Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DEED4026A6711EF84C3DA81762E951A.roa
File: 1DEED4026A6711EF84C3DA81762E951A.roa (raw, json)
Hash identifier: u3rXW14mZN6m2trXIfS3y9dX4zqfBXiz6T4vF/UxvKc=
Subject key identifier: E3:D8:9B:9B:BC:83:BE:E7:ED:C6:41:3E:15:B5:13:CD:5A:E9:94:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B18F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DEED4026A6711EF84C3DA81762E951A.roa
Signing time: Wed 04 Sep 2024 02:40:59 +0000
ROA not before: Wed 04 Sep 2024 02:40:45 +0000
ROA not after: Mon 30 Dec 2024 02:40:45 +0000
asID: 17561
IP address blocks: 156.236.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45455 (0xb18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 02:40:45 2024 GMT
Not After : Dec 30 02:40:45 2024 GMT
Subject: CN=66d7c8bb-251a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:ad:a8:9e:0f:5e:33:2c:ea:de:59:d7:db:
3c:b3:05:42:45:9a:99:7c:c7:f6:96:9e:52:ea:da:
3f:f6:b3:67:1e:f5:08:15:56:bd:e8:ce:7b:fa:f3:
fc:71:45:1b:6a:bb:54:b9:db:cb:29:13:27:ef:c6:
de:fb:00:6c:51:f5:d0:38:e9:b0:3c:d3:9c:1a:ae:
f4:1f:32:aa:99:95:11:9b:02:4a:5d:ac:a4:56:6a:
15:28:ca:8f:26:71:0c:51:98:70:b4:21:33:ca:32:
c1:e7:f0:79:b7:fe:dd:fd:e4:19:ed:b5:10:19:df:
1d:d9:65:d6:0f:c3:e8:5d:b0:85:39:4d:1b:37:7d:
32:e1:b9:ec:5e:16:07:59:71:1e:8c:c7:2a:a7:03:
0e:d6:cf:02:ee:4c:de:bc:0f:f7:46:11:29:1a:29:
7b:91:1a:4d:bc:b3:85:24:c7:57:14:b9:f1:22:b2:
fe:15:56:bd:bd:29:0d:a4:a9:b4:8e:b9:6d:6e:ca:
b1:de:38:2a:2e:ad:1a:61:dd:0e:7b:2f:0f:11:69:
29:10:95:62:fe:e1:1b:1e:c5:ed:61:de:b1:2c:7e:
24:77:b9:7c:c1:e4:6f:53:ec:b1:b6:fc:c3:11:71:
f4:05:3b:2e:79:e4:a4:fa:db:7e:1d:37:4d:ae:5f:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D8:9B:9B:BC:83:BE:E7:ED:C6:41:3E:15:B5:13:CD:5A:E9:94:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DEED4026A6711EF84C3DA81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.87.0/24
Signature Algorithm: sha256WithRSAEncryption
27:aa:3a:6c:97:5f:87:cb:3d:dd:6f:80:c3:8c:3e:59:d9:64:
61:fa:a9:80:b4:39:e2:ef:0a:f0:cf:96:06:41:ff:f3:21:a2:
be:b6:47:82:d2:d0:65:8f:d6:4d:81:6f:e4:ba:f0:ab:a2:d9:
38:11:19:1a:93:ac:d7:9e:73:1a:2d:5f:ae:f9:68:57:de:68:
10:34:71:83:5e:e9:54:8d:cc:b1:bb:5d:63:d3:36:ef:16:50:
61:6f:df:24:2c:71:f0:8c:44:dd:5f:c6:2a:d9:31:5b:68:c9:
67:cb:fd:ed:89:08:a3:1e:71:2a:22:45:bf:31:ff:5f:eb:26:
d9:cb:a2:10:18:bf:c6:83:2e:cf:44:ca:01:fc:e2:34:59:46:
a0:7d:af:71:1a:cb:b6:c0:6e:26:d2:44:ae:a2:4d:7e:56:99:
8d:26:37:6a:32:d8:73:2e:4d:9e:2e:b7:6f:28:89:df:d0:3e:
87:24:6a:04:b7:d4:77:46:a3:56:16:07:d8:dc:c2:ad:00:a1:
46:ad:e4:5c:62:0a:f8:80:25:3a:91:2d:bd:fb:f7:c4:44:34:
63:ad:ad:b2:f6:3c:53:2f:23:08:3e:55:74:54:62:10:5b:62:
d9:9e:62:cb:05:10:e5:80:a9:bf:63:2c:8f:c8:4a:de:f1:d2:
ff:6c:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org