Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/994677729EB011EF92EF70B5762E951A.roa
File: 994677729EB011EF92EF70B5762E951A.roa (raw, json)
Hash identifier: DI/Wcd0H5G61TRJiea/1K+7j4Zw2zveGd62vZPhbxks=
Subject key identifier: AB:13:41:B7:A8:0C:0B:4E:CE:81:AA:5C:35:F3:D4:DA:79:E5:D0:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D03D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/994677729EB011EF92EF70B5762E951A.roa
Signing time: Sat 09 Nov 2024 15:38:00 +0000
ROA not before: Sat 09 Nov 2024 15:37:56 +0000
ROA not after: Thu 12 Dec 2024 15:37:56 +0000
asID: 398993
IP address blocks: 156.231.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53309 (0xd03d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 15:37:56 2024 GMT
Not After : Dec 12 15:37:56 2024 GMT
Subject: CN=672f81d7-f0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:fb:9e:0b:29:f4:e3:b3:cc:90:d1:36:b3:
97:e7:24:36:ad:83:74:82:59:da:50:0b:3c:d6:5a:
2b:17:9b:7b:65:5a:74:4c:03:5b:a7:04:f6:1c:22:
a9:af:fd:18:f2:79:27:9b:48:27:b6:a8:64:47:f6:
ed:a3:32:02:64:28:aa:21:fb:b1:cc:1a:23:87:98:
e5:80:aa:c7:e9:cf:35:5a:b8:cb:bb:62:e4:04:e8:
0e:da:44:f9:88:15:e0:c1:8e:08:c0:de:96:4b:6f:
4e:54:7e:15:3d:cb:99:be:92:bb:ab:e7:04:49:14:
07:1a:c1:e2:f9:6e:00:a5:90:ff:70:4e:9e:1d:5f:
1d:9a:d8:70:8e:49:a1:2d:a8:6d:38:6a:76:9d:d3:
ff:f7:1a:80:ae:0e:fb:1e:6f:05:58:3b:67:0d:48:
70:67:eb:55:a6:2a:d5:14:d9:d4:8e:15:bc:72:58:
f2:42:a0:af:84:a5:7b:82:f2:7c:60:3f:e2:9f:ed:
00:ab:92:e9:84:5e:59:bc:ee:af:92:25:b4:88:fd:
da:99:75:09:24:01:5c:1b:db:91:ac:65:70:6b:66:
83:79:d4:0d:54:07:62:a5:65:26:3f:74:2a:9f:d6:
f8:82:c5:87:1d:7d:b5:96:8e:30:c3:72:bf:0b:e8:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:13:41:B7:A8:0C:0B:4E:CE:81:AA:5C:35:F3:D4:DA:79:E5:D0:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/994677729EB011EF92EF70B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.144.0/20
Signature Algorithm: sha256WithRSAEncryption
55:87:ae:f6:df:fd:eb:ba:8e:af:2e:12:f4:8a:4b:a2:6c:9a:
c9:8f:7a:7b:1c:33:56:cf:ee:c0:ac:09:c8:df:d5:48:a8:8e:
88:07:47:34:07:71:99:7f:02:88:df:f3:a4:08:5d:ff:9f:3d:
ff:b5:fb:6b:de:7f:fc:7c:e6:68:f9:32:a1:d1:1b:51:fe:c9:
2a:b1:13:47:e6:2b:31:9f:14:89:23:fd:00:58:a9:c8:10:fa:
03:6d:67:37:c4:f8:49:24:09:a6:cd:e4:fe:04:7a:3b:17:f8:
14:fb:78:db:72:dd:21:ba:d6:d5:0d:b8:d3:4d:a7:ec:55:2a:
d1:a0:ea:4d:99:77:21:5b:30:24:fe:39:d8:d3:24:d4:4b:67:
d1:ed:11:9f:4d:39:aa:e7:19:03:1a:42:fc:99:da:3b:31:da:
a6:bb:3c:3d:8d:ca:a5:8b:76:3b:38:77:2f:a3:48:50:0b:88:
ba:50:4b:c1:a9:3f:b8:6b:0f:fd:36:d0:8a:85:66:00:d4:21:
de:83:99:55:a0:91:4e:f5:f1:51:47:51:2e:2b:d9:34:b5:aa:
02:7b:ac:2b:e7:6c:f0:fc:ea:39:a4:00:79:b0:20:53:36:65:
0f:96:ef:e0:cc:a2:2b:dc:55:2d:5a:bc:ab:8d:09:05:52:17:
2e:e3:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org