Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37B45F7C960611EF934D7393762E951A.roa
File: 37B45F7C960611EF934D7393762E951A.roa (raw, json)
Hash identifier: b7WHISbnCWMdT+PpIMxdAUoE9BDU4RIh4HlhTVfw2PA=
Subject key identifier: BE:01:A3:13:52:7C:B4:25:8E:FD:A6:04:C6:9B:77:B8:3D:28:EE:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37B45F7C960611EF934D7393762E951A.roa
Signing time: Tue 29 Oct 2024 14:58:12 +0000
ROA not before: Tue 29 Oct 2024 14:58:08 +0000
ROA not after: Sun 24 Nov 2024 14:58:08 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51728 (0xca10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 14:58:08 2024 GMT
Not After : Nov 24 14:58:08 2024 GMT
Subject: CN=6720f804-1c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:26:d6:d3:f4:63:f8:31:08:ca:90:44:34:
dc:8f:d2:79:49:67:d3:84:50:21:77:7a:bb:0a:00:
bd:be:78:4c:ee:5f:ac:bc:6e:bb:bf:9d:bc:36:82:
90:89:1e:50:d6:78:1f:f8:56:ef:5d:34:93:94:89:
e7:3a:3c:5e:1f:16:2e:90:d3:68:51:8d:7b:70:04:
6a:bb:99:7c:14:82:94:fc:04:dd:34:be:61:a0:65:
ac:a7:47:c2:e7:33:c7:68:6a:a5:71:7e:08:bd:73:
44:20:5d:cb:9c:89:7f:95:07:56:69:73:02:a9:07:
e3:6c:3f:fb:14:3d:fd:94:45:b8:5c:eb:fc:e7:65:
9b:d3:d9:d7:c4:4a:a7:59:5a:14:3b:38:62:d3:8a:
ee:85:16:a2:eb:45:f7:4b:51:3f:b7:f8:e0:b1:ba:
fc:eb:8e:02:81:34:37:e2:44:95:0a:44:0f:16:5a:
37:09:ae:2c:a5:fb:27:72:4a:23:9d:d4:c6:93:49:
5c:33:8f:1f:73:d0:e3:d5:9a:93:63:d8:1e:35:bb:
97:5b:a1:cb:59:3a:81:36:8e:14:0b:43:da:04:7e:
78:83:34:d2:e7:92:ea:49:9b:36:a2:36:4b:ee:91:
e6:d1:3f:6a:38:8e:a6:bf:e2:99:2c:e1:cb:e4:0f:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:A3:13:52:7C:B4:25:8E:FD:A6:04:C6:9B:77:B8:3D:28:EE:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37B45F7C960611EF934D7393762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0/24
Signature Algorithm: sha256WithRSAEncryption
18:65:4a:d9:c3:15:31:00:ee:c4:1e:09:71:6e:9c:a9:ef:71:
7f:72:f4:64:63:27:28:47:91:90:55:51:ca:d1:33:bb:7e:d4:
08:a0:a6:24:ca:e9:e2:48:53:f4:9b:14:66:04:3b:26:cf:a3:
f7:c1:3b:ea:c1:73:f0:ac:9f:0c:9a:4b:ba:01:47:dd:21:0e:
89:7d:34:75:4c:c3:76:97:fb:33:c7:52:26:fe:01:0f:26:4f:
35:76:4e:22:00:f5:2b:e4:dd:18:ed:61:7d:5d:df:98:2d:87:
98:5e:1e:f2:d3:79:df:51:96:ad:7e:ac:7a:1f:cc:12:f3:45:
f8:6c:49:40:c0:73:62:4c:9d:7f:d1:04:37:4b:b9:07:bb:3a:
0a:ae:1f:79:15:8e:b5:23:11:b7:a7:ae:fa:86:96:a6:ee:dd:
a4:f4:c5:87:92:65:ba:98:24:07:68:8d:2d:ad:72:4d:cb:c6:
05:08:d1:6d:c6:68:56:2f:e7:03:da:f6:5b:26:cf:74:6c:f6:
56:7f:a7:c9:41:a0:53:09:bc:8c:81:27:35:c9:ab:f8:14:60:
36:9c:04:96:d9:56:41:17:e3:f1:f5:13:df:46:27:20:1e:88:
ec:dd:76:f8:f7:52:ab:83:d4:bf:f1:29:a8:74:80:91:de:05:
2b:47:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org