Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574C820887C711EF8C718BBA762E951A.roa
File: 574C820887C711EF8C718BBA762E951A.roa (raw, json)
Hash identifier: bceXpKW6+9myZaL9xHtZmNu1JHwPx+mZGVrdaYG2/nU=
Subject key identifier: 40:AE:3B:2A:78:CE:20:1C:D3:39:B2:C9:22:6F:29:DB:13:21:40:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C3CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574C820887C711EF8C718BBA762E951A.roa
Signing time: Fri 11 Oct 2024 11:52:51 +0000
ROA not before: Fri 11 Oct 2024 11:52:40 +0000
ROA not after: Sun 12 Oct 2025 11:52:40 +0000
asID: 136907
IP address blocks: 156.227.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50123 (0xc3cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 11:52:40 2024 GMT
Not After : Oct 12 11:52:40 2025 GMT
Subject: CN=67091193-6ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:a1:25:f9:89:aa:9b:43:5d:fb:0e:0d:56:
55:40:bf:69:32:b7:92:78:60:f9:21:d1:41:9d:9d:
37:8e:49:14:d4:4b:82:7f:1c:4b:d6:91:49:64:a7:
68:ce:e5:9c:02:ed:db:0a:d0:e7:aa:fd:89:1f:89:
ed:08:2b:04:06:49:33:ad:41:bd:4f:75:0b:29:b1:
f9:9e:11:ec:87:39:f9:25:a6:94:4b:c5:87:ab:58:
b1:1f:7b:4d:ea:b5:6f:7b:6d:ef:0e:1b:20:f7:0a:
71:8e:36:d0:ff:a8:32:13:20:54:0e:df:e3:eb:e9:
7f:ef:c6:92:34:4e:d5:2f:07:0d:17:28:1d:d4:2d:
54:cf:20:04:92:e2:ef:7d:5b:c3:21:9c:68:7b:fa:
c3:38:24:c0:03:eb:01:43:6e:4c:a5:31:ab:d6:6c:
d2:da:03:00:20:ad:32:c9:45:6a:8b:de:0c:9b:c2:
70:74:e6:21:77:24:c2:14:22:d7:97:fc:a5:7f:7a:
27:fa:50:77:ef:92:f0:a6:1e:c0:23:a2:c6:35:a1:
09:29:d7:26:ca:23:c9:fb:48:1f:8a:1f:75:7e:0b:
f1:e2:bb:70:54:eb:38:29:07:4a:43:62:c8:a6:ca:
49:91:08:be:9d:26:b0:34:4d:6d:28:4f:81:b1:da:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:3B:2A:78:CE:20:1C:D3:39:B2:C9:22:6F:29:DB:13:21:40:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574C820887C711EF8C718BBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.22.0/23
Signature Algorithm: sha256WithRSAEncryption
46:8d:f0:ee:fa:98:98:50:50:4c:99:77:c8:48:7e:18:1e:84:
21:59:30:da:db:9b:5b:da:b5:c4:25:0b:1c:73:9f:e3:d2:cb:
1f:1a:16:63:31:4d:79:c9:44:08:ef:a5:38:b4:7c:45:ee:af:
01:13:4d:a7:27:bf:c7:40:f5:5c:46:d4:f8:f6:d8:cf:75:f1:
08:e7:cd:59:ac:1a:ee:4c:36:c9:d1:b9:15:1a:21:f4:b6:42:
ae:f4:70:1f:7e:67:ad:2d:ca:1a:a3:90:1b:70:8b:6f:02:3d:
f0:d3:c6:48:6b:3e:40:f2:8a:66:ce:c6:4f:a2:d1:c3:dd:0c:
8a:fd:f7:3d:18:f9:61:43:dd:ba:36:4b:1e:fd:e9:34:a1:45:
c1:f9:28:0e:5e:01:db:07:6f:b8:12:33:61:1e:0c:7f:f7:31:
80:74:8e:ac:c0:7c:68:36:9f:a1:c0:d0:be:29:31:75:09:f5:
92:9c:f0:86:91:46:70:0f:97:02:6f:37:ea:58:7a:40:91:46:
35:07:6c:7f:a3:08:4b:49:70:23:92:1a:88:04:36:e3:0a:41:
57:9b:7d:6c:da:8f:07:42:0f:88:d1:90:87:d4:cb:88:5e:f7:
a8:59:37:80:19:ea:97:54:2d:df:f6:4f:cd:21:c8:2c:52:18:
6b:bc:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org