Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACD98EC5EF111EF89896092762E951A.roa
File: 2ACD98EC5EF111EF89896092762E951A.roa (raw, json)
Hash identifier: RXQ24XicqgBvDSVFOcvHAZwbQT1GxvBgL3uf8WeF+vg=
Subject key identifier: C1:8C:08:C7:F2:0D:CD:35:23:B1:A6:E2:89:1B:C5:B0:19:26:F5:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACD98EC5EF111EF89896092762E951A.roa
Signing time: Tue 20 Aug 2024 12:38:57 +0000
ROA not before: Tue 20 Aug 2024 12:38:54 +0000
ROA not after: Tue 27 May 2025 12:38:54 +0000
asID: 399077
IP address blocks: 156.251.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43488 (0xa9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:38:54 2024 GMT
Not After : May 27 12:38:54 2025 GMT
Subject: CN=66c48e61-782c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:44:45:86:d7:c6:3b:7b:2c:13:5d:df:3a:
a1:fd:ee:ab:34:e3:35:fe:0c:dd:ad:5e:c2:55:a1:
54:3b:10:58:94:cd:b1:78:51:b4:df:33:87:f3:86:
be:e9:87:6b:35:20:35:bc:6d:31:9b:b5:57:f9:e2:
6e:89:15:aa:6f:f5:21:97:f5:6b:64:eb:67:ae:a4:
86:80:f3:85:43:38:cf:7c:af:9c:b0:2f:3f:e8:e5:
88:f0:54:62:e3:4b:91:0c:6c:1f:45:fe:36:ff:dd:
1e:08:70:d2:e2:a6:42:32:17:2c:b0:85:1b:b0:2b:
aa:45:ca:37:63:01:97:38:7c:56:0f:c4:a2:d5:bd:
72:88:9c:35:a2:8b:b4:44:28:f6:0a:52:4c:be:eb:
04:05:26:02:95:82:fa:84:0d:6d:07:db:92:e9:30:
21:85:b6:f0:0c:fe:f8:47:f1:79:84:2f:50:94:e1:
55:b5:12:c8:91:2b:fd:7a:b6:d1:b0:45:5f:70:d8:
8b:d1:be:2c:cd:a7:e8:69:59:6c:35:1b:c5:c7:9d:
ca:52:89:39:cd:dc:6f:13:04:e0:23:7c:9f:9e:33:
56:52:20:0c:7d:da:7e:b8:d8:5c:8d:10:5e:a4:62:
b3:51:3a:17:fe:3c:d3:4c:4b:26:52:5e:ec:96:ee:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8C:08:C7:F2:0D:CD:35:23:B1:A6:E2:89:1B:C5:B0:19:26:F5:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ACD98EC5EF111EF89896092762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.31.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f0:ea:11:e9:4a:42:48:0e:bc:4d:04:58:1d:52:b2:9f:99:
6c:e1:6c:09:ac:84:e4:a1:b4:e7:eb:eb:8f:c6:0e:7a:8f:48:
48:97:f6:92:ac:07:cd:5f:53:0b:99:39:7d:be:b5:3f:e0:40:
83:54:52:92:da:1d:66:a1:f9:1e:7c:d6:a3:21:49:51:b4:7a:
54:19:64:f4:89:53:e4:6d:76:fe:7a:ee:ab:cf:1a:34:05:d9:
d3:b3:ea:82:bc:71:f7:ce:f8:87:95:89:59:be:62:66:46:5c:
cb:ab:b0:31:46:62:59:2a:08:54:b7:22:f6:2a:de:a2:f5:c5:
a5:03:f2:5e:87:46:59:7e:2c:4a:bd:6b:2f:ed:7a:43:0f:87:
81:37:cc:e2:a0:db:48:05:e2:5b:37:ac:11:a6:7e:1a:47:10:
cf:c4:61:f1:40:4b:b0:51:2a:a3:e1:c9:1b:42:e8:47:80:e5:
af:df:0d:47:44:f5:bf:4d:08:b2:cd:ed:b6:4f:08:df:09:a5:
97:18:52:74:f4:8b:19:10:3b:06:66:68:ed:17:15:c6:b6:c7:
6a:e1:3a:6d:a1:ff:1b:2d:85:88:d7:dc:24:da:e8:f5:89:c4:
04:81:4d:21:95:69:41:32:83:9d:b6:b3:95:68:2a:49:39:5f:
67:6b:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org