Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D30CF05EF411EF9885FCAA762E951A.roa
File: C2D30CF05EF411EF9885FCAA762E951A.roa (raw, json)
Hash identifier: Xnuo0weeEV361pBDn7D55+mkNZTP0A6vNem0MzwjTGs=
Subject key identifier: 31:A4:E7:22:9B:73:91:7C:60:D0:CA:96:98:C6:82:8E:D4:77:06:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D30CF05EF411EF9885FCAA762E951A.roa
Signing time: Tue 20 Aug 2024 13:04:40 +0000
ROA not before: Tue 20 Aug 2024 13:04:37 +0000
ROA not after: Tue 27 May 2025 13:04:37 +0000
asID: 399077
IP address blocks: 156.251.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43538 (0xaa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:04:37 2024 GMT
Not After : May 27 13:04:37 2025 GMT
Subject: CN=66c49468-434e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:c9:da:af:b4:c2:42:e2:2d:f2:78:a8:d0:
2a:f1:ae:2f:fd:1a:1b:18:d8:db:77:dc:2a:08:d5:
93:e2:4f:52:00:fe:e9:77:9b:30:00:d6:f9:bc:aa:
17:9d:a9:4c:6c:43:72:73:48:4d:e4:dc:0d:2c:79:
da:ba:99:47:5a:0b:d8:c7:39:78:61:86:00:0b:fe:
e3:37:82:44:ab:7c:ef:e7:ef:75:6a:9d:2a:27:c1:
e3:af:b2:1b:b9:a2:0c:ac:51:90:e0:19:0c:37:ad:
c1:a2:72:5d:4b:d3:a2:e4:8c:81:8b:a3:d0:1f:22:
52:bc:2f:40:6f:00:40:9b:70:bf:57:69:6c:18:66:
05:8a:a8:46:4c:28:3c:04:c6:ae:36:83:60:7e:9a:
de:e1:cd:98:c3:e2:1a:fe:39:42:21:04:52:26:95:
75:d2:78:74:85:e7:57:48:ae:70:20:2b:17:4e:ab:
31:26:19:76:bf:7c:94:3a:c8:5f:d5:6b:b2:56:b7:
c8:28:d0:d8:fc:eb:18:0b:d0:f9:72:5e:c5:b3:04:
a7:52:e1:12:7d:22:33:6f:b2:81:b8:b5:4b:3b:a6:
ae:2d:b9:f1:8a:8f:54:7e:6a:24:ff:ef:df:73:09:
1e:b1:bf:76:69:77:26:ba:30:e5:fd:bf:d9:8f:8f:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:E7:22:9B:73:91:7C:60:D0:CA:96:98:C6:82:8E:D4:77:06:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D30CF05EF411EF9885FCAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d8:17:0a:64:bc:3c:d3:40:b0:0f:a0:af:48:8f:89:37:69:
d6:39:1a:ea:80:f8:cb:d5:1a:c0:25:5a:dd:ea:35:0c:bd:fb:
e9:c0:d3:0e:16:d3:7c:d7:5f:ee:c3:82:e9:59:08:de:08:1b:
2b:90:26:31:f2:bf:c8:32:e0:4e:15:1b:34:8c:f9:86:0b:5c:
f3:70:84:9b:84:45:d7:9d:26:06:55:22:04:46:af:67:ca:ed:
42:14:7b:7e:48:4d:95:14:da:c9:7b:65:ac:70:c6:59:47:70:
48:35:4b:11:47:81:79:dc:8e:f5:bc:07:15:b3:e3:bd:a3:26:
5d:39:a1:69:61:e8:31:99:b1:f4:e5:9a:9e:45:ef:76:bf:66:
ce:4b:96:a3:1e:97:59:72:08:31:7a:24:66:53:53:1d:e1:20:
a7:4d:f1:d6:06:09:b2:11:c8:66:ad:f1:e7:af:a0:84:95:cb:
f1:30:cf:d9:db:67:bd:a5:e3:4e:b6:3f:b4:28:7c:6d:f5:1c:
e6:df:9a:79:33:87:08:ac:b6:7e:e6:76:dd:1b:91:1f:68:57:
dc:04:0a:f7:df:c7:ec:95:43:85:da:b3:ef:ce:a6:c7:73:ea:
29:d9:6f:43:9c:a3:25:12:8a:14:42:98:25:74:b9:c4:bb:1f:
93:95:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org