Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C99DCA4C8C5911EF8FAD6CA2762E951A.roa
File: C99DCA4C8C5911EF8FAD6CA2762E951A.roa (raw, json)
Hash identifier: TXHD4t9I6522wnK2xaEOUXUV/ao20yLzXDo+HclAXj8=
Subject key identifier: FE:CF:0A:91:89:7E:4C:CE:0C:3B:CE:66:1B:5E:C7:B4:82:2F:49:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C5AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C99DCA4C8C5911EF8FAD6CA2762E951A.roa
Signing time: Thu 17 Oct 2024 07:31:13 +0000
ROA not before: Thu 17 Oct 2024 07:31:10 +0000
ROA not after: Sat 19 Apr 2025 07:31:10 +0000
asID: 33182
IP address blocks: 156.245.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50605 (0xc5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 17 07:31:10 2024 GMT
Not After : Apr 19 07:31:10 2025 GMT
Subject: CN=6710bd41-5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:b6:8c:2f:c0:ca:cd:fd:0f:6d:90:9d:da:
c2:12:07:a9:f0:2d:2f:bc:b1:88:3c:30:b4:ca:46:
0c:40:e2:5b:a9:1e:d8:16:80:d2:b0:ec:a3:c7:38:
5f:25:92:3c:2c:6f:2f:8e:c2:d5:27:b3:fe:a2:3f:
eb:76:3f:a3:4b:7d:f6:00:24:a2:f3:30:94:d0:b3:
55:b1:13:44:2f:2a:e6:5d:98:ff:0d:63:a8:8c:fe:
d2:18:b4:02:f9:08:cf:23:eb:4e:da:4e:89:f9:da:
2b:14:65:06:94:55:1f:95:92:7d:b3:eb:6a:36:e0:
a3:44:e9:67:7b:dc:1a:2a:c6:79:71:ed:3c:bd:17:
5c:0e:8b:db:bd:8c:b4:1e:31:22:a3:71:34:c2:77:
a3:83:4e:69:78:a3:b6:29:a8:8c:b3:f4:a5:f6:3e:
82:1c:f8:d0:4c:cb:73:f5:9f:10:1b:d0:9f:39:cc:
60:89:33:fe:36:4f:a4:d9:4a:a3:72:11:d1:1b:ca:
f3:10:ce:37:ec:5e:d4:1b:c0:da:6a:a6:18:8b:6d:
d6:b1:f1:5d:8d:55:fd:f6:4e:bd:4d:b4:8f:fd:74:
62:f5:da:0e:76:35:ef:f1:f2:d6:c0:f9:69:e5:7f:
df:18:6b:cc:cc:2e:1e:c0:10:15:e2:2d:7f:0f:2e:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:0A:91:89:7E:4C:CE:0C:3B:CE:66:1B:5E:C7:B4:82:2F:49:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C99DCA4C8C5911EF8FAD6CA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.5.0/24
Signature Algorithm: sha256WithRSAEncryption
37:05:31:67:46:72:01:09:66:b6:3b:3f:0c:9b:3d:f3:48:6e:
4e:66:27:fc:1b:50:91:1a:80:c6:aa:03:4b:4e:99:9a:7a:b4:
d9:65:06:fc:2e:41:41:de:c8:03:6d:15:ad:59:10:2e:6b:02:
87:ec:50:02:02:68:34:47:86:98:4d:74:f3:54:3a:0b:70:54:
83:bb:0d:42:cd:17:01:42:3d:f8:52:a6:97:c7:af:57:25:ac:
1a:f7:8c:db:d6:bb:5c:06:f6:3d:5f:73:54:09:c1:80:6d:dc:
c7:72:54:42:86:53:18:50:56:cd:fa:1d:78:6c:ad:24:28:ca:
8a:56:89:cf:80:fc:50:ea:be:09:d3:73:1f:4b:70:5b:9d:3b:
ab:73:55:77:99:9c:04:1a:58:71:64:64:af:74:90:9e:c9:3d:
dc:cd:d6:9d:b2:1c:ba:d5:d0:74:9d:e4:46:05:b9:7c:85:75:
67:5f:ba:2a:b0:95:08:ae:1d:56:b3:2b:65:00:b3:0e:73:13:
6d:11:dd:3d:ce:fc:ee:58:ef:85:3f:d6:2e:ba:79:1a:7a:3a:
59:2b:aa:3b:bc:c7:0e:19:1d:24:e8:f3:09:71:d8:04:38:34:
ec:4e:b1:8b:82:db:29:60:de:fa:9e:bd:a5:3d:e3:d5:7e:41:
98:40:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org