Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/531317F0A45111EFB2D52D4C762E951A.roa
File: 531317F0A45111EFB2D52D4C762E951A.roa (raw, json)
Hash identifier: 6FjZqHgECSgLFiahnNPuL4KlBa9MMbSCmc6eXEULP6Q=
Subject key identifier: D9:CD:54:03:07:B2:8C:DF:53:CE:8D:8C:F0:93:DC:FE:91:2A:3F:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/531317F0A45111EFB2D52D4C762E951A.roa
Signing time: Sat 16 Nov 2024 19:31:06 +0000
ROA not before: Sat 16 Nov 2024 19:31:02 +0000
ROA not after: Tue 26 Nov 2024 19:31:02 +0000
asID: 62816
IP address blocks: 156.228.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54218 (0xd3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 19:31:02 2024 GMT
Not After : Nov 26 19:31:02 2024 GMT
Subject: CN=6738f2fa-2aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:b3:ee:e8:f3:a6:2c:42:b0:c9:b0:93:42:
0f:72:4e:9b:af:80:44:d8:62:e6:4c:e1:4b:a1:ac:
b1:eb:db:e5:67:77:36:79:a7:0f:51:db:d4:2c:b8:
b3:41:8e:b0:bf:ba:27:62:f2:60:41:d9:06:63:fa:
70:86:1b:49:5f:a4:96:17:1b:1c:d7:b1:12:f1:86:
eb:a3:90:0d:81:ac:79:92:c5:06:6e:64:ee:eb:14:
31:48:f0:e4:d3:2e:4e:03:44:c2:5f:51:0d:67:4e:
c0:9c:54:0b:6d:a8:8f:f1:11:dd:54:01:de:7a:06:
97:32:3e:b3:e0:0c:62:11:3b:7b:35:7f:a1:a4:92:
96:b9:97:23:de:18:8a:d3:dc:93:34:a6:7d:6c:cf:
0a:37:6d:48:cf:c7:a2:48:33:0a:a2:ff:46:ce:a6:
96:21:b8:38:a3:c3:04:e5:cc:0d:be:a1:b7:2a:a7:
21:14:f5:63:d1:82:8c:40:d4:f6:ac:b9:6b:7b:84:
a6:5e:a8:34:35:b1:f3:19:18:b3:5d:5c:10:ed:e4:
e0:5b:4d:b3:ec:2f:85:cc:30:64:50:c3:75:7e:54:
69:e0:a9:88:d6:9b:c2:11:58:25:18:21:a7:f9:68:
d0:22:90:55:32:3c:bc:28:9a:21:b8:3b:32:0c:6c:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CD:54:03:07:B2:8C:DF:53:CE:8D:8C:F0:93:DC:FE:91:2A:3F:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/531317F0A45111EFB2D52D4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:a3:74:4b:b9:93:60:1d:8b:e4:5c:0e:62:4f:9d:4d:0b:24:
0e:16:46:1e:51:4f:f7:f8:88:4d:04:de:25:0b:85:e7:79:e9:
d1:0f:8b:2f:f2:74:7a:20:98:67:a2:ac:39:c0:2b:cb:50:98:
51:5c:34:d6:16:1a:20:9a:7f:cb:34:50:20:06:e0:79:fc:48:
b0:cc:6a:a1:87:cb:ef:52:80:3b:a1:1d:ed:4d:1e:0c:52:05:
09:2d:71:17:66:e1:f8:c8:f1:f2:8c:63:ea:7d:b0:1a:80:7f:
e5:34:72:91:45:e6:51:1b:29:f5:5e:db:d4:99:bd:68:04:9e:
42:2d:e1:9b:3f:f1:8f:9b:ac:29:3b:bb:dc:04:31:d6:d7:22:
cf:15:3d:00:ea:ae:ce:ab:d8:9a:30:79:ac:36:26:b0:9d:45:
24:2e:d8:5b:ca:f1:6e:1d:36:34:36:0c:e0:7a:dc:84:c5:25:
68:5c:b8:2d:1a:c3:2a:4f:95:60:63:2b:63:b0:98:65:38:4a:
35:e7:36:98:f0:ee:23:3f:15:48:5a:61:f3:97:e9:76:34:16:
f8:6c:58:89:8a:c5:b1:b0:6f:91:89:29:59:51:c5:74:68:17:
9f:a3:c1:f1:ff:33:a6:67:58:00:41:1d:c7:67:15:a5:4c:e8:
0e:33:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org