Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB31C645EF011EFA591068E762E951A.roa
File: 9FB31C645EF011EFA591068E762E951A.roa (raw, json)
Hash identifier: 39NynjdOlvr94V4RiCh96p6wIdGpsyLSg+NIKe15OGU=
Subject key identifier: BB:F5:25:C4:BE:5C:F9:8D:85:3F:5A:A3:61:FB:95:44:3A:8F:54:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB31C645EF011EFA591068E762E951A.roa
Signing time: Tue 20 Aug 2024 12:35:04 +0000
ROA not before: Tue 20 Aug 2024 12:35:00 +0000
ROA not after: Tue 27 May 2025 12:35:00 +0000
asID: 399077
IP address blocks: 156.251.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43480 (0xa9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:35:00 2024 GMT
Not After : May 27 12:35:00 2025 GMT
Subject: CN=66c48d78-6e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:96:71:61:42:fb:e3:8a:b4:f0:09:80:92:
28:8a:d6:52:24:4a:0b:05:1d:10:e9:d6:2f:72:63:
f1:db:75:18:d0:6c:dc:10:45:66:78:d5:32:a7:ab:
ec:bd:b6:32:81:d8:ae:a0:12:cf:a2:54:bc:9c:5a:
a4:b8:0d:16:56:b0:9c:f4:b7:58:a9:63:49:55:7d:
cb:f4:67:94:85:81:57:02:90:c7:6e:a0:1c:93:82:
29:4b:08:ca:c4:0d:dd:b7:c0:a4:e7:87:aa:22:0f:
aa:65:10:2c:36:c7:aa:2d:8f:96:b8:6c:1f:e6:08:
ce:29:06:35:79:52:8a:44:dc:78:8f:39:77:fd:9e:
a0:24:52:25:38:e9:d9:82:4c:b7:29:9c:51:6b:c7:
22:64:83:6c:a7:db:f3:35:00:91:2d:26:73:01:bf:
23:87:67:e0:14:de:f3:4a:f8:2c:79:27:fa:92:7e:
32:30:fd:6f:91:66:0b:b3:77:38:b5:9d:c6:10:ee:
8a:95:fa:df:d9:e4:62:8f:0c:b5:6c:c6:f7:91:c6:
53:db:fc:f9:ca:87:a7:da:cd:21:c2:99:25:9b:d9:
e0:44:93:43:3c:55:cb:87:bc:ba:90:05:c1:e0:d9:
cc:ba:a0:31:04:89:44:c8:76:69:76:9f:66:40:23:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:25:C4:BE:5C:F9:8D:85:3F:5A:A3:61:FB:95:44:3A:8F:54:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB31C645EF011EFA591068E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3f:b5:43:6f:5f:29:46:4b:0a:85:18:a7:6a:f6:b2:c2:7d:
de:96:98:c4:66:2b:3d:47:c5:be:c3:78:01:44:b5:ec:04:29:
34:d6:f4:d6:04:64:50:85:bf:25:08:2e:c5:2e:94:8c:15:3f:
16:44:40:be:78:65:ce:54:f8:4f:1b:fe:6e:17:88:ee:04:f4:
27:60:42:5d:8c:4d:ae:42:83:a9:12:f8:64:d4:3f:fa:c3:3e:
3e:b9:c2:c3:68:5b:cf:91:46:9d:f8:c3:5f:9b:72:b9:80:c1:
be:71:72:fc:62:2b:68:51:28:2c:5d:58:7e:35:94:67:f6:01:
42:69:5e:5e:db:78:02:86:bb:ac:ba:2d:e9:5b:ad:d5:63:3b:
3c:69:f4:2b:b3:cc:46:e8:b1:ff:5a:78:95:01:d3:dd:32:92:
31:cb:7f:43:36:b3:68:8f:9d:3f:f0:33:51:f1:3e:9d:cb:ca:
3b:d6:e1:92:cc:2b:78:e6:c9:35:98:c7:19:7d:c6:cc:61:84:
ad:86:88:6c:5d:1c:ee:51:9a:fd:83:d0:9c:03:05:56:dc:46:
6a:27:74:39:e8:d1:9c:82:4c:1c:d6:a4:86:6f:ad:d0:97:0a:
18:6f:79:3d:2b:46:4e:16:43:21:4a:fd:b2:e9:ba:fb:42:f8:
38:72:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:42 2024 by rpki-client on console-ams.rpki-client.org