Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40497C36A4C411EFBC8107A7762E951A.roa
File: 40497C36A4C411EFBC8107A7762E951A.roa (raw, json)
Hash identifier: BtPmOy4Pvcdk+lGqIzYNNYOYVNCNgxxmQkAWKEhoUpM=
Subject key identifier: 98:F0:FC:90:DE:0C:D5:AD:5F:A4:E6:05:F8:43:E9:75:5E:B3:83:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D483
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40497C36A4C411EFBC8107A7762E951A.roa
Signing time: Sun 17 Nov 2024 09:13:47 +0000
ROA not before: Sun 17 Nov 2024 09:13:43 +0000
ROA not after: Mon 25 Nov 2024 09:13:43 +0000
asID: 141167
IP address blocks: 156.228.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54403 (0xd483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:13:43 2024 GMT
Not After : Nov 25 09:13:43 2024 GMT
Subject: CN=6739b3cb-91c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:42:03:21:2e:53:13:1e:8b:dd:95:d5:61:
21:1d:04:5a:db:51:a2:c0:7e:e8:2e:3c:ce:70:17:
96:45:d2:97:f2:55:86:cd:16:45:e1:7a:39:86:93:
d0:31:1c:23:19:65:de:53:ec:f4:ca:64:c9:06:07:
ed:5c:9e:89:e1:6a:4b:d4:ba:d9:15:e1:ee:a8:63:
2d:c6:e3:f9:9f:e6:6c:91:47:72:02:fb:7d:68:cf:
6f:30:0b:cc:8d:33:d5:ce:74:d1:48:6b:d4:29:43:
34:12:57:dc:4b:e3:9d:91:74:d7:32:74:08:e4:74:
93:4c:26:9b:96:aa:44:fb:d3:35:8d:0d:2e:c9:07:
10:6d:d9:1d:e6:16:50:b1:ba:57:21:af:76:80:13:
07:99:1f:d7:a8:32:0d:dd:89:de:2d:b8:00:f7:b3:
6e:de:2c:62:0e:12:84:06:2f:b6:00:3c:10:b6:b2:
96:c4:a9:8d:95:33:a6:64:78:10:00:a3:68:bd:03:
ba:42:ee:83:51:55:9c:77:58:1c:7b:46:c3:9d:d6:
f7:52:ee:c3:ce:eb:fb:2a:6d:d0:c5:90:91:14:56:
5a:a7:2d:ac:60:00:23:4c:74:91:eb:54:82:94:23:
db:89:ff:eb:15:e9:de:c7:54:92:25:a1:7b:ee:ae:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F0:FC:90:DE:0C:D5:AD:5F:A4:E6:05:F8:43:E9:75:5E:B3:83:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40497C36A4C411EFBC8107A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c0:70:73:0b:47:06:c1:12:34:8e:60:5c:50:14:b8:50:23:
8b:e0:c7:55:ba:0e:02:1b:2e:b5:91:d8:40:92:0f:c0:1f:c9:
a7:2f:fc:91:5e:e7:8e:56:55:89:a0:02:ca:ce:fd:14:a8:9a:
80:74:f7:7d:ad:4e:06:1d:93:58:f6:12:c1:1a:6d:64:05:3b:
50:d5:a7:11:39:33:ce:78:f9:b1:c5:0e:a4:83:e1:eb:e3:32:
8b:b3:80:cc:30:b7:d1:ae:54:3b:1b:00:8f:56:57:5f:a8:41:
8a:ec:67:1b:b3:dc:8a:aa:07:ac:e4:7b:05:f3:b2:08:3a:8b:
3b:22:29:ac:fc:2f:d7:21:87:4b:bc:62:0b:ea:35:40:8f:9a:
ff:6f:d5:3b:96:3a:89:d3:a3:e2:f4:51:35:a3:2e:50:a5:38:
7c:f6:53:98:bf:c6:1d:fe:85:71:8d:9d:38:df:21:06:61:c0:
9b:62:95:95:3e:a1:00:f0:5c:21:4f:ef:0a:bb:91:cb:a8:6d:
15:8a:f2:b6:88:61:3c:72:75:ff:77:e5:85:9f:e3:c5:5f:28:
65:6d:df:61:73:29:56:97:07:5e:6e:ca:4d:87:63:3a:ed:e8:
56:91:3b:7d:90:dc:98:7b:ea:d4:c5:e4:0a:a3:b2:fa:a8:5c:
0f:50:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org