Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DB402809AA911EF84218A56762E951A.roa
File: 4DB402809AA911EF84218A56762E951A.roa (raw, json)
Hash identifier: i00eRud4FhZVLYbbNpKtRxMeU9wkUMhjFOW5m9uL/dM=
Subject key identifier: 94:FB:42:27:E0:07:10:85:DA:32:67:1F:4F:A0:73:63:20:3B:23:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DB402809AA911EF84218A56762E951A.roa
Signing time: Mon 04 Nov 2024 12:35:42 +0000
ROA not before: Mon 04 Nov 2024 12:35:38 +0000
ROA not after: Tue 03 Dec 2024 12:35:38 +0000
asID: 54801
IP address blocks: 156.249.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52600 (0xcd78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:35:38 2024 GMT
Not After : Dec 3 12:35:38 2024 GMT
Subject: CN=6728bf9d-9b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:d7:46:0e:aa:09:e2:a9:92:57:4b:c6:1b:
db:db:d5:7a:cf:8f:d0:a4:ce:70:d0:c7:c5:7f:f1:
c9:04:8f:28:81:11:b6:70:dc:a0:4c:d4:2c:29:22:
de:82:85:11:2c:e7:ed:f4:c6:a8:96:04:2b:47:69:
98:a3:35:49:c3:63:da:27:4e:c3:89:fc:66:a5:1b:
34:9c:03:ce:e1:68:f7:53:5b:9b:a7:d8:63:1a:6a:
8c:e9:10:fc:a8:a1:9e:c3:e6:df:55:1a:0a:5a:f4:
bb:db:c8:c4:1b:60:a2:f5:d2:93:b5:fc:03:ff:5f:
0a:bb:27:9c:77:ac:76:b0:a6:27:b1:b2:c5:ab:51:
c0:aa:c1:42:34:8f:f1:b1:7d:43:59:dc:aa:27:57:
40:81:4c:ce:77:a8:c0:99:09:4f:81:a5:d6:44:74:
30:cf:76:17:be:79:31:65:bf:2e:c6:94:4e:69:fa:
1c:7a:a0:a5:b7:bc:4d:92:63:9e:b2:c5:a6:07:9a:
68:7f:f0:a2:b5:64:5c:9f:69:7b:39:9f:73:71:69:
16:d1:1d:06:dd:3c:63:dd:38:71:77:d7:13:e2:9b:
3d:6e:2e:63:33:08:8a:ac:86:31:56:ec:2c:fb:03:
26:60:4e:64:d6:7b:8b:bd:02:95:cc:5b:85:16:2b:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:42:27:E0:07:10:85:DA:32:67:1F:4F:A0:73:63:20:3B:23:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DB402809AA911EF84218A56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:6a:11:e7:c1:50:49:95:03:04:cf:0a:15:8b:dd:2c:e1:6b:
cf:e2:7b:06:e8:66:a8:db:af:b0:76:99:df:ff:b4:cc:b1:2d:
bd:13:81:9a:82:d3:a1:4a:db:f7:74:cc:a8:ba:07:b2:ab:3c:
29:39:0a:64:a4:7f:35:28:96:fc:e9:01:a7:23:e5:0b:68:00:
d1:ee:e0:ce:ff:f3:c9:f2:af:fd:7e:b7:8f:e7:b0:5a:3f:ba:
cc:ee:54:4b:9c:8e:3f:2c:ce:5e:7f:fa:ac:ef:a3:1d:b9:9d:
70:6a:54:9b:cd:0a:fc:b6:ce:a0:b1:30:8b:16:4e:bf:9c:c6:
a7:c6:62:5e:8f:a4:aa:bb:05:9c:67:e3:67:6c:9f:8b:2f:37:
e7:58:82:dc:1c:31:19:03:f5:e4:c4:eb:bc:ff:01:cd:c6:aa:
e7:01:85:5b:99:94:72:56:4a:0b:ad:07:35:56:b7:82:81:91:
dc:21:f2:7c:bd:48:92:e1:f0:9d:57:c0:98:3f:12:c6:c7:24:
68:88:0d:d5:a9:29:1f:2b:9c:12:d8:a3:24:e4:90:8a:8e:ba:
d9:dc:0a:3c:46:4d:b6:5a:79:d3:40:33:26:c7:fe:54:85:a3:
ed:4b:ab:09:b7:b9:54:2f:0a:8e:02:f1:ed:15:cf:f3:61:f0:
9c:1a:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org