Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619F78389AB311EF8D82C095762E951A.roa
File: 619F78389AB311EF8D82C095762E951A.roa (raw, json)
Hash identifier: 2qoQs16AFG5jHCRo7krG6zoD/1N6D3T+HQXTAoN1ock=
Subject key identifier: 00:7D:38:A5:CB:1E:61:5A:73:E3:7D:4B:92:45:9D:90:FD:E7:8D:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619F78389AB311EF8D82C095762E951A.roa
Signing time: Mon 04 Nov 2024 13:47:50 +0000
ROA not before: Mon 04 Nov 2024 13:47:46 +0000
ROA not after: Tue 10 Dec 2024 13:47:46 +0000
asID: 149440
IP address blocks: 156.225.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52698 (0xcdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:47:46 2024 GMT
Not After : Dec 10 13:47:46 2024 GMT
Subject: CN=6728d086-e4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:86:62:c8:94:b4:e4:ee:44:70:31:99:0b:
de:73:34:4b:9b:dc:d2:93:93:73:42:11:82:dc:89:
01:35:57:84:6f:7c:6f:d4:b6:98:75:3a:bd:9c:97:
ea:ee:20:80:3a:af:eb:d1:e9:3e:92:bb:e7:9f:e5:
79:57:5b:d2:fe:b4:66:25:02:c1:f8:1b:39:95:0d:
e8:56:97:7d:db:04:0f:06:6a:c2:a0:f1:39:92:a6:
dd:a4:87:5e:61:15:a1:d2:fe:e7:e4:0b:50:f9:bc:
89:f9:22:f8:47:c8:b4:9c:7c:c6:0c:f2:54:af:ae:
d6:e3:72:3a:08:7e:6e:1e:68:95:a2:94:97:92:ec:
e4:b9:42:57:70:02:00:d2:37:1d:1b:65:f1:94:76:
47:af:40:35:be:1c:3c:47:29:5e:f7:93:d6:49:d4:
60:92:71:4c:48:d3:f3:2d:29:c8:da:9d:de:bf:c7:
60:1a:60:af:16:9c:81:53:b9:48:59:68:b8:11:76:
59:43:ca:4f:a3:95:e0:78:b4:66:12:80:7c:94:ba:
7f:72:70:54:bb:2d:7b:6a:b9:e0:f9:28:f8:0d:cf:
90:15:34:2e:61:47:ca:7b:47:13:35:d4:e5:1b:74:
a6:9e:8a:ea:6c:50:2a:23:68:5d:cd:51:5f:16:dc:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:38:A5:CB:1E:61:5A:73:E3:7D:4B:92:45:9D:90:FD:E7:8D:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619F78389AB311EF8D82C095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.64.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a5:83:9b:7c:f4:92:3f:84:46:61:c3:e9:7b:5a:b6:44:7f:
f2:00:fb:ba:68:de:b2:07:26:5e:85:1e:9b:1d:b6:4c:b3:e3:
eb:87:b5:ae:68:56:27:fb:3c:4f:78:a7:fd:96:6a:49:cd:8f:
78:df:0d:58:69:4f:9b:a2:73:18:e8:a4:e4:49:af:2c:0a:1e:
6a:ad:8b:b3:f2:e7:47:0d:29:00:5f:b5:2a:c5:eb:7b:47:35:
c3:90:78:0c:4d:77:9f:e9:39:34:1d:60:f0:fb:92:06:3b:2c:
1f:95:60:c0:f8:6d:4e:d7:94:54:65:62:14:95:cd:d8:dc:4e:
3b:99:a0:b6:6d:3f:03:87:74:84:c7:d2:ef:11:77:58:42:c2:
02:34:ce:7c:54:d5:42:b9:1b:22:c1:4a:42:fa:06:a0:29:0a:
79:3e:57:5c:15:3f:40:27:45:e8:6a:bc:bf:95:c6:10:bf:b7:
aa:c8:1e:e4:80:53:89:ec:35:eb:06:98:9b:a3:53:7b:b7:9b:
d4:f2:16:60:8f:ce:51:ae:02:be:3a:63:67:42:bf:b9:8c:5d:
f0:55:f2:98:b5:ae:13:39:d9:7d:43:74:e4:f7:c0:a7:bf:4c:
10:49:db:e8:2a:61:f4:0a:35:f3:1d:78:09:19:65:fe:bd:2a:
f2:e0:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org