Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D1C968638A11EF9502405D762E951A.roa
File: 31D1C968638A11EF9502405D762E951A.roa (raw, json)
Hash identifier: 0sHQdHmcNCSg4MbqbFl8xD9HjPsMCVWcqZhR19Hr3hE=
Subject key identifier: D8:0D:88:67:6C:AD:99:A3:AD:8D:C4:00:07:70:E8:7C:D9:CF:51:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AD6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D1C968638A11EF9502405D762E951A.roa
Signing time: Mon 26 Aug 2024 09:04:26 +0000
ROA not before: Mon 26 Aug 2024 09:04:23 +0000
ROA not after: Sat 06 Sep 2025 09:04:23 +0000
asID: 131618
IP address blocks: 156.250.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44395 (0xad6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 26 09:04:23 2024 GMT
Not After : Sep 6 09:04:23 2025 GMT
Subject: CN=66cc451a-338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:0b:69:7a:2a:48:ca:ac:1b:c5:e7:e3:bc:
50:41:42:cb:f7:2b:85:65:12:86:2e:64:b0:10:d8:
f5:d3:79:ba:f0:f2:2e:84:7f:b8:f5:d9:b5:5a:a8:
66:65:97:d9:19:c2:13:08:8c:06:81:a6:bd:04:0f:
b3:8d:c0:55:1d:ee:21:ec:6a:fd:e9:fe:9b:bf:2c:
13:08:c1:15:f2:06:2e:7b:bd:0f:65:1e:ca:d4:2f:
a1:94:90:15:13:09:35:d5:bf:4b:2e:92:fd:de:2d:
fb:58:39:5f:33:ea:fe:da:19:f6:76:f1:71:41:3f:
df:81:40:3b:9a:72:11:c2:a7:04:d4:75:08:3b:3b:
0c:ef:a7:ac:93:e5:32:91:f4:4d:03:16:f3:7a:87:
f3:ab:f0:d8:e6:b9:28:3d:de:52:8d:b1:97:27:09:
57:89:69:77:61:3f:64:8f:50:f5:f4:e4:3f:b9:be:
09:c9:d6:07:d0:3c:51:99:df:67:83:fe:ed:e9:48:
c5:b3:13:c5:5e:32:bf:ad:fd:47:e9:9b:28:43:59:
86:cd:a8:e7:69:05:22:a1:c7:53:77:88:d6:f6:14:
c1:c3:37:1e:ea:f1:05:45:e5:f6:cd:a8:64:fd:9d:
0f:d0:89:c3:8b:50:10:4d:4b:9f:10:45:67:c4:4d:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:88:67:6C:AD:99:A3:AD:8D:C4:00:07:70:E8:7C:D9:CF:51:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31D1C968638A11EF9502405D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2f:3a:c7:2c:fe:6e:12:98:c7:30:a0:d6:62:35:c6:17:90:
ad:f8:c2:b3:bf:ec:d2:00:05:e2:a0:1b:f8:54:17:2c:e2:72:
f7:18:61:bc:0d:b4:38:4c:c4:cb:c6:4a:2c:5f:77:86:fc:a1:
e1:16:79:d5:28:42:9c:f0:c8:92:53:ec:a0:2a:37:ab:73:57:
21:62:58:e7:bb:02:80:8b:be:77:d8:f3:fc:8d:dd:ce:55:66:
29:c1:20:9e:7c:a7:7b:51:1b:63:8e:b0:3a:27:fb:12:21:c4:
4b:f8:d2:12:4e:a1:5a:a4:3c:70:c4:74:15:c6:b6:a5:b7:c7:
f2:37:94:f4:cb:a9:f6:94:60:48:42:96:4d:2c:4c:e8:a5:03:
27:b3:4a:90:04:83:a2:03:4d:6d:1e:c0:f5:f2:dc:f2:47:fd:
39:81:3b:4f:e3:4e:88:20:2b:28:70:4b:b6:75:03:16:93:bf:
4e:2a:c3:49:07:05:ec:cb:ab:b3:7f:7b:49:88:bb:bd:b9:32:
cd:3f:e4:01:cd:14:fd:95:b8:b9:ab:09:a0:fb:d0:50:b4:3f:
00:b1:e8:bf:e5:13:75:6d:cb:4d:21:ee:29:7e:bf:df:3b:94:
81:fa:87:6f:d7:b9:67:a6:eb:46:bd:53:71:62:c1:80:81:10:
75:47:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org