Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/492AD204A0E211EF91FEE685762E951A.roa
File: 492AD204A0E211EF91FEE685762E951A.roa (raw, json)
Hash identifier: JsyJlCSmb+fxxNryeWz4urn8RAC4w6RyDICwO2HmjJI=
Subject key identifier: 28:D6:AC:DA:76:07:E0:C8:E1:B8:9C:D5:38:6B:B3:CF:5D:FE:AD:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/492AD204A0E211EF91FEE685762E951A.roa
Signing time: Tue 12 Nov 2024 10:38:42 +0000
ROA not before: Tue 12 Nov 2024 10:38:39 +0000
ROA not after: Fri 22 Nov 2024 10:38:39 +0000
asID: 5065
IP address blocks: 156.255.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53657 (0xd199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:38:39 2024 GMT
Not After : Nov 22 10:38:39 2024 GMT
Subject: CN=67333032-e6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:0a:ce:01:b4:58:41:e0:26:67:6b:e8:72:
b1:bc:8a:1c:1c:13:8f:70:7a:a5:2a:17:31:f9:f9:
80:c3:1f:0d:f2:0f:75:70:46:ab:ff:77:84:37:e8:
f6:46:83:19:5a:ca:86:28:b4:d8:44:7f:ac:41:01:
64:4a:d4:92:d2:a2:2f:73:85:3e:92:1a:f7:2d:df:
6b:b3:df:46:68:5f:dd:8d:4b:9f:41:b7:32:7a:9a:
d7:2e:89:91:e7:82:81:c2:93:7e:f1:68:8c:9b:7e:
a6:b5:5f:48:95:b8:2e:f8:45:9d:33:9d:c9:17:17:
36:44:74:16:74:83:df:04:f6:cb:35:4d:cb:43:8c:
e0:50:3d:35:f7:be:35:47:33:59:24:a5:78:cf:7b:
a0:61:88:8d:96:95:34:e2:cf:5c:85:fe:94:de:9f:
0b:69:1f:c6:89:65:ec:3d:40:1a:dc:67:7c:5b:87:
a4:f6:b9:ba:cf:1a:99:5b:ad:9b:1d:e8:4f:1b:87:
72:e2:1c:99:58:36:53:34:9b:77:8e:fe:58:fe:f6:
e5:f9:26:a8:db:19:8b:b5:77:bd:37:ba:22:bd:04:
fc:0e:99:92:6a:0a:cb:28:30:82:53:8c:80:b5:27:
26:cd:c0:10:77:49:b5:b0:21:1b:8b:14:25:09:fd:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:AC:DA:76:07:E0:C8:E1:B8:9C:D5:38:6B:B3:CF:5D:FE:AD:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/492AD204A0E211EF91FEE685762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:62:aa:f2:5c:ae:e8:7b:c0:b2:29:bf:6c:96:a0:8d:34:8e:
29:82:85:21:73:53:c8:90:6b:75:93:90:e5:e6:0d:cb:12:c3:
5d:08:aa:5e:82:ef:63:cf:61:3f:06:9c:64:92:2a:7b:f1:5a:
b3:5c:84:6e:42:49:40:a9:36:6d:d1:80:b0:f5:b4:f1:de:bb:
6a:c3:94:65:d0:13:7e:de:f1:31:44:d8:f4:c3:61:97:d7:e9:
6e:27:8c:28:4b:f4:9d:a6:1d:33:ff:6b:70:6a:c0:c1:5c:78:
b1:1d:ad:ef:b3:bc:18:41:7e:98:b3:ba:8c:f3:c6:77:5d:8d:
31:59:ae:11:af:e1:e0:9b:07:b7:a1:9b:b3:3a:cd:a3:50:72:
22:14:c4:a2:de:5e:da:07:86:39:b9:96:5e:6d:28:86:f6:9c:
db:f7:40:77:2b:f7:2d:f4:cb:40:11:b7:b8:1c:40:da:18:a2:
47:34:4d:89:b4:7c:97:f0:0c:03:93:cb:ed:e0:f3:14:9b:0e:
9f:fb:fd:fb:18:f2:2c:8a:e6:b5:c4:aa:9f:94:3f:31:e1:bd:
7b:ad:23:73:85:f7:63:bb:a9:19:c9:cc:b5:e6:97:fe:31:ad:
51:f6:f0:be:6a:44:d6:25:02:23:15:91:1d:18:f5:c1:f9:12:
ba:4e:f9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org