Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/419E11F88ACC11EF9D19C660762E951A.roa
File: 419E11F88ACC11EF9D19C660762E951A.roa (raw, json)
Hash identifier: J/9IIFRpp1e+7UPRTIKLIINeJVnj2nDFQgtL1IT7uBE=
Subject key identifier: E2:4E:C3:88:35:28:48:E6:E8:F5:25:3D:2C:0C:53:3E:FA:22:7C:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C4BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/419E11F88ACC11EF9D19C660762E951A.roa
Signing time: Tue 15 Oct 2024 08:05:35 +0000
ROA not before: Tue 15 Oct 2024 08:05:31 +0000
ROA not after: Wed 27 Nov 2024 08:05:31 +0000
asID: 20473
IP address blocks: 156.236.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50365 (0xc4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 08:05:31 2024 GMT
Not After : Nov 27 08:05:31 2024 GMT
Subject: CN=670e224f-a7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:86:e3:66:c2:93:98:01:84:af:fc:f9:50:
b4:e5:17:b6:3c:b9:42:ce:2e:7a:88:be:61:c3:f9:
7c:83:bb:88:6a:96:b3:70:d0:1d:17:45:c9:56:ce:
45:03:95:4c:ce:f1:92:bc:85:3c:ec:c4:ad:02:d7:
d5:88:2d:3c:92:8b:a1:79:fc:43:dc:3f:72:f9:c2:
bb:a8:e5:6a:8a:ed:9e:9b:60:42:62:10:e5:8a:92:
eb:d2:bd:75:9f:3a:91:69:21:b5:2b:43:03:d2:8f:
da:f5:7b:9f:cc:ec:2f:f2:d1:78:1f:72:e5:1e:e1:
0a:e5:16:c8:20:56:8e:d4:4a:d9:53:70:01:17:b3:
a9:aa:34:62:8c:cf:2f:5c:b9:d0:82:4d:cd:e7:20:
ba:2a:92:3a:bc:70:73:21:26:aa:2e:64:84:81:21:
3c:8f:8d:07:9f:2d:6f:28:82:c8:11:f6:53:49:19:
b3:41:8f:3d:7f:6c:2a:82:77:d4:7d:26:d5:fd:f2:
3e:74:e7:8e:6c:22:8d:81:3b:d5:be:fb:94:ce:04:
4a:0f:91:be:ba:c6:d3:ad:10:f9:57:41:82:6e:fa:
c0:7c:c5:10:a2:76:aa:cc:14:2f:b5:df:e8:c8:e3:
92:1e:4b:0a:89:d8:6e:34:a9:70:b5:91:4e:d0:66:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4E:C3:88:35:28:48:E6:E8:F5:25:3D:2C:0C:53:3E:FA:22:7C:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/419E11F88ACC11EF9D19C660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2d:24:99:28:4a:13:c2:b7:ee:ff:5a:7e:61:9b:b2:4d:ff:
d7:ec:14:fc:e1:da:9f:ae:cd:03:e4:0e:2c:60:59:8f:b1:44:
33:1e:3d:a9:c6:16:8f:77:11:5c:39:f3:1c:9a:6e:24:d6:2c:
8d:9f:ed:b1:57:63:9d:d4:4f:03:12:b6:a1:2c:cd:fb:6f:8f:
15:c1:0c:83:89:d0:72:e8:7e:1d:90:dd:8e:2e:f5:07:e8:c8:
31:32:be:e0:7f:8c:2a:b5:5a:38:ea:a7:32:46:17:d9:b4:23:
b9:17:7a:49:18:0e:50:30:3f:a1:79:7d:1a:26:8a:c5:98:74:
f3:46:a5:f8:24:55:c7:40:73:9b:cd:37:10:8e:f2:31:f7:b2:
32:51:b8:d2:1f:07:26:a4:a8:33:ab:a9:8d:e6:45:84:f2:0e:
c2:9f:43:9a:fa:2e:ee:22:45:bc:a3:3e:2e:ce:2d:3a:0a:50:
61:36:ee:e0:ce:92:f0:7d:17:fa:fc:ab:dc:43:13:01:02:33:
a4:c7:1c:e4:30:b4:5f:2a:35:e8:0c:b6:28:3d:29:a1:92:90:
b3:5e:f5:45:fe:8c:ca:e4:34:9d:d9:c4:d6:73:f7:f0:8d:4e:
b9:7c:81:d5:40:a4:95:f5:bf:7d:13:a2:d8:d6:e0:13:da:ca:
cd:6b:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:26 2024 by rpki-client on console-fra.rpki-client.org