Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD1852A9F7211EF94188C79762E951A.roa
File: 2BD1852A9F7211EF94188C79762E951A.roa (raw, json)
Hash identifier: +rcMBJxdzTzSgKiAb7EI27e/QtmZLWWPMrGozM+WJ4I=
Subject key identifier: 71:EE:E3:00:D1:32:C0:8E:20:82:97:D5:33:04:DB:ED:C2:B7:C3:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D0E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD1852A9F7211EF94188C79762E951A.roa
Signing time: Sun 10 Nov 2024 14:43:38 +0000
ROA not before: Sun 10 Nov 2024 14:43:35 +0000
ROA not after: Sun 29 Dec 2024 14:43:35 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53472 (0xd0e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 14:43:35 2024 GMT
Not After : Dec 29 14:43:35 2024 GMT
Subject: CN=6730c69a-c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:59:69:ab:ac:9c:cb:90:98:7e:d1:4e:ee:
6e:52:1b:d7:46:d7:7c:5e:e8:8c:54:77:20:25:9f:
80:98:21:7d:f6:c6:a0:d9:b1:62:c4:2b:0c:fe:72:
11:3b:a5:40:59:ff:07:68:4c:c6:82:5a:d9:2f:85:
35:b4:9f:5e:f7:78:e7:49:e4:6d:49:a1:35:ee:15:
44:c0:aa:4d:9d:44:ca:37:57:56:21:0c:67:f5:d1:
36:87:e1:bc:0d:c7:fd:b3:eb:50:ec:06:2f:13:bf:
40:16:f7:07:e5:d6:20:19:7b:29:a1:d2:8a:64:50:
63:e0:b9:98:c1:c7:0c:b0:44:27:66:7b:f8:83:c2:
67:fc:91:89:13:65:12:a9:39:10:b9:74:e9:b3:42:
b4:fc:c8:51:55:87:6e:c9:8f:9a:aa:b3:a6:6b:2a:
0b:a2:21:9c:da:b1:1e:29:0b:11:ea:f0:7c:33:00:
60:48:a3:8c:a0:ba:0c:f8:b7:eb:33:31:fe:5b:ed:
1c:21:a2:37:53:0a:42:44:28:dc:52:10:48:38:fe:
de:be:c3:20:a6:0c:5f:0c:97:7d:15:4b:bf:27:56:
16:b9:8b:f7:98:92:3f:8b:9d:13:3f:6a:f3:71:38:
69:23:47:64:dc:2d:f6:d5:ee:a6:fe:73:8a:5c:5d:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EE:E3:00:D1:32:C0:8E:20:82:97:D5:33:04:DB:ED:C2:B7:C3:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BD1852A9F7211EF94188C79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:18:bb:ed:2a:4d:0f:01:1d:7a:6e:36:90:ee:95:66:0c:da:
d3:e1:65:a4:8a:06:b2:07:a1:7b:2c:c9:51:30:c0:e3:59:d4:
23:90:58:eb:c5:a1:82:72:0a:0b:17:49:22:58:75:18:ed:22:
eb:bd:bd:d6:4a:9c:0d:d8:08:c4:30:bb:0b:4b:d3:e9:45:08:
55:73:3c:a0:02:53:1c:ab:76:db:3b:f9:15:67:1e:15:d2:73:
ed:a2:c7:c3:74:64:40:fb:ab:e1:72:e9:d6:ea:75:f7:33:9b:
7f:d9:77:3e:9b:98:c8:33:1c:35:6f:bf:99:f8:1b:ed:7d:b7:
fd:27:7a:b0:80:07:ca:e9:77:2f:a2:ba:9d:3c:d5:9e:49:a4:
c6:0b:37:41:bc:11:e5:f4:53:11:65:e9:e7:ba:bf:e6:bd:75:
ae:b0:69:b0:66:84:bd:63:0a:16:0a:de:e4:51:91:5d:e5:8c:
a2:2b:2b:c5:74:22:10:89:5d:bc:1b:57:52:16:91:d8:7e:64:
31:1f:fd:8b:e9:c9:d2:6a:2c:e5:76:95:3e:8c:38:ed:f3:4c:
b0:27:14:4e:54:2b:cf:ec:9e:1c:25:aa:ba:09:15:0c:a2:f6:
fa:53:19:78:0e:5f:5e:94:8e:b5:0f:99:17:5a:77:f7:59:85:
d9:7a:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org