Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6AA6EEC676E11EFAF42515A762E951A.roa
File: A6AA6EEC676E11EFAF42515A762E951A.roa (raw, json)
Hash identifier: HDBunVvDeQ4VVTwDk2sHXOczpkvDeWIyLOD+E7M2vnU=
Subject key identifier: A6:DE:66:AF:50:97:48:01:83:5A:34:37:E7:90:EE:1A:4B:62:22:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B074
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6AA6EEC676E11EFAF42515A762E951A.roa
Signing time: Sat 31 Aug 2024 07:57:21 +0000
ROA not before: Sat 31 Aug 2024 07:57:18 +0000
ROA not after: Fri 14 Aug 2026 07:57:18 +0000
asID: 24413
IP address blocks: 156.230.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45172 (0xb074)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 31 07:57:18 2024 GMT
Not After : Aug 14 07:57:18 2026 GMT
Subject: CN=66d2cce1-cdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:9a:08:1a:56:95:92:80:60:d4:3f:ae:9c:
a2:2e:c3:10:bd:d8:e8:c7:0b:3e:86:ab:82:a7:4c:
12:4a:5a:5c:01:19:14:f2:ec:67:1e:d3:55:36:b7:
0c:17:7b:4d:17:ea:89:ce:df:c8:d3:1d:d3:38:cb:
ba:ac:68:5c:9a:a9:b9:56:ec:f5:e9:46:62:70:d6:
67:55:14:e3:00:b6:d7:0f:85:67:77:96:5d:07:33:
4f:ad:a3:9b:79:e6:b3:fa:91:cf:ef:a5:5f:de:48:
54:ff:ff:0a:18:47:0b:df:6d:fd:a9:95:b0:1c:47:
88:b8:a3:31:0b:a4:54:83:36:ff:bd:36:ab:4c:ad:
14:8e:ca:ea:fc:58:a2:c6:92:5c:8c:34:20:af:c6:
7f:4a:ba:0c:3f:e4:19:8a:f8:cd:78:be:ac:49:29:
12:33:85:56:d1:f9:cc:03:2c:25:a4:f3:68:78:bb:
38:b1:e8:2b:55:ed:1e:35:d0:62:51:06:30:00:fc:
e9:50:7b:56:55:73:e8:37:78:ae:93:aa:ef:60:3f:
8e:56:8e:52:1c:21:bc:f8:2a:3a:8f:06:d4:71:0e:
30:18:38:ba:d8:73:6c:37:61:79:a8:cd:cf:6d:b3:
d1:d3:7b:5f:9a:e8:14:e7:8c:62:da:7c:d0:c9:1b:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:66:AF:50:97:48:01:83:5A:34:37:E7:90:EE:1A:4B:62:22:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6AA6EEC676E11EFAF42515A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:fe:30:3d:33:93:7f:3e:ae:99:5f:0e:0d:e1:51:d9:25:
0a:18:9e:6d:eb:ab:6b:6e:93:12:3d:74:05:40:0e:8f:99:30:
f9:e8:52:79:62:7e:3c:15:c8:7e:2a:75:a9:59:c7:2c:e6:8f:
f6:de:c4:4a:b0:b4:b2:02:4b:c5:2a:75:0e:bc:52:04:99:e9:
a9:01:f5:bd:77:8e:1b:4d:09:45:ac:70:00:d5:25:35:dc:a3:
46:8d:b6:7c:31:f2:2f:db:05:a9:df:10:25:bb:be:4e:a4:62:
24:a1:5a:b7:4a:d0:62:85:b9:dd:33:16:9a:e4:07:86:62:4b:
2b:1e:6b:20:ed:62:68:22:85:89:ac:28:95:7e:e8:30:fd:73:
52:77:49:1e:aa:d7:5f:54:38:a9:c4:3b:17:bc:fb:02:4a:f6:
ad:57:89:af:0b:8c:d4:cd:a4:30:8e:71:9f:b3:c8:25:10:1a:
d0:51:51:ab:5b:d6:a4:17:6a:17:20:0a:27:0f:52:a0:55:dd:
29:1d:d3:5c:20:f4:3e:92:a8:81:e3:83:76:18:cc:d7:55:18:
db:a2:88:d7:62:70:1f:9d:35:db:43:56:36:6a:6f:78:1b:fa:
65:cb:aa:5f:50:ed:c5:e3:db:83:e1:b4:8d:22:c4:c4:a7:b5:
0a:7c:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org