Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82571ACA19811EF828019AD762E951A.roa
File: C82571ACA19811EF828019AD762E951A.roa (raw, json)
Hash identifier: hkGXUCl3KUjyI1CBLEP2SkBvTzAbETs2BC+S9TrRO4k=
Subject key identifier: D0:A3:3A:05:C9:43:C7:09:E6:15:2D:E5:4E:D2:D6:CC:92:69:FB:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D242
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82571ACA19811EF828019AD762E951A.roa
Signing time: Wed 13 Nov 2024 08:25:04 +0000
ROA not before: Wed 13 Nov 2024 08:25:00 +0000
ROA not after: Fri 22 Nov 2024 08:25:00 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 08:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53826 (0xd242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 08:25:00 2024 GMT
Not After : Nov 22 08:25:00 2024 GMT
Subject: CN=67346260-0dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:d7:cc:0f:6e:0e:ba:f5:80:3a:23:65:6b:
cf:e7:54:a4:0c:07:44:7e:0f:e3:c9:7b:fd:fe:b5:
d7:9a:d3:25:9f:fc:19:88:c8:c3:2c:07:e4:4f:0b:
cb:a6:b5:73:28:65:ed:86:53:2a:fd:ea:42:9e:27:
f3:d5:10:cf:71:81:7a:14:44:72:4e:fa:66:07:9a:
21:c9:88:7f:36:e1:9a:6b:43:f1:db:c8:5a:20:d6:
54:34:e5:1d:53:4c:80:87:60:4b:0d:43:ee:4b:da:
db:71:42:4b:38:c3:2a:a4:9a:b4:01:a3:2d:94:8c:
0e:ee:4d:43:3d:41:a9:54:37:c4:30:f5:84:0b:8c:
3a:86:4e:e0:28:9e:d7:55:4b:f6:37:ba:b9:93:54:
a9:89:0d:97:de:f4:5c:c8:f3:f4:18:ee:dc:1e:36:
8f:97:89:29:bd:a6:51:6d:76:74:28:d2:80:40:30:
3a:27:14:01:b0:6f:93:c5:4b:2a:47:81:7c:b1:d5:
48:51:80:48:a0:08:c5:2c:39:3e:b1:f9:66:b4:28:
33:83:2d:ac:1c:9b:08:7b:da:21:8c:d8:a4:88:ed:
9c:99:05:9c:2c:5e:06:72:9f:50:60:08:df:7a:45:
c6:0d:a1:10:44:ec:ce:e9:06:73:c8:15:89:53:44:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:3A:05:C9:43:C7:09:E6:15:2D:E5:4E:D2:D6:CC:92:69:FB:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C82571ACA19811EF828019AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e6:c8:18:31:7c:54:ec:a6:27:40:7e:34:b7:02:dc:bd:bb:
5e:42:b3:f5:3b:6a:af:cb:9c:89:7e:96:8a:57:a7:f1:fe:1c:
de:98:02:3f:46:3d:17:8b:0e:fb:af:6e:7d:1e:57:bb:fe:76:
1c:49:6b:41:7e:fc:2d:9b:74:21:a7:15:9d:bd:6f:b2:e2:e9:
2d:56:6f:bb:4f:07:cd:a6:d0:52:59:3a:b0:b7:3e:5c:42:23:
82:55:ae:d7:44:d8:e5:9c:f4:dc:f1:0d:b8:e8:7e:e8:b8:ff:
03:9a:f7:32:bc:b1:9a:af:1a:10:58:df:27:06:86:78:c8:8f:
7a:3d:77:1a:58:1c:b1:d2:49:6d:e7:fe:0c:b4:7f:f1:8a:f5:
16:04:7e:8f:cc:c1:54:77:23:d9:a1:e6:67:c3:4b:be:d1:e2:
4a:bb:15:08:36:0e:c7:92:19:80:37:42:c8:f8:3b:80:8a:e0:
21:12:d0:e7:2e:81:4c:d5:70:86:45:7a:1f:58:34:d2:a5:d8:
7a:75:d3:cb:87:e0:cb:c3:3a:5b:ef:6b:61:e8:87:50:d8:a5:
78:37:15:f1:03:12:5f:4c:b3:80:c5:2d:64:4d:33:76:15:da:
05:ab:f2:e1:b6:c9:62:1d:d9:03:26:e9:6a:76:20:05:b5:b8:
a2:be:a7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org