Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B453DFA5EED11EF86CA1A79762E951A.roa
File: 8B453DFA5EED11EF86CA1A79762E951A.roa (raw, json)
Hash identifier: jYj4qPyuqqfmiVGXPB7pAajvZMP4Zi7SGCS/G3FO7p8=
Subject key identifier: 77:AD:C1:F1:C3:3C:4B:75:C3:86:89:56:50:B8:58:E8:C1:38:35:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B453DFA5EED11EF86CA1A79762E951A.roa
Signing time: Tue 20 Aug 2024 12:13:01 +0000
ROA not before: Tue 20 Aug 2024 12:12:55 +0000
ROA not after: Tue 27 May 2025 12:12:55 +0000
asID: 399077
IP address blocks: 156.251.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43442 (0xa9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:12:55 2024 GMT
Not After : May 27 12:12:55 2025 GMT
Subject: CN=66c4884d-6712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:42:a9:29:bd:22:ce:33:75:dc:f7:03:70:
55:8a:a5:ad:c9:f8:51:b3:f1:a4:10:8d:97:ad:a2:
6d:48:04:9a:65:87:0d:08:0d:0b:9a:8f:2b:b6:21:
16:02:10:e7:82:20:a5:75:2c:65:37:d9:b8:82:96:
78:d3:54:38:0e:23:4b:b6:39:62:73:b6:2d:c3:dc:
74:ce:d0:80:fb:bf:b1:7c:e7:c5:4a:4d:c9:d5:82:
b8:41:e5:15:a1:dd:45:05:bc:ac:a0:f2:a5:dd:eb:
b0:8d:73:d2:ed:79:60:3c:42:10:4e:4a:b8:6c:cb:
41:35:c0:b0:23:2e:72:aa:f1:30:45:75:b0:9a:ac:
73:35:5c:d2:9e:a7:67:2c:0d:7d:fc:51:c6:54:39:
f3:4b:1c:88:c6:f5:bc:35:1a:cb:eb:92:09:56:1c:
e1:1a:22:ff:1f:30:63:64:f8:b0:54:3f:fc:35:10:
aa:59:1a:b9:ba:1f:12:f3:37:24:da:6f:e6:b1:58:
6e:00:52:2f:9f:a9:1f:0d:72:15:32:26:8e:52:f3:
30:45:ee:f2:75:f4:ab:20:37:c7:b3:9e:02:9e:71:
77:8d:3b:69:24:1b:5e:c7:64:e6:b0:74:0f:a6:79:
8c:92:b2:2c:99:62:be:7f:9a:bf:44:e1:87:70:b6:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:C1:F1:C3:3C:4B:75:C3:86:89:56:50:B8:58:E8:C1:38:35:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B453DFA5EED11EF86CA1A79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.56.0/24
Signature Algorithm: sha256WithRSAEncryption
04:26:10:0e:f0:e1:8f:9f:63:1d:34:8a:e4:88:c6:06:68:23:
2e:44:f7:38:05:2a:d8:4e:07:1a:20:2b:10:17:ec:15:af:d0:
dd:39:27:ff:cf:9e:ae:13:24:0f:ed:89:28:7b:d8:ab:b1:91:
fc:9f:e9:9f:e5:c4:bc:a4:44:d3:d6:90:6c:2e:df:27:71:87:
46:bb:a4:40:4f:53:4c:12:61:78:47:20:18:dc:d2:0e:58:a3:
b1:c1:8c:e1:82:1e:24:e9:fc:2a:02:61:5b:17:ee:a8:1f:ad:
ba:bb:44:5e:3f:60:3d:fe:1d:d6:9e:60:23:f1:35:7b:8d:25:
75:c0:88:7f:74:63:2b:3b:7d:e0:38:bc:c3:4e:96:81:27:9c:
0a:d1:8b:10:5b:3c:93:da:92:4c:6f:d3:45:76:08:34:43:54:
72:ea:a1:4d:54:b4:03:f7:23:c3:80:53:e3:0f:e7:47:58:9a:
6b:d4:9b:f3:ee:84:57:5b:08:c7:ec:69:a4:fd:83:95:eb:cf:
44:db:70:71:5c:96:75:24:0d:a0:84:be:f8:79:26:e7:db:b8:
1c:26:4a:2c:15:48:d1:14:31:f6:f2:d7:67:57:e0:61:64:c7:
12:96:78:74:02:9c:3c:09:f4:e8:2c:99:93:14:f8:99:fb:d2:
8a:cc:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org