Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3A8082A4CD11EF87C6CE5E762E951A.roa
File: 1E3A8082A4CD11EF87C6CE5E762E951A.roa (raw, json)
Hash identifier: oodiUIHRvzsEhyGt+dq2g+RPwTctEaW9SqRXl1BeLC0=
Subject key identifier: 29:DE:64:CC:CB:44:2D:55:71:EE:FB:C1:32:3A:93:1A:CE:4A:A0:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3A8082A4CD11EF87C6CE5E762E951A.roa
Signing time: Sun 17 Nov 2024 10:17:16 +0000
ROA not before: Sun 17 Nov 2024 10:17:12 +0000
ROA not after: Mon 25 Nov 2024 10:17:12 +0000
asID: 3561
IP address blocks: 156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54475 (0xd4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:17:12 2024 GMT
Not After : Nov 25 10:17:12 2024 GMT
Subject: CN=6739c2ab-1b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:54:e4:fe:1c:9c:03:85:aa:e3:10:c4:e0:
ba:d4:48:e1:b8:30:ac:c5:a5:6c:6c:d2:ee:3b:95:
f4:f8:da:2c:95:60:a7:40:a5:53:b5:b0:61:f2:35:
94:99:16:cb:7b:66:0c:6c:0e:af:2f:c8:64:f0:e7:
fd:35:3e:23:79:25:62:3d:23:f5:d7:5b:97:70:6f:
4f:f5:09:2f:20:f7:74:2c:3c:1f:fd:7f:56:78:15:
f6:b6:dc:35:59:bd:f5:d6:83:8b:18:3a:d7:f0:76:
b8:08:0a:bd:73:d7:f1:d6:67:17:41:fb:e3:bd:f6:
5f:d9:b1:2e:20:c4:72:26:15:de:56:f2:df:21:69:
a8:64:66:d6:e6:79:e4:ed:69:15:36:bd:ff:93:2e:
58:a1:c5:ce:39:8b:1b:78:6d:4f:b9:da:ed:e2:9c:
8e:f0:8e:f8:18:2c:3e:f6:ba:65:af:a8:f2:39:1c:
85:f6:27:25:29:84:c3:5d:2a:0b:1f:6a:82:b3:d0:
29:2b:a5:f2:cd:66:83:8e:98:df:b9:81:97:08:e9:
14:2f:ee:76:d3:b5:d9:da:52:80:47:49:a1:d9:a3:
6f:ac:aa:5f:11:4f:01:cf:d5:a7:7f:e0:36:40:89:
d7:df:3e:d1:e9:20:f7:7e:e7:e1:1b:4e:c9:86:eb:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DE:64:CC:CB:44:2D:55:71:EE:FB:C1:32:3A:93:1A:CE:4A:A0:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E3A8082A4CD11EF87C6CE5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
76:29:c2:df:d2:94:c4:42:3e:a3:67:2a:ca:4c:05:32:66:ec:
94:bf:eb:7d:28:f7:8f:be:30:3c:60:0e:6d:b2:f6:79:05:2a:
a5:d0:cd:3d:fb:86:8b:35:98:21:ca:9c:c3:1c:16:71:fd:bc:
24:c8:d0:1f:76:8f:2b:ad:3e:32:8c:d3:ea:52:21:08:50:d9:
b9:6e:0f:ba:4c:c4:dc:42:cf:2e:09:c4:ae:13:18:83:10:20:
3f:1b:28:5d:fa:c5:8f:ff:b2:9e:54:f3:a0:bc:a8:ca:6c:3b:
70:26:d6:90:1c:4c:00:31:1c:f8:c7:3c:88:77:25:33:04:c8:
2d:75:d6:5c:49:6e:b5:b6:f7:bc:23:14:f6:c1:09:6a:9f:58:
d1:26:ec:74:63:c4:64:a0:9d:7c:8b:72:34:4e:95:88:90:c5:
51:af:2a:0d:2c:c8:75:15:08:15:98:41:9a:b9:a4:6e:aa:2b:
cb:eb:22:0a:8c:37:55:f1:c9:89:4c:4c:45:c9:7c:da:43:4a:
e5:ab:80:5f:7f:b1:b4:67:c5:3a:76:e7:9d:b1:d0:29:71:ac:
2a:68:49:e2:b0:56:10:6b:e2:80:2f:22:5d:74:56:4e:8e:f6:
55:74:40:47:09:a9:0d:db:52:51:a0:0b:32:d7:bb:1c:9a:3d:
4c:6d:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org