Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C681FCAC5EF011EF8DEC6C8E762E951A.roa
File: C681FCAC5EF011EF8DEC6C8E762E951A.roa (raw, json)
Hash identifier: 1rgCZXBKN3QrnNdNViAyVzxpe9k4h0HnRk0ofL+riaI=
Subject key identifier: 34:75:EA:59:FF:C7:E0:58:8C:33:7B:F6:91:15:1A:AC:96:FA:DC:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C681FCAC5EF011EF8DEC6C8E762E951A.roa
Signing time: Tue 20 Aug 2024 12:36:09 +0000
ROA not before: Tue 20 Aug 2024 12:36:05 +0000
ROA not after: Tue 27 May 2025 12:36:05 +0000
asID: 399077
IP address blocks: 156.251.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43482 (0xa9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:36:05 2024 GMT
Not After : May 27 12:36:05 2025 GMT
Subject: CN=66c48db9-d7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:7d:03:1c:e3:99:89:00:2a:cf:38:1c:28:
e2:a4:2d:12:de:cc:09:2f:fb:19:c9:c6:77:23:6b:
11:a9:41:c1:07:52:88:65:31:02:37:19:09:aa:db:
d8:5a:d1:60:97:a9:bc:09:a3:cb:f7:62:93:fa:3a:
53:da:84:13:dc:cc:43:3e:d2:84:72:d7:27:90:45:
2c:9b:64:b0:43:2a:f7:84:5c:e2:d0:db:10:ca:b6:
96:52:4f:dc:23:79:2e:53:5b:da:34:67:12:ba:db:
62:7b:50:76:ae:78:60:3d:6a:c0:02:05:90:cf:90:
9b:bd:4e:cb:d8:16:74:f5:52:b7:4b:b4:b3:83:eb:
23:df:fd:71:df:d6:98:ca:2b:d2:ef:ce:b0:c9:7b:
25:87:61:35:2b:0a:3f:fd:f7:76:1c:1f:80:f5:65:
15:8e:ed:f9:fb:24:c4:f9:05:c0:32:b0:32:72:78:
52:d3:9e:67:c6:2d:34:5d:09:b1:21:d4:e8:fe:67:
a8:2f:15:f4:eb:9f:ae:35:fe:62:f3:16:3d:30:72:
59:95:f2:fa:9f:38:8e:90:05:4c:e1:7c:20:f0:67:
d7:b2:7c:8d:73:39:c1:07:9b:ca:8c:ed:2f:d3:f7:
ce:34:d0:cd:1e:7e:64:0f:2d:c0:37:45:fa:c3:2c:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:EA:59:FF:C7:E0:58:8C:33:7B:F6:91:15:1A:AC:96:FA:DC:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C681FCAC5EF011EF8DEC6C8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.34.0/24
Signature Algorithm: sha256WithRSAEncryption
46:bf:8c:f6:6b:f5:c2:eb:b1:14:35:b7:81:80:b5:22:2d:31:
c5:02:6f:1e:7e:b8:e8:da:18:d9:a1:c5:97:de:0a:6f:4f:77:
48:93:3a:f8:dc:54:0c:7b:7a:7f:47:23:97:28:60:14:88:66:
26:c3:ba:c1:5b:c7:04:1e:58:9a:4b:72:c9:15:fe:ce:7e:df:
2c:05:a7:29:3a:d5:97:97:62:3a:49:9d:75:8c:fe:fc:7f:76:
e1:31:aa:af:29:94:0c:00:2c:05:45:b3:4d:e8:fc:35:78:ef:
2a:c9:0a:53:43:e3:f5:28:53:a5:4a:8c:4a:04:f5:eb:12:fb:
82:20:3a:56:44:38:0e:95:a2:ab:c6:12:e4:97:c2:ff:fa:17:
a1:31:5f:ec:58:c2:8e:b3:0b:e9:71:4a:6d:35:61:2b:94:66:
5c:8a:71:e5:d6:c5:79:d3:c6:ab:10:cc:e5:c7:12:e8:ef:17:
0f:1d:c6:aa:22:ec:1f:4b:cc:e4:1f:ad:c0:f6:c7:b9:a6:96:
fd:43:6a:29:9e:c7:08:7c:30:01:d2:ef:e4:a9:5d:d1:9e:af:
a6:a4:9b:2d:6d:da:65:79:79:3d:eb:44:83:af:b3:49:9d:8b:
c7:b6:f4:2a:bb:b9:bc:18:be:5c:15:02:da:25:b7:76:68:ea:
07:c3:98:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKnaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODIwMTIzNjA1WhcNMjUwNTI3MTIzNjA1WjAYMRYw
FAYDVQQDEw02NmM0OGRiOS1kN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt/h9AxzjmYkAKs84HCjipC0S3swJL/sZycZ3I2sRqUHBB1KIZTECNxkJ
qtvYWtFgl6m8CaPL92KT+jpT2oQT3MxDPtKEctcnkEUsm2SwQyr3hFzi0NsQyraW
Uk/cI3kuU1vaNGcSuttie1B2rnhgPWrAAgWQz5CbvU7L2BZ09VK3S7Szg+sj3/1x
39aYyivS786wyXslh2E1Kwo//fd2HB+A9WUVju35+yTE+QXAMrAycnhS055nxi00
XQmxIdTo/meoLxX065+uNf5i8xY9MHJZlfL6nziOkAVM4Xwg8GfXsnyNcznBB5vK
jO0v0/fONNDNHn5kDy3AN0X6wywLhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDR1
6ln/x+BYjDN79pEVGqyW+tzwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjgxRkNBQzVFRjAxMUVGOERFQzZDOEU3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPsiMA0GCSqGSIb3DQEBCwUA
A4IBAQBGv4z2a/XC67EUNbeBgLUiLTHFAm8efrjo2hjZocWX3gpvT3dIkzr43FQM
e3p/RyOXKGAUiGYmw7rBW8cEHliaS3LJFf7Oft8sBacpOtWXl2I6SZ11jP78f3bh
MaqvKZQMACwFRbNN6Pw1eO8qyQpTQ+P1KFOlSoxKBPXrEvuCIDpWRDgOlaKrxhLk
l8L/+hehMV/sWMKOswvpcUptNWErlGZcinHl1sV508arEMzlxxLo7xcPHcaqIuwf
S8zkH63A9se5ppb9Q2opnscIfDAB0u/kqV3Rnq+mpJstbdpleXk960SDr7NJnYvH
tvQqu7m8GL5cFQLaJbd2aOoHw5i4
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org