Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAF34A5C7E3E11EF901811B5762E951A.roa
File: DAF34A5C7E3E11EF901811B5762E951A.roa (raw, json)
Hash identifier: BtZ6+8e+Arl5fV0U6BrlYuLqKjzVN3wA8OIpwt/18kA=
Subject key identifier: B7:6A:5C:EF:36:40:27:01:4C:BE:2C:07:85:C6:66:C6:64:DB:35:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAF34A5C7E3E11EF901811B5762E951A.roa
Signing time: Sun 29 Sep 2024 08:43:10 +0000
ROA not before: Sun 29 Sep 2024 08:43:06 +0000
ROA not after: Mon 30 Dec 2024 08:43:06 +0000
asID: 17561
IP address blocks: 156.240.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48269 (0xbc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:43:06 2024 GMT
Not After : Dec 30 08:43:06 2024 GMT
Subject: CN=66f9131e-f5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:df:0d:96:99:b9:2d:00:01:e3:0f:4c:f4:
61:0e:2d:4d:e2:45:7d:a1:32:a9:fa:df:46:7a:e0:
b6:58:a8:6b:37:e2:1e:be:0b:97:61:65:ae:0f:04:
a7:39:da:82:db:76:b4:93:86:29:b4:9b:1e:6c:65:
5d:d0:ca:57:43:22:bd:bd:79:6e:74:08:46:dc:95:
d7:69:30:47:43:32:d6:79:1a:0c:e9:c6:1e:5c:58:
c1:06:af:b7:7b:48:6a:c0:03:a1:8a:32:2f:00:dd:
3d:62:a4:49:92:ca:2a:1d:93:9b:ad:3e:a9:b6:d2:
88:e9:6d:a0:fe:6a:f0:95:04:c5:ab:4f:04:40:63:
81:4a:e5:ce:8b:35:46:c6:2e:53:f7:a4:3b:51:aa:
df:80:35:73:21:88:53:68:70:bd:8a:c7:dd:cb:05:
0b:b9:d4:c7:53:22:dc:72:81:40:6b:b4:17:bd:cf:
b0:db:d7:6e:a7:c5:4b:bb:2a:a3:0d:f2:b7:92:e6:
1f:d5:af:3f:d9:a1:a1:40:37:63:68:b5:0c:bf:5e:
2d:11:7f:b8:c3:d0:71:85:02:38:ec:c2:98:3b:bd:
c3:3d:78:5c:c8:54:31:e5:96:a3:ed:c2:c0:6a:2e:
37:27:f0:dd:12:2e:4d:29:a6:d0:47:7a:5c:fd:bb:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6A:5C:EF:36:40:27:01:4C:BE:2C:07:85:C6:66:C6:64:DB:35:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAF34A5C7E3E11EF901811B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4e:1b:94:c1:6a:d4:1f:85:95:cb:38:00:62:3d:b9:79:b5:
92:ba:02:51:9b:29:01:c6:83:ed:38:72:bb:ac:36:6b:e0:14:
21:49:ad:0e:b3:d1:97:0e:de:8c:00:06:27:98:a4:a9:d2:29:
3d:b3:e1:d7:45:27:0a:82:bc:6f:e3:1b:1b:ed:76:12:c5:d3:
e8:b1:8e:96:b9:fb:1f:b2:ea:c9:24:09:7f:f7:92:ec:36:8c:
ce:a8:3f:00:d4:a9:65:f3:55:4a:06:cc:ba:21:f5:39:07:5e:
fb:db:fb:2d:6f:33:e5:c5:ba:f6:69:e6:f1:64:81:28:7e:00:
66:4a:fe:07:0c:63:16:c3:7d:e6:c0:4c:84:ea:28:8c:de:86:
20:84:a2:05:e6:f3:af:96:a8:66:f1:20:0e:da:08:54:4f:21:
86:9e:24:06:08:5b:ce:ba:20:2d:d1:ce:a7:45:f1:e7:f5:40:
41:9d:7f:6d:9f:7e:7f:93:32:31:16:17:90:27:f2:de:c0:76:
c3:18:9b:a4:78:64:57:ab:97:f0:0f:3f:74:86:94:d8:e4:f0:
e8:4c:ba:c2:cd:de:db:18:40:84:d1:11:d4:4d:93:9e:97:11:
98:31:91:65:ed:17:3b:a3:11:de:71:f0:49:26:35:e0:14:7a:
28:0c:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org