Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/131090FA5EED11EF84559276762E951A.roa
File: 131090FA5EED11EF84559276762E951A.roa (raw, json)
Hash identifier: lsQCYVZVPXx+Fw3jYcMXP0ReSyGYHWmhElJdAiHoLmw=
Subject key identifier: 05:0E:D4:F0:B3:A0:21:B8:08:4B:6D:87:52:9B:26:E4:38:DB:45:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/131090FA5EED11EF84559276762E951A.roa
Signing time: Tue 20 Aug 2024 12:09:39 +0000
ROA not before: Tue 20 Aug 2024 12:09:27 +0000
ROA not after: Tue 27 May 2025 12:09:27 +0000
asID: 399077
IP address blocks: 156.251.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43436 (0xa9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:09:27 2024 GMT
Not After : May 27 12:09:27 2025 GMT
Subject: CN=66c48783-18ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:0f:35:43:b7:92:60:01:7d:43:76:84:cb:
b6:3c:8e:d6:93:84:c8:01:38:7e:23:3e:7b:09:ef:
51:99:43:fc:1c:97:86:ca:de:09:a5:8d:7e:e5:88:
49:8c:dd:e0:38:82:b4:f4:0d:4f:b4:e2:8d:76:1f:
14:a8:c1:4e:66:09:48:93:5c:4b:ec:6b:83:8e:27:
68:04:14:cc:01:bf:3e:a0:58:87:34:ab:3d:3f:81:
9e:57:be:50:d2:8a:f7:85:02:2e:1d:58:12:5f:56:
aa:1e:f8:af:7e:d9:ee:56:99:fd:51:f7:20:74:d3:
03:96:ad:45:66:4c:2e:c1:d3:17:ef:d2:58:ca:00:
44:21:86:22:d8:b5:e2:b8:72:3e:80:48:ef:e3:4a:
04:84:ae:c1:05:b1:47:4e:12:76:bc:64:2f:c3:38:
0a:90:18:65:a3:86:d8:2f:12:ef:85:56:0c:32:ed:
cb:eb:bc:03:51:96:de:5d:f5:2a:d4:ef:6e:65:9f:
c2:46:d2:6a:0e:a7:ad:ed:e8:84:f7:a6:9c:fb:45:
e3:42:8d:c2:23:79:48:a0:b5:54:a2:7a:a5:02:6d:
0a:78:99:03:8c:f2:7b:76:0f:57:2a:f9:1e:a3:c4:
bf:df:4e:ab:f5:65:9e:c1:ca:6a:0a:b0:0f:1a:ae:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0E:D4:F0:B3:A0:21:B8:08:4B:6D:87:52:9B:26:E4:38:DB:45:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/131090FA5EED11EF84559276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5c:49:40:6c:fc:9d:0d:86:76:eb:05:5e:23:3f:5c:81:fc:
63:9d:e1:27:d1:26:cb:66:00:32:95:7a:f9:ee:50:88:94:74:
fc:c5:50:1e:c0:07:f7:f0:91:6d:9d:f4:2f:55:d3:cb:c2:f8:
6c:04:50:64:92:0b:d0:d6:be:d2:50:cc:bb:37:4f:c0:28:a9:
bc:76:3f:3a:ca:18:7f:4d:c3:a0:44:fa:57:b8:bc:cb:e5:10:
6e:6e:39:b7:4c:02:5b:ba:cb:82:67:d0:21:93:78:4d:b7:52:
13:ec:b4:e0:9a:59:24:01:7b:84:80:0e:ef:eb:2a:b5:07:c6:
c9:d0:3d:86:22:28:c1:53:5c:26:f6:ae:92:4b:9c:7b:b5:c2:
05:df:46:0f:28:0e:2c:da:7e:32:0c:f2:6b:a9:48:1f:24:cc:
02:0c:b6:c9:bc:ab:4a:be:03:8f:52:23:eb:2b:49:92:b6:b1:
8a:f9:fa:19:e9:7d:b3:6b:77:03:28:a4:41:7b:59:1e:47:af:
ad:9a:cc:03:79:b5:70:f7:0f:34:29:a8:d6:6b:f1:35:97:7f:
ed:6e:45:bc:c9:d7:49:ff:92:6a:2c:61:70:72:5f:16:04:47:
ca:fb:17:ef:35:1d:58:e9:45:b7:0c:f7:3e:a9:aa:a2:2c:fb:
a5:a6:5c:4b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKmsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTIwOTI3WhcNMjUwNTI3MTIwOTI3WjAYMRYw
FAYDVQQDEw02NmM0ODc4My0xOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArjYPNUO3kmABfUN2hMu2PI7Wk4TIATh+Iz57Ce9RmUP8HJeGyt4JpY1+
5YhJjN3gOIK09A1PtOKNdh8UqMFOZglIk1xL7GuDjidoBBTMAb8+oFiHNKs9P4Ge
V75Q0or3hQIuHVgSX1aqHvivftnuVpn9UfcgdNMDlq1FZkwuwdMX79JYygBEIYYi
2LXiuHI+gEjv40oEhK7BBbFHThJ2vGQvwzgKkBhlo4bYLxLvhVYMMu3L67wDUZbe
XfUq1O9uZZ/CRtJqDqet7eiE96ac+0XjQo3CI3lIoLVUonqlAm0KeJkDjPJ7dg9X
Kvkeo8S/306r9WWewcpqCrAPGq63XQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAUO
1PCzoCG4CEtth1KbJuQ420VUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMzEwOTBGQTVFRUQxMUVGODQ1NTkyNzY3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPs8MA0GCSqGSIb3DQEBCwUA
A4IBAQBXXElAbPydDYZ26wVeIz9cgfxjneEn0SbLZgAylXr57lCIlHT8xVAewAf3
8JFtnfQvVdPLwvhsBFBkkgvQ1r7SUMy7N0/AKKm8dj86yhh/TcOgRPpXuLzL5RBu
bjm3TAJbusuCZ9Ahk3hNt1IT7LTgmlkkAXuEgA7v6yq1B8bJ0D2GIijBU1wm9q6S
S5x7tcIF30YPKA4s2n4yDPJrqUgfJMwCDLbJvKtKvgOPUiPrK0mStrGK+foZ6X2z
a3cDKKRBe1keR6+tmswDebVw9w80KajWa/E1l3/tbkW8yddJ/5JqLGFwcl8WBEfK
+xfvNR1Y6UW3DPc+qaqiLPulplxL
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org