Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A044C68BA111EFAA94EA94762E951A.roa
File: 09A044C68BA111EFAA94EA94762E951A.roa (raw, json)
Hash identifier: IiOUP/taygUphU5znW+jMIv383Fr2pW4P7XDcZ4S0PA=
Subject key identifier: 95:2A:E4:75:93:BE:65:1B:95:B1:AB:56:53:B9:04:27:9D:17:18:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C556
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A044C68BA111EFAA94EA94762E951A.roa
Signing time: Wed 16 Oct 2024 09:28:44 +0000
ROA not before: Wed 16 Oct 2024 09:28:40 +0000
ROA not after: Wed 27 Nov 2024 09:28:40 +0000
asID: 20473
IP address blocks: 156.236.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50518 (0xc556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:28:40 2024 GMT
Not After : Nov 27 09:28:40 2024 GMT
Subject: CN=670f874c-b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:34:19:c5:78:4f:9b:f4:a8:19:ee:04:55:
22:1c:61:0d:15:e3:d4:75:9b:76:58:67:b1:9c:72:
4d:07:9f:e2:61:c7:ce:62:08:24:c1:2e:39:8b:94:
c9:96:7d:35:bc:07:44:2a:e4:f4:17:7a:d9:d4:3d:
7d:97:1c:2e:80:d2:f9:35:ae:30:0c:e4:e8:60:1a:
5c:3c:bb:77:d2:11:f8:4b:0f:3b:4f:1f:96:04:5c:
fe:8b:4e:c2:c4:42:84:8c:35:00:14:05:1b:10:e1:
1d:ec:10:1a:0a:3e:ac:ae:8d:e6:f7:53:49:da:13:
60:64:94:07:97:5f:4f:aa:17:bd:96:50:2a:f0:e2:
66:19:12:8d:8c:47:06:60:ba:08:9f:92:4b:02:b3:
f1:65:2f:ca:f0:07:ba:6a:d7:2e:25:8d:b0:e3:e0:
59:46:82:84:a5:01:7e:e2:31:36:23:30:e5:38:01:
97:3a:7f:33:4a:0b:b3:81:0d:0c:aa:ed:4b:6f:3b:
59:8c:8d:5c:6f:5a:7d:10:ba:42:dc:62:0e:97:0a:
ab:b2:1f:7f:9e:42:13:1c:af:64:6b:45:cf:89:3c:
a1:bf:f9:d0:64:cf:8b:02:2b:ca:e0:df:97:1b:bc:
38:f8:35:85:75:9d:64:ac:77:55:36:5d:f4:5a:c6:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:E4:75:93:BE:65:1B:95:B1:AB:56:53:B9:04:27:9D:17:18:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A044C68BA111EFAA94EA94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.78.0/23
Signature Algorithm: sha256WithRSAEncryption
30:28:bf:64:f0:ac:a1:e9:b0:13:15:0d:1d:52:ba:7d:c3:99:
e8:47:8f:fa:8a:8a:22:28:ec:8e:44:77:29:f7:aa:57:2f:fa:
73:f8:dd:74:1a:06:16:20:97:38:bb:95:12:75:a6:61:14:ef:
0e:a7:4e:b6:6b:ab:9e:f2:74:af:3a:5a:91:5a:c9:ed:aa:18:
b0:ff:c7:8b:15:bf:ed:93:8b:8b:0e:e7:b4:ea:c5:fe:e7:2e:
2d:66:a7:f9:ad:10:b3:84:15:c5:2f:2c:50:7d:77:4d:59:8c:
f4:a5:ad:e7:66:55:cd:78:ac:12:2b:fa:78:00:1d:3c:44:cf:
a3:d5:04:49:97:47:11:b1:bc:02:4a:37:2c:2b:5d:ba:b6:13:
bf:00:43:d5:71:0c:83:a2:d8:69:a8:8f:79:9a:61:07:f5:de:
21:f1:9e:23:42:6f:15:a5:e9:c6:1c:38:fb:7e:71:1a:40:17:
84:fa:2a:76:c3:f9:28:6e:b9:ff:29:c1:49:2c:9c:eb:d2:59:
c2:76:6e:5d:75:a4:6e:3b:e0:b1:bb:98:3c:b0:30:e2:a0:3c:
26:01:48:8b:94:8a:b6:7d:ac:0e:3a:6e:6d:7d:a5:0e:f9:a1:
2c:bc:a5:63:80:1c:42:ae:ea:b9:0c:f1:b8:5a:73:0b:cc:69:
71:39:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:18 2024 by rpki-client on console-ams.rpki-client.org