Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DE3A0CE9B7E11EFBE507F96762E951A.roa
File: 8DE3A0CE9B7E11EFBE507F96762E951A.roa (raw, json)
Hash identifier: FY2B6XS02bN64nRuE1K5o9tOxdE40pu13TQs9joB/qU=
Subject key identifier: A4:AD:99:F8:3F:17:F8:84:A5:1A:06:B6:08:EC:6E:81:21:0F:D9:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DE3A0CE9B7E11EFBE507F96762E951A.roa
Signing time: Tue 05 Nov 2024 14:02:12 +0000
ROA not before: Tue 05 Nov 2024 14:02:08 +0000
ROA not after: Mon 13 Jan 2025 14:02:08 +0000
asID: 5065
IP address blocks: 156.239.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52879 (0xce8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:02:08 2024 GMT
Not After : Jan 13 14:02:08 2025 GMT
Subject: CN=672a2564-e715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2a:84:ff:a4:1a:56:bc:9b:50:ac:4c:57:f0:
c0:40:27:3e:72:44:b1:6d:cd:be:d7:35:20:6d:02:
bc:b7:a5:2f:16:fb:35:8f:12:28:83:d2:69:f6:bf:
75:73:93:ba:66:82:83:2f:d8:9b:09:0f:0c:57:fe:
c4:02:7c:c9:f0:de:9a:04:f4:80:fc:79:08:8a:e9:
74:01:0e:a1:a9:cf:12:54:cf:4c:05:13:c9:1f:20:
ed:b0:04:35:90:a1:d4:b1:b1:f3:9b:43:65:0e:ee:
a2:37:a7:cc:56:ce:9c:98:8d:f2:0e:4b:5e:39:b1:
f8:72:03:bd:32:af:f4:19:4c:b0:8b:d7:ff:65:9e:
63:b1:bc:f3:64:27:7d:ca:70:a0:6c:93:2b:16:de:
be:fc:c1:b5:df:6f:9d:5d:45:56:a0:8a:df:8b:25:
58:7c:88:3b:b6:13:07:3b:2e:4c:2f:82:c7:27:ac:
28:fc:d9:d5:96:fd:f1:bd:1d:65:fa:b1:b2:c6:ed:
e3:14:10:f1:fd:00:9f:ac:af:a2:84:1a:9f:4f:58:
5a:a7:4c:61:43:d3:13:ea:fb:de:3b:bf:6e:12:bf:
63:5e:79:62:aa:3e:ba:07:66:64:44:f6:19:eb:dc:
61:7f:5c:ca:c4:c7:1d:0a:93:3f:59:7a:87:29:29:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:99:F8:3F:17:F8:84:A5:1A:06:B6:08:EC:6E:81:21:0F:D9:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DE3A0CE9B7E11EFBE507F96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e2:85:a5:56:d0:d8:b8:18:8c:9d:c3:60:ba:ee:bc:0f:84:
6c:da:a1:c7:9a:87:80:70:4f:b8:56:9e:0a:42:27:84:54:09:
69:a9:16:66:8c:2e:58:67:a3:c1:e1:d8:cd:73:66:ab:02:49:
d7:8c:22:c1:c6:63:11:6d:72:ba:51:e1:a0:19:3c:0e:6a:9d:
69:f8:99:af:f2:0e:80:ac:56:c0:e8:c0:35:bf:fc:cb:e5:31:
90:42:8a:fc:6c:75:51:a8:6b:7a:bd:51:a7:85:f1:5a:ff:2e:
b6:b6:e0:d6:a0:13:f4:e2:c4:cf:62:cb:53:4e:b3:22:f6:38:
04:fb:95:f0:3d:97:f0:b4:26:64:2a:b1:1f:88:96:f0:ff:5e:
94:b5:7e:0b:d6:4c:44:97:c2:6c:55:53:19:ee:46:f4:94:96:
cb:d4:28:a1:4c:af:a5:30:b8:2f:84:47:51:e0:12:67:b2:87:
d8:b9:12:e1:d5:0c:6f:b2:52:8b:52:d2:31:5d:8b:c6:8e:88:
e7:66:ef:76:4a:cc:14:bb:71:09:4c:10:d6:22:88:aa:d0:ef:
2c:b6:d7:00:28:1c:e7:a2:ee:21:df:e4:ec:20:21:7c:fd:75:
34:fe:0a:86:7a:90:19:fa:55:87:03:a5:b9:d9:d4:f1:3e:e0:
d4:3c:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:39 2024 by rpki-client on console-ams.rpki-client.org