Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43CB2DE87A4711EFBEF3BE40762E951A.roa
File: 43CB2DE87A4711EFBEF3BE40762E951A.roa (raw, json)
Hash identifier: vQEgk0tLpDPdKEnNr++T+y9pWRf6ti6LN0qRm+U29sA=
Subject key identifier: F2:2E:66:9C:D7:24:C9:2E:33:5A:F9:00:13:4F:71:7D:25:20:B3:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BA88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43CB2DE87A4711EFBEF3BE40762E951A.roa
Signing time: Tue 24 Sep 2024 07:33:17 +0000
ROA not before: Tue 24 Sep 2024 07:33:14 +0000
ROA not after: Sat 21 Dec 2024 07:33:14 +0000
asID: 328608
IP address blocks: 156.229.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47752 (0xba88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 07:33:14 2024 GMT
Not After : Dec 21 07:33:14 2024 GMT
Subject: CN=66f26b3d-d08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:b9:ab:c7:19:32:2b:5f:30:f2:80:39:eb:
36:99:22:bd:40:eb:2d:7f:d7:94:1b:b0:1c:5a:5e:
ed:7a:cc:e1:05:0d:15:c6:6c:53:a0:99:e7:a1:d9:
14:1c:ae:3a:a2:43:1e:24:60:af:bf:2f:2a:0b:a5:
5f:98:5b:3c:f0:26:dc:93:72:1d:94:89:22:98:02:
c4:23:40:9e:86:d0:01:51:13:c1:ca:7b:fd:00:33:
6a:43:6c:89:95:fb:25:bd:37:be:2f:3f:f9:1f:ee:
21:fb:71:7e:b3:6a:18:c7:04:33:57:e9:57:df:37:
61:0d:4b:17:ca:5a:3a:24:26:aa:39:3c:97:38:2e:
62:04:69:5f:23:27:c3:01:af:1a:94:c9:d3:5b:d6:
0a:04:23:66:a7:97:b4:ce:0d:4e:bf:f4:4a:ff:03:
7d:d8:2d:93:22:ce:77:02:b3:b5:4b:49:af:71:be:
ae:eb:46:14:40:35:74:bf:5b:ad:86:26:45:f3:a0:
cf:87:bc:f1:d3:dc:f7:8a:1c:ab:06:cc:7e:f6:92:
58:47:58:a9:fd:09:e1:10:20:ec:30:c8:6d:c9:1e:
69:e5:d6:30:a2:39:97:2a:40:ff:1e:e6:3f:1a:24:
53:62:ee:b1:61:c6:01:f0:c0:a7:dd:cb:6c:1a:8d:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:66:9C:D7:24:C9:2E:33:5A:F9:00:13:4F:71:7D:25:20:B3:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43CB2DE87A4711EFBEF3BE40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:24:3f:c1:1a:e6:34:58:c6:3c:a6:9c:ad:76:72:70:49:26:
03:06:f8:77:33:12:87:a1:21:42:4b:14:d5:70:f2:c3:b5:50:
3c:d4:71:2e:77:30:e7:24:eb:e4:73:86:e1:07:9d:8f:3a:91:
9d:10:03:39:7c:40:3b:73:99:cd:f7:1b:32:d3:52:92:cb:db:
2e:24:f0:23:8f:5b:7c:f6:d7:62:c4:83:eb:00:68:82:0e:12:
fe:33:02:1a:73:e9:96:9f:81:f3:c7:ae:8d:55:84:8c:c1:dd:
65:0d:e5:d0:0c:12:ab:eb:59:8f:0d:53:64:1a:bb:66:7a:30:
3a:49:f4:dc:ad:bd:27:94:65:61:3e:41:38:ac:59:41:11:b0:
0e:bb:25:c4:cd:e8:a6:0a:86:30:ef:75:0d:ab:4a:56:f7:1f:
97:44:3d:2e:82:19:33:f2:7a:00:0d:80:37:51:7f:09:33:2c:
4a:55:24:f6:cc:24:d3:5c:e2:0b:44:a7:7a:29:60:9d:42:c6:
99:ad:68:38:b1:a2:32:ea:57:21:0b:f4:f7:d4:45:25:41:03:
98:c9:cc:0c:e1:ce:6b:13:9b:6e:d5:93:78:61:ff:4e:17:5b:
02:e8:d2:04:9a:c0:f3:73:59:62:2f:a0:16:5a:af:18:2e:e5:
60:ad:84:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org