Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4678EE2E5EF211EFAD41D997762E951A.roa
File: 4678EE2E5EF211EFAD41D997762E951A.roa (raw, json)
Hash identifier: arIuugZ7DUrJNyXnKIGQEZDWV3wg/L6q5ymLiLxnxNI=
Subject key identifier: 36:1E:69:05:04:C7:CF:81:B1:AD:2E:3C:67:9C:26:B0:D4:7A:0B:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4678EE2E5EF211EFAD41D997762E951A.roa
Signing time: Tue 20 Aug 2024 12:46:53 +0000
ROA not before: Tue 20 Aug 2024 12:46:50 +0000
ROA not after: Tue 27 May 2025 12:46:50 +0000
asID: 399077
IP address blocks: 156.251.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43504 (0xa9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:46:50 2024 GMT
Not After : May 27 12:46:50 2025 GMT
Subject: CN=66c4903d-5423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:a3:3b:78:82:5a:44:6e:98:92:94:a0:16:
5a:eb:29:55:e0:a5:c1:ad:f9:d8:fb:ab:a6:28:ca:
79:b2:9f:89:4c:6d:ab:0f:e3:73:76:6b:c4:81:45:
55:2a:50:cb:bc:a1:a5:7e:3e:f0:07:a5:66:df:09:
95:fe:82:44:1a:b2:86:ec:30:e6:fc:51:0b:d4:8f:
a8:d7:07:93:d8:20:b4:a3:39:ea:7f:87:c8:4e:cd:
7d:78:4d:26:7a:72:ff:8d:f3:80:7e:15:7b:e4:90:
95:50:a3:d7:9b:6d:9d:51:e7:01:21:4f:aa:f6:13:
b6:fd:7b:d4:04:36:3e:fd:ab:f0:87:5c:b0:84:db:
92:62:a8:eb:29:6c:c6:5f:bb:a3:aa:b2:40:0f:e6:
84:17:60:60:50:22:4c:c6:c4:15:43:93:2f:c5:da:
71:d4:4b:58:84:d4:e9:89:0c:ab:42:34:87:9f:3e:
e9:03:35:21:89:bb:c2:72:0b:b8:7b:e6:07:54:9f:
f3:c3:8e:16:7f:e9:26:d4:8f:b0:ad:20:a3:e6:60:
97:ec:59:34:f6:e0:ae:29:65:db:0b:77:b3:17:4e:
fd:33:55:58:ff:09:f3:ae:a7:e7:f3:f3:2f:b9:7c:
14:9f:76:5e:f7:02:c6:13:37:21:41:aa:d4:23:bc:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:69:05:04:C7:CF:81:B1:AD:2E:3C:67:9C:26:B0:D4:7A:0B:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4678EE2E5EF211EFAD41D997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
75:42:d7:66:47:23:55:ff:69:8b:f4:eb:e5:d8:7b:da:35:3a:
5f:0a:69:e0:13:41:08:0f:a6:53:ac:1c:9e:fd:b8:11:f8:86:
49:50:57:a0:63:e4:da:ae:af:c0:1b:39:a5:14:0b:10:36:25:
28:5b:fa:67:d5:9a:24:21:47:1d:10:ac:e1:75:8b:a9:bf:27:
0e:50:11:a3:2a:f1:64:75:4f:ef:12:bd:84:09:b6:0c:70:32:
16:e4:c1:b0:43:88:69:c8:93:c0:9b:a3:33:9f:53:4a:a1:bb:
47:1a:0d:b1:16:97:f9:59:45:06:e8:08:2e:6a:85:1a:84:6c:
1e:f4:ca:27:82:a6:93:3d:cd:aa:4e:5d:c8:74:67:c4:79:32:
60:b1:83:bc:b1:cf:e1:9a:c2:d6:85:be:36:27:7c:dd:e0:e9:
c9:77:b4:37:89:db:c9:6a:fc:90:2b:27:d8:ca:44:a8:39:55:
31:88:66:f1:47:35:78:20:43:db:81:5d:e1:50:06:8e:49:f1:
02:17:af:d9:d4:58:60:45:2e:fe:4b:0a:96:24:00:3f:d0:42:
27:2f:0c:38:ab:ea:57:ac:98:28:e4:b9:80:f2:a8:fa:96:91:
cf:13:45:ef:70:a3:69:d3:b3:56:f9:af:61:7f:ae:0d:65:12:
5a:94:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org