Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3FAFA4A44D11EFB6D299AF762E951A.roa
File: 2A3FAFA4A44D11EFB6D299AF762E951A.roa (raw, json)
Hash identifier: vSdhv0ZZWeRadl9GTUy1MD+ma8Fq1+LLqSmTSCRbLpY=
Subject key identifier: 9F:BB:43:9F:9D:90:B2:70:36:57:F3:08:9B:FF:95:34:82:67:76:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3FAFA4A44D11EFB6D299AF762E951A.roa
Signing time: Sat 16 Nov 2024 19:01:20 +0000
ROA not before: Sat 16 Nov 2024 19:01:15 +0000
ROA not after: Mon 25 Nov 2024 19:01:15 +0000
asID: 3561
IP address blocks: 156.255.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54196 (0xd3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 19:01:15 2024 GMT
Not After : Nov 25 19:01:15 2024 GMT
Subject: CN=6738ec00-e840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:fb:f9:bd:58:72:10:d1:36:6e:16:62:55:
7e:bc:fb:7f:a7:d6:5d:be:4d:11:62:e6:5d:93:59:
ae:cb:12:9b:8f:6a:af:e9:81:05:1e:99:58:33:ad:
b7:a6:2e:a2:f9:a0:72:91:9e:ca:9d:4c:b7:29:01:
ab:3d:ed:85:e0:4d:eb:f1:a5:0f:5d:4b:2a:16:ed:
36:a2:b2:c6:c8:5b:27:e7:12:5c:db:ba:8f:fd:0e:
b8:c3:d3:3d:d2:81:9a:ab:c0:30:f3:0f:66:fe:80:
80:25:22:49:71:d4:b3:ff:ad:55:32:e9:83:7d:fd:
8a:26:78:6e:ee:c0:b0:27:5b:3e:d8:e9:f1:c4:e7:
a9:63:26:5d:2a:1e:86:3e:eb:61:f5:57:57:07:9c:
e4:47:f0:ea:8e:be:f7:f3:1e:a0:8b:8c:b6:28:3e:
a1:e2:3c:06:25:bd:e1:fe:c4:e4:0c:d4:3f:1d:fc:
32:c7:b7:ca:06:78:14:43:41:12:87:fc:5c:6a:07:
a2:29:8b:1b:27:d9:ae:17:88:a8:71:a3:18:0e:8d:
e5:35:d2:2a:67:f1:15:27:6f:94:62:91:cf:4b:f2:
dd:7d:3f:7d:2a:9f:d1:27:c5:28:33:49:cb:fc:13:
13:90:fd:57:a2:fd:23:68:f4:6b:5c:85:90:da:55:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:43:9F:9D:90:B2:70:36:57:F3:08:9B:FF:95:34:82:67:76:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A3FAFA4A44D11EFB6D299AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
26:d3:74:00:9d:f5:a8:55:02:c4:19:4f:74:35:66:16:f2:f3:
5c:41:84:49:da:17:ad:c2:5d:61:06:f7:02:ac:b0:95:23:65:
45:00:3c:c3:e2:ab:ed:d4:69:77:c6:5a:30:73:e3:86:a7:b1:
65:29:af:95:e1:5c:59:19:6c:c3:be:be:4f:34:49:ea:5a:1a:
61:85:90:e9:fa:e8:20:26:27:66:6e:79:9e:0e:07:05:b8:b8:
82:7d:94:ef:80:33:c8:3c:75:f2:65:34:45:19:6e:b6:14:cc:
15:3a:28:b3:cc:d9:1d:5c:8c:62:98:65:2f:8f:81:22:74:9b:
71:36:54:66:1c:2a:f7:df:00:74:88:7f:f6:5a:46:41:ed:1b:
49:10:39:eb:4c:4c:36:02:14:be:37:a1:59:a1:c4:5e:bf:99:
d7:24:26:5b:a7:f7:a0:29:8f:6a:3a:e4:de:d3:03:3b:15:df:
3a:83:f3:0e:84:f9:f1:f5:e3:7e:08:72:21:b4:66:44:47:a1:
14:d6:c1:70:56:ab:be:35:6c:7d:ce:62:d4:b6:92:52:60:32:
b4:08:94:76:8c:da:db:16:cf:fd:e9:7d:4e:0c:94:4a:38:93:
31:2d:78:32:33:88:48:f5:ca:8c:9a:c2:7e:60:09:ee:dc:54:
ff:47:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org