Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E52B3A09B7D11EF82F8D18D762E951A.roa
File: 0E52B3A09B7D11EF82F8D18D762E951A.roa (raw, json)
Hash identifier: 0GBN3NuNK9R5EjRxEXzM8aTrUuh3V0EhJkYXWQMq59A=
Subject key identifier: 73:ED:AC:4E:20:91:09:4C:FC:9E:46:58:74:44:C6:84:4F:3F:DF:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E52B3A09B7D11EF82F8D18D762E951A.roa
Signing time: Tue 05 Nov 2024 13:51:29 +0000
ROA not before: Tue 05 Nov 2024 13:51:25 +0000
ROA not after: Mon 13 Jan 2025 13:51:25 +0000
asID: 22773
IP address blocks: 156.238.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52861 (0xce7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:51:25 2024 GMT
Not After : Jan 13 13:51:25 2025 GMT
Subject: CN=672a22e0-fe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:9a:81:0f:1a:49:7c:7b:2e:3a:ae:4c:b9:
7a:6e:cf:ea:ba:72:62:71:0e:a5:f5:53:b0:af:83:
5a:35:4e:f9:e4:ba:14:a7:58:d2:27:68:fb:37:2a:
20:49:9e:a5:22:5e:0f:82:30:3d:e7:11:a2:68:d6:
87:6b:e7:d1:5e:7d:ad:c4:a5:d2:5e:ed:5a:2c:61:
83:c7:8e:a6:06:32:f7:4b:a9:80:0e:61:61:d4:5f:
55:6a:f7:c1:64:47:9b:7d:e0:0f:39:35:c8:f7:25:
1b:58:25:7f:84:8e:bb:2d:7f:5c:55:f9:73:ac:83:
4f:65:d2:06:02:ac:50:73:a7:65:2b:57:07:fc:e6:
7c:a8:76:5a:60:8c:50:c5:4c:4c:4f:94:10:dd:59:
0c:00:50:d7:01:d8:ea:85:aa:fa:27:d8:40:b7:ec:
51:d6:eb:6e:27:77:98:28:17:4b:7f:e9:c0:79:e9:
c8:a7:31:5d:43:82:27:a0:ce:d4:3c:50:17:6d:1c:
95:23:a7:a2:ae:ce:96:34:64:65:a0:77:52:75:2d:
06:58:cd:30:30:08:9b:ab:2a:11:ef:0f:58:8a:f3:
92:c2:bc:3b:45:0d:61:a9:2f:65:b0:2c:00:b0:08:
d4:3f:e7:0d:6d:ca:68:2d:30:3b:ae:e1:80:b5:2b:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:ED:AC:4E:20:91:09:4C:FC:9E:46:58:74:44:C6:84:4F:3F:DF:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E52B3A09B7D11EF82F8D18D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.28.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:96:a1:54:b0:b1:1c:61:4a:2f:78:ea:6d:a7:1e:37:23:34:
0e:0c:00:3d:32:0f:df:3b:31:38:47:83:0c:be:6a:92:77:3c:
6d:64:d9:b0:a4:1f:20:12:37:63:73:aa:4d:50:f4:00:94:83:
d2:72:a6:31:66:7b:01:21:69:83:b1:b8:5a:de:41:08:8f:2c:
63:7a:e1:71:7c:29:3c:16:94:96:61:7d:01:13:76:a5:94:c2:
fd:7a:23:b7:b8:48:e2:59:f2:e4:29:de:f9:7e:96:02:cc:8e:
da:a5:0c:02:7e:f7:ed:86:30:10:01:eb:f1:c0:8d:67:fd:58:
dd:d2:a1:56:dd:c1:92:35:7b:f6:05:15:d9:c4:4b:de:5f:6e:
09:f6:4d:ae:ba:a9:cd:3a:9b:b1:79:65:4b:d8:a1:75:17:74:
77:b3:4f:3c:94:4a:8e:90:5a:73:91:76:e3:65:f9:4e:7a:76:
3f:5d:f8:5d:dd:8f:6f:2d:d6:0d:f3:5b:d7:be:41:80:53:71:
48:74:f9:d7:0e:f9:97:f6:ee:aa:f0:e2:fa:37:12:cb:16:9c:
3c:b2:8f:ea:0f:76:e1:4c:2c:72:f7:91:8b:c8:d0:57:fc:91:
6a:62:c7:e7:50:b7:4a:5b:c8:9c:cd:58:12:25:0b:9b:5e:02:
e4:b2:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org