Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF3CE1349CCD11EF90ECBE63762E951A.roa
File: CF3CE1349CCD11EF90ECBE63762E951A.roa (raw, json)
Hash identifier: OuUkL3EOW5atx6XY+c2Ro5db2DOrhpgz8M4b3Wg+0Ng=
Subject key identifier: 04:75:DD:45:A5:0A:DF:B8:28:0A:52:32:F7:EF:43:BC:38:FA:B2:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF3CE1349CCD11EF90ECBE63762E951A.roa
Signing time: Thu 07 Nov 2024 06:02:03 +0000
ROA not before: Thu 07 Nov 2024 06:01:59 +0000
ROA not after: Mon 02 Dec 2024 06:01:59 +0000
asID: 5068
IP address blocks: 156.225.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53169 (0xcfb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 06:01:59 2024 GMT
Not After : Dec 2 06:01:59 2024 GMT
Subject: CN=672c57db-0e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:62:d1:03:74:2a:f0:23:5f:e5:f1:e2:80:
2c:14:2d:e7:31:35:4e:d9:00:94:15:65:59:d2:ad:
22:b8:87:a9:8e:30:e4:31:04:30:96:a8:8b:1d:1c:
93:03:26:49:a6:d7:73:6e:34:32:62:41:20:0a:39:
5f:d6:be:41:62:4d:c6:83:b0:34:6b:68:3f:6b:26:
a5:c1:5b:6d:77:07:88:de:55:ab:8f:9f:99:4d:35:
35:42:42:d2:9e:61:94:90:8a:bd:dc:c8:66:d9:be:
29:0a:54:1a:6a:4a:70:c1:01:6d:d3:4a:19:0a:4a:
fd:89:0d:13:ca:b6:28:b8:7d:08:da:cb:ca:27:00:
a4:a3:54:53:e6:bb:30:47:64:13:40:28:67:2a:db:
04:98:e9:57:ec:46:61:b7:12:41:9e:15:41:f2:25:
d0:58:b3:f1:d9:3a:26:0f:1a:24:83:56:4a:da:af:
b6:76:66:f7:9d:92:b4:75:39:22:ac:23:b9:bc:ca:
75:ce:1c:80:ff:35:f3:d9:fe:d7:64:78:a5:5d:30:
fd:60:2d:21:02:e2:eb:a2:b2:41:c6:ad:a4:a8:3e:
88:02:2f:89:a6:4e:52:6a:38:94:bc:fc:fb:99:05:
48:a8:2e:4a:6d:55:dd:ce:e5:f0:bd:a6:74:69:81:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:75:DD:45:A5:0A:DF:B8:28:0A:52:32:F7:EF:43:BC:38:FA:B2:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF3CE1349CCD11EF90ECBE63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
Signature Algorithm: sha256WithRSAEncryption
08:99:92:7f:18:39:65:6e:65:07:82:c5:48:50:5c:b5:c4:75:
1d:31:66:ee:71:fd:cc:c1:05:7d:7f:3f:d1:60:2a:7f:30:0a:
3c:be:4c:47:c4:91:5d:13:d9:a5:e8:7e:4a:41:48:01:b4:09:
d6:9c:f7:fc:51:9a:47:a0:7e:e7:0a:5e:d4:87:af:59:fd:0c:
6f:5a:40:f4:62:b0:d4:ec:72:8f:7f:4a:c6:b7:1c:1e:87:f3:
6b:3a:16:ee:9a:3e:ee:83:c1:8b:7e:d5:3c:3d:56:61:e6:fe:
00:2a:04:a1:fe:db:ca:92:4c:af:6f:b8:8b:5b:76:c7:af:17:
af:c3:19:46:9c:c0:03:5b:1a:69:24:14:8e:57:2b:8a:22:b7:
e7:7b:ea:5d:b7:14:39:19:e0:a3:00:b2:9a:ac:bc:e3:dd:d2:
15:44:f0:66:11:33:6e:97:33:20:98:f9:39:4e:b9:3f:70:dd:
ed:e2:16:da:75:30:1e:3c:5c:96:f1:f5:13:e5:31:8a:6d:21:
27:57:36:0c:39:a3:37:51:eb:e9:23:f8:63:dc:78:6b:ed:71:
18:a6:51:f4:d9:38:c2:6c:9b:0e:5f:e5:bf:f7:f5:15:90:46:
83:93:6a:5a:9e:e9:e9:8a:35:e1:78:ec:f7:66:9f:77:f7:b8:
61:5f:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:48 2024 by rpki-client on console-fra.rpki-client.org