Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E75A923AA311EF985D7090762E951A.roa
File: 39E75A923AA311EF985D7090762E951A.roa (raw, json)
Hash identifier: 1Sie7YpXdRXKn5oa2WB/WKezbE72C+ljyx94d/pQUWY=
Subject key identifier: 99:15:92:AE:78:5C:B7:9A:5D:28:60:FA:EC:45:A6:AE:14:96:F9:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 991F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E75A923AA311EF985D7090762E951A.roa
Signing time: Fri 05 Jul 2024 07:50:20 +0000
ROA not before: Fri 05 Jul 2024 07:50:16 +0000
ROA not after: Tue 07 Jan 2025 07:50:16 +0000
asID: 63199
IP address blocks: 156.229.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39199 (0x991f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 07:50:16 2024 GMT
Not After : Jan 7 07:50:16 2025 GMT
Subject: CN=6687a5bc-0862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:85:ac:9f:01:44:f6:8b:39:05:d5:ad:24:
24:0b:a7:1b:62:2b:5c:e5:c6:79:50:ef:f3:0e:45:
51:7f:4f:f8:c0:b3:33:6b:33:70:f0:0e:22:b6:7e:
6d:55:b0:84:8f:bb:5d:c8:be:82:dc:8f:1e:06:03:
8b:75:d8:5b:83:f0:dd:2c:44:58:4b:1d:64:c0:fb:
9e:01:f6:65:97:44:2e:dd:ea:83:e8:28:08:33:06:
45:83:8b:dc:92:e9:56:be:8e:e7:f2:17:ad:76:9b:
a6:89:fd:4e:b0:46:d0:4d:9d:84:37:ab:9e:fd:82:
bb:45:22:05:fc:45:c7:60:8e:03:c0:d8:f5:d3:6b:
8b:f7:92:01:68:bf:bb:6b:91:25:e7:c1:5b:ea:b4:
63:fa:55:07:c3:1b:dc:6e:56:96:7c:98:ad:8c:08:
60:e2:2e:ca:c2:da:25:9b:a3:72:6e:56:4e:6a:19:
23:7b:65:8b:e5:53:c8:3b:31:f9:97:4c:92:f9:4b:
41:b5:28:95:3f:02:c3:bd:55:b0:64:cd:d3:68:c7:
2e:80:bc:50:67:2e:7e:a7:80:91:82:9a:91:2f:5d:
22:62:b6:52:b6:49:da:34:39:20:ad:b8:47:be:da:
bf:8f:80:02:e2:cb:92:a7:70:49:ec:1f:91:eb:58:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:92:AE:78:5C:B7:9A:5D:28:60:FA:EC:45:A6:AE:14:96:F9:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E75A923AA311EF985D7090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:c0:59:aa:2d:0a:3b:15:aa:05:29:8a:b2:8c:67:2f:8b:1b:
5b:8a:a5:0f:6f:cd:cb:6f:07:4c:70:d4:dc:22:f5:70:a4:c3:
e6:2a:36:06:70:77:b3:f8:b1:89:ae:23:5b:44:19:84:81:62:
ef:03:ec:d2:89:75:2f:ac:43:85:ff:09:1d:70:8a:98:66:02:
32:5e:ad:87:2a:63:0e:72:c7:7f:57:44:af:cf:72:06:28:46:
62:b6:9a:84:ca:21:4d:3f:28:52:6a:ab:da:f6:be:18:15:98:
a3:c7:7c:93:92:29:75:46:56:82:3e:3b:d3:d4:d8:a8:2e:61:
6a:17:e9:6f:a4:23:04:03:82:9a:a6:43:f5:0d:15:93:dc:e7:
12:7c:e4:f4:06:24:19:4b:02:3b:67:90:2b:7a:38:77:ec:db:
93:1c:f7:3a:d8:9a:3c:ec:d1:69:41:cd:01:74:81:56:d0:40:
31:a7:32:ad:0f:3a:99:19:69:92:16:0e:5e:4e:e0:0c:a4:47:
b4:44:79:b7:b7:64:cc:b2:ad:86:ad:76:e0:ea:a1:ea:e7:ed:
b8:c5:70:c0:53:90:34:ad:41:c2:cd:a8:3d:8b:3c:f6:8b:0c:
6c:65:bf:ff:de:16:f7:af:12:2e:57:87:a2:59:02:03:55:b4:
eb:3b:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:00 2024 by rpki-client on console-ams.rpki-client.org