b:ce:6d:89:c5:a2:24:08:12:45:e2:56:
e8:b7:a6:6d:d4:88:cf:1c:48:63:8f:a8:e8:05:68:
83:46:df:bb:6b:1c:36:83:17:98:22:02:4e:2e:23:
a9:02:c7:b7:f9:60:ff:06:c6:22:76:a0:5e:f2:a3:
ff:29:58:c5:f0:ee:83:1c:14:69:27:98:c8:3e:bf:
6d:64:17:8f:10:a1:f7:61:61:8f:4a:d8:3e:2f:b7:
9c:16:65:5a:b6:ef:a8:ff:8d:0d:81:fc:5d:53:bb:
17:60:5a:20:15:b5:8b:ec:97:f1:6e:5b:06:33:79:
66:83:2c:44:52:94:53:8b:fa:8b:d3:04:cf:d6:59:
48:36:56:30:db:89:3b:fc:f7:0d:4a:da:14:19:e3:
3b:ca:3c:63:76:f1:1b:26:fb:25:78:8b:81:79:84:
6c:2b:45:3f:70:be:bd:fd:68:f8:1d:e9:9d:2d:c5:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:E6:39:4A:64:C7:E3:2F:F0:1D:E1:F7:2F:5F:9D:9A:54:A2:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032A51F65EEF11EF8DB55584762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.45.0/24
Signature Algorithm: sha256WithRSAEncryption
86:66:a7:9d:11:3e:06:42:0d:25:2e:8a:a4:57:65:a1:0a:93:
a4:6d:9c:00:76:0d:e3:00:3f:43:fa:77:21:cf:46:2f:23:99:
ee:5d:81:cd:20:6b:33:aa:e2:d4:ed:a2:1d:ce:e8:e5:a5:e2:
85:85:4c:6b:c4:a0:50:8b:8b:d5:e2:15:47:03:b8:88:07:89:
cc:03:94:04:0c:ca:83:42:ff:4e:51:8d:6f:70:e8:07:7b:ca:
79:95:85:0d:c8:15:42:c2:47:b2:4a:c6:fc:65:13:03:e3:88:
ab:92:ab:bb:d2:e3:e5:00:4b:ef:cb:61:d8:17:8c:31:54:9c:
e6:a8:36:dc:f2:ee:cd:9a:78:b7:95:5f:24:5e:83:c9:0a:69:
74:d2:10:df:9f:84:8d:c3:5b:68:a9:79:0e:ba:d1:ad:f7:84:
1f:c2:48:48:16:24:c8:fa:73:84:d0:de:7b:f7:98:85:38:e8:
88:bd:46:bc:ff:83:8b:d5:5e:b4:9b:8f:6e:47:30:3d:6b:f0:
75:08:c5:db:29:5a:73:3e:45:e1:d9:31:d0:c2:dd:3d:21:ee:
88:2b:c7:3c:03:08:00:4b:69:d9:8e:1d:e7:cf:db:24:ef:04:
29:87:b8:23:9e:60:30:6a:be:d1:03:f8:88:e2:f0:12:9b:54:
44:78:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org