Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22444FD0A73611EF8B21677C762E951A.roa
File: 22444FD0A73611EF8B21677C762E951A.roa (raw, json)
Hash identifier: gdDusZErPP1ofGH3Bhoa10ir3QGr7w4NLIMfyiCKm/c=
Subject key identifier: DD:86:AF:56:0B:F0:3D:09:39:BA:A4:F3:63:4E:FB:97:74:A5:A7:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22444FD0A73611EF8B21677C762E951A.roa
Signing time: Wed 20 Nov 2024 11:54:02 +0000
ROA not before: Wed 20 Nov 2024 11:53:58 +0000
ROA not after: Sun 22 Dec 2024 11:53:58 +0000
asID: 23470
IP address blocks: 156.252.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54773 (0xd5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:53:58 2024 GMT
Not After : Dec 22 11:53:58 2024 GMT
Subject: CN=673dcdda-ec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:b2:b6:d5:13:65:ab:e0:0c:b0:bc:29:ee:
24:fe:17:9a:4e:6f:26:fb:95:90:d8:b0:bc:9f:bf:
b2:7b:37:bb:cb:b2:cd:23:64:48:30:47:b4:23:19:
6b:78:4b:f3:32:82:33:ef:76:ad:56:b4:7b:15:29:
51:07:af:94:f5:82:2f:c3:2e:ae:1f:2d:60:10:61:
3d:1b:4e:db:33:25:73:f3:82:f1:34:9f:bd:e4:6f:
90:c9:77:11:1c:ac:91:23:fb:30:7d:fc:c9:83:f8:
6d:a6:87:11:6f:8e:5d:1b:5e:41:a2:7c:92:f7:72:
d9:d3:8b:44:d1:80:dd:cd:cc:93:39:91:b9:4a:fb:
16:f5:27:f6:e4:86:54:7c:6f:84:dd:4a:8f:1d:27:
3a:c6:80:fe:0f:75:a9:75:11:21:60:d9:2a:96:b7:
04:5e:09:9c:e0:88:33:9b:a5:a2:71:ed:a7:d2:ea:
fa:e3:dc:8d:4d:53:34:70:0f:77:64:44:7f:8c:3c:
b8:c9:18:35:40:f4:37:c0:27:e6:40:98:97:4a:29:
0a:5d:f8:9d:fe:8e:52:3b:7d:aa:83:39:02:d8:69:
c8:5b:ac:9a:79:46:0f:a0:a4:66:3e:84:7a:03:e4:
4b:50:b9:70:c7:9b:5c:47:b4:4b:db:cf:f3:8c:d8:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:AF:56:0B:F0:3D:09:39:BA:A4:F3:63:4E:FB:97:74:A5:A7:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22444FD0A73611EF8B21677C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:52:4b:7f:4b:da:18:65:f7:68:17:7f:c3:61:40:9f:fc:56:
8a:cb:2f:b5:a7:c1:8c:71:1d:62:43:ed:3f:c4:95:b4:c5:eb:
79:b1:2c:f0:03:8e:15:d4:a0:81:83:9c:9e:da:7c:12:3c:a8:
91:7e:44:ee:ba:34:2e:e4:8b:46:19:72:39:17:b4:4c:f2:08:
7b:2c:0d:73:07:9b:df:98:bd:85:00:67:3a:69:f1:3b:3f:bf:
27:00:16:2e:8c:85:d7:11:cb:5f:d3:cc:33:32:04:a2:52:5c:
7f:cd:f5:b2:f1:62:eb:81:a1:28:62:fc:91:16:91:c9:13:94:
6b:f9:5a:50:84:5b:69:0e:7d:7d:4a:12:24:91:7c:6e:44:c6:
3c:54:b3:b1:20:eb:88:41:be:c6:8d:18:61:76:f1:39:95:ce:
7e:f2:f2:44:fe:c1:3a:8f:ef:96:a3:77:2e:23:73:0b:82:e8:
28:a1:9e:2b:e9:cb:dc:0c:cf:b4:c2:45:26:37:c1:fc:8e:a0:
f3:e7:0a:db:5f:94:10:0c:7b:34:39:46:8f:fb:81:36:3c:aa:
86:0d:45:b4:8a:4c:05:15:80:a7:cb:f2:68:fc:97:4a:35:6b:
a7:2d:55:c5:6a:2e:ed:cd:66:2d:cc:7d:c8:b5:1e:5a:40:2d:
21:3a:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org