Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF46286976B11EF9A309F64762E951A.roa
File: 2EF46286976B11EF9A309F64762E951A.roa (raw, json)
Hash identifier: gI2hABo6XxjtmrksWp5OJXPP7QWvdeRRXo5LoeVtRrE=
Subject key identifier: 50:8B:C3:91:A8:56:86:E5:58:A3:AB:8A:4D:31:D3:80:5E:77:CA:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF46286976B11EF9A309F64762E951A.roa
Signing time: Thu 31 Oct 2024 09:33:28 +0000
ROA not before: Thu 31 Oct 2024 09:33:24 +0000
ROA not after: Sat 21 Dec 2024 09:33:24 +0000
asID: 63139
IP address blocks: 156.227.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52014 (0xcb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:33:24 2024 GMT
Not After : Dec 21 09:33:24 2024 GMT
Subject: CN=67234ee8-7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:f0:af:75:5f:4f:2a:2c:0d:6c:54:ff:e9:
64:25:3b:d9:21:ff:80:30:86:0c:a5:cf:50:cf:3d:
b8:32:ec:45:21:97:bd:06:ab:fc:51:0c:bb:fb:85:
b1:06:46:bc:a2:c1:a2:76:4f:63:b2:7c:27:00:7f:
10:75:22:63:2a:11:da:cc:bf:32:2a:f6:6e:92:14:
ad:9c:f3:62:ee:cd:f6:80:59:19:09:af:0c:e2:0d:
70:8f:de:0f:18:85:38:3c:d2:1f:c2:42:fe:12:cc:
05:ac:eb:d1:14:87:c4:5a:d5:50:74:e4:5e:ad:5d:
bb:60:50:56:f0:d7:1a:90:35:af:48:a5:82:a4:d2:
ad:50:72:2a:b5:e8:ef:e5:7e:a2:2c:4c:b5:85:75:
98:46:93:c5:d6:14:80:22:c8:ad:ce:94:f3:ef:59:
6e:85:b6:58:1b:f4:a6:df:3e:9d:7a:29:36:05:80:
e5:5d:38:70:fe:1e:52:5f:99:af:7e:9e:2c:03:35:
09:23:11:bb:cc:52:0e:f2:21:6d:9c:8f:88:77:f7:
dd:30:18:96:8d:f6:35:27:df:d9:38:7e:12:d1:63:
f1:34:89:86:65:fc:39:b2:bf:9a:f9:79:60:74:3b:
06:e7:61:e1:cb:b8:14:1f:04:df:2e:c0:65:06:9b:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:C3:91:A8:56:86:E5:58:A3:AB:8A:4D:31:D3:80:5E:77:CA:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EF46286976B11EF9A309F64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:e1:58:39:59:a5:83:2e:97:11:37:ab:49:11:38:2f:45:b6:
08:fa:66:67:4e:d9:ba:f9:3d:65:24:dd:70:10:b8:79:93:db:
e4:e1:ef:72:0e:51:fd:ca:fb:0d:60:60:36:55:ea:68:9c:04:
80:93:42:a3:a1:9c:90:3c:49:9d:b1:cb:f2:72:02:55:be:6d:
7e:ec:bb:29:fa:49:c6:4d:e8:0b:00:b7:6c:d2:c2:4d:71:25:
f1:c7:ae:0c:37:2f:65:20:c8:f8:18:10:ca:11:60:e9:29:10:
6b:5e:98:3c:fc:bc:ff:de:8b:6a:05:be:3e:45:0d:9f:1e:a6:
c7:e3:9a:89:ee:c6:2f:f2:79:e7:2a:16:34:03:b8:3c:d3:96:
4c:54:b6:9d:03:51:13:fc:e2:6b:d0:1d:2a:2f:3a:df:30:d8:
e7:c5:be:0b:c8:85:0e:a9:7b:ce:2c:4c:3f:9b:d4:1c:51:bd:
b7:19:f4:5e:f4:79:fe:d6:6a:36:c4:75:e1:cf:65:d2:f9:6d:
9a:39:3e:16:b5:db:a4:64:86:9c:7a:27:56:8d:8d:de:0a:ea:
bb:f6:40:1d:24:1a:61:c0:6a:66:bf:58:20:bc:52:5f:eb:60:
55:d9:f1:b9:fa:f8:11:d8:0f:c5:50:5e:ba:9b:2c:25:64:39:
f1:13:68:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org