Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3981DD85F1611EFB5978893762E951A.roa
File: D3981DD85F1611EFB5978893762E951A.roa (raw, json)
Hash identifier: gYMJZCP5z687BiDsKQNStXf4Uu5eMTOfwlACRS7BWHg=
Subject key identifier: 50:7C:59:DC:37:93:7B:1F:B7:1F:E2:46:38:AC:06:66:7C:67:54:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3981DD85F1611EFB5978893762E951A.roa
Signing time: Tue 20 Aug 2024 17:08:32 +0000
ROA not before: Tue 20 Aug 2024 17:08:28 +0000
ROA not after: Tue 21 Jan 2025 17:08:28 +0000
asID: 63199
IP address blocks: 156.230.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43624 (0xaa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:08:28 2024 GMT
Not After : Jan 21 17:08:28 2025 GMT
Subject: CN=66c4cd8f-3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:86:0d:3d:27:a1:fc:ef:85:57:2a:c0:25:
af:db:8e:04:09:b0:dd:3a:79:e9:48:2a:2b:88:56:
39:b3:25:d0:41:7e:40:ec:04:e1:92:a1:ff:93:a7:
b0:fd:6c:c1:d1:f0:19:f7:6d:ed:07:55:7f:1c:60:
55:5c:d2:52:35:e3:16:bc:56:0c:9c:fe:8a:d5:63:
73:9a:49:07:17:f3:49:96:fb:67:51:03:ae:15:77:
20:72:34:e0:47:64:c5:98:61:e4:52:65:62:c2:4d:
fd:e2:35:50:c6:70:7e:ef:c0:c7:ec:2b:57:10:fd:
57:5f:b5:19:2e:7c:9f:20:4a:44:d1:21:3f:cd:45:
fd:cc:72:47:14:cc:34:de:d5:e5:ff:6c:66:bc:25:
0e:71:e0:67:63:19:62:12:b9:b7:2e:f8:9e:31:f0:
48:4f:78:92:a6:01:80:93:5c:05:75:8e:20:30:45:
61:95:a5:7a:0d:77:03:87:ec:50:fa:64:60:31:64:
54:2e:48:03:26:70:a3:4e:99:bd:1e:f5:b2:c3:d6:
1b:ff:e6:4c:9a:5d:88:78:f3:52:74:ec:98:43:21:
20:c9:7a:d0:6b:61:1c:28:eb:19:8b:f3:6b:b8:24:
d9:e7:09:54:17:60:66:fb:6c:e9:03:57:b1:23:83:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7C:59:DC:37:93:7B:1F:B7:1F:E2:46:38:AC:06:66:7C:67:54:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3981DD85F1611EFB5978893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.48.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8b:fa:d6:fe:59:22:6c:66:76:3f:15:9b:06:eb:a6:60:8f:
2f:74:a9:f0:bc:b2:83:5a:89:46:42:43:5c:a7:8a:01:e6:1b:
e3:31:f1:9a:3f:6a:ba:99:06:1b:cb:13:fa:9b:3f:62:dd:45:
de:af:fe:ce:e5:4d:f3:a2:d9:cd:cb:b0:11:d2:4d:8d:d0:14:
1c:53:04:50:75:bd:f9:35:04:e9:e4:09:4b:06:2d:bb:81:67:
f8:44:fc:5f:a7:fa:39:5e:6f:24:a9:87:c1:cd:75:59:eb:ef:
fa:04:21:4c:ab:f6:fd:db:d8:4b:72:b0:e2:a2:88:10:f5:3e:
51:58:3b:3b:03:f6:c6:02:c8:a9:67:9e:ff:4a:32:d3:d4:a7:
32:c2:a2:e3:0a:e6:0a:79:44:77:aa:f6:6f:ba:88:f8:a9:c8:
c6:a0:ad:f7:e6:04:bd:f1:b4:b5:34:47:e8:f0:e0:87:b3:a2:
53:80:ae:32:5d:73:60:d1:79:2d:28:06:64:e8:73:1d:b9:1d:
55:a9:c7:a5:ab:4a:6d:eb:7d:f4:7d:b3:cf:d6:05:13:fd:f1:
be:67:d1:64:65:ee:ff:57:da:48:6b:b1:23:2a:9c:b4:1a:cb:
b7:fc:c8:b6:18:36:6d:2d:df:8e:38:0c:2e:e1:63:1e:55:e2:
89:f4:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:51 2024 by rpki-client on console-ams.rpki-client.org