Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96E34825EEC11EFA9CC5C76762E951A.roa
File: E96E34825EEC11EFA9CC5C76762E951A.roa (raw, json)
Hash identifier: e2sR4UCMOtfRl/RE6Qy7uhkTsHC9qCuF0N2o8WQptsA=
Subject key identifier: 37:DB:0A:BA:2D:83:B8:32:83:BD:28:03:FA:F6:C0:14:51:4D:B8:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96E34825EEC11EFA9CC5C76762E951A.roa
Signing time: Tue 20 Aug 2024 12:08:29 +0000
ROA not before: Tue 20 Aug 2024 12:08:26 +0000
ROA not after: Tue 27 May 2025 12:08:26 +0000
asID: 399077
IP address blocks: 156.251.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43434 (0xa9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:08:26 2024 GMT
Not After : May 27 12:08:26 2025 GMT
Subject: CN=66c4873d-77a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:23:87:2f:b2:ce:92:4c:83:54:4b:e5:40:
43:ca:41:90:4d:42:ce:0b:16:5a:74:77:ee:4f:99:
5e:f2:20:1e:20:b5:88:37:5c:2c:97:8e:30:4b:24:
7e:97:92:36:f5:e5:22:b2:26:09:e5:f9:65:c6:87:
dd:f5:3b:d8:72:50:02:81:93:9c:21:97:9d:e5:77:
a0:fe:89:f7:62:d1:75:b6:d4:e5:2f:a3:ab:04:5c:
84:03:f0:ee:1a:62:b9:c5:b7:ff:e5:15:58:4c:57:
9a:56:a9:27:0c:c3:8c:59:8e:95:68:6e:1b:ee:b3:
34:e8:dc:ad:59:41:d7:c4:5f:05:8e:79:7a:ee:7e:
11:d7:d7:82:2a:6a:8c:01:ad:60:7f:b6:63:94:e0:
c4:0f:c8:91:da:d1:a1:53:6f:f9:15:d6:f6:64:86:
33:7d:80:ed:98:6d:6d:b2:d5:1c:8a:30:8e:34:89:
46:79:26:2b:39:50:94:14:39:58:90:70:74:19:c4:
bc:01:80:bc:41:17:ef:4a:6b:4c:45:33:6a:0c:de:
4a:b4:14:a2:a9:b7:31:be:00:1d:8b:b4:51:46:d5:
bd:80:76:63:54:c5:69:83:fa:88:aa:28:b7:45:a3:
b4:2a:6a:af:bc:da:69:b3:af:f8:f2:34:a5:1b:4e:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:0A:BA:2D:83:B8:32:83:BD:28:03:FA:F6:C0:14:51:4D:B8:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96E34825EEC11EFA9CC5C76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.62.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bb:5b:04:c4:3f:21:e7:ac:e1:36:64:25:66:42:35:a6:68:
8a:c2:64:86:70:b9:07:72:cd:a5:67:4c:cc:11:02:58:49:f0:
53:74:ec:09:0e:fd:ba:de:32:ed:66:04:b3:fa:86:ab:2d:e2:
d0:cd:16:71:bb:d3:3a:b5:93:13:df:0b:4c:ce:ec:84:1a:62:
cf:36:48:3a:fe:63:d9:7f:6a:22:d5:36:38:41:6c:89:20:e6:
95:65:4f:66:2e:95:d4:a7:3d:42:ee:1c:ff:5a:8f:cb:98:66:
2a:22:63:f6:0b:c1:5d:72:a0:d7:8b:ae:00:aa:bc:aa:c7:a6:
d4:d0:60:11:77:9c:b7:6b:cf:d2:a0:05:ac:57:74:ec:86:89:
30:e6:9c:ab:27:9b:0c:58:69:e7:81:de:34:d9:74:9e:52:99:
76:85:02:81:c7:61:87:f1:ab:76:35:d4:89:3f:6a:dd:c6:b2:
09:fc:93:55:05:c3:2c:9d:42:e4:5e:4f:58:57:a5:f1:05:f4:
2c:7e:55:46:19:4f:29:ee:59:af:03:22:ef:a0:34:11:7b:70:
0f:26:3b:c4:2d:65:28:fb:1a:ed:19:b7:02:c3:86:1d:76:70:
5c:a6:57:fb:88:e2:89:e4:eb:9f:6c:69:61:ba:bd:77:c5:57:
a2:20:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:54 2024 by rpki-client on console-ams.rpki-client.org