Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD3280C4A19011EF84E24F80762E951A.roa
File: DD3280C4A19011EF84E24F80762E951A.roa (raw, json)
Hash identifier: rgaf38aKzQssbWasJY4EKkBr6zBNCRSx89GODqecv3M=
Subject key identifier: 57:46:5E:A4:65:33:12:D7:52:00:E2:4D:53:1A:FB:1F:CC:1B:EA:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D228
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD3280C4A19011EF84E24F80762E951A.roa
Signing time: Wed 13 Nov 2024 07:28:23 +0000
ROA not before: Wed 13 Nov 2024 07:28:19 +0000
ROA not after: Sun 15 Dec 2024 07:28:19 +0000
asID: 273478
IP address blocks: 156.232.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53800 (0xd228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 07:28:19 2024 GMT
Not After : Dec 15 07:28:19 2024 GMT
Subject: CN=67345517-a33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:53:48:5f:30:05:67:3b:3f:72:20:4b:0c:
85:a7:55:e3:d5:fc:ae:6c:d4:35:96:64:fd:15:0c:
97:d7:57:11:9d:ff:f3:89:30:12:5b:65:11:e5:c3:
3b:9a:8e:16:72:11:92:30:04:eb:2d:07:a0:2f:fb:
9b:70:5f:44:f0:af:1d:39:9a:0a:fd:34:cb:b2:12:
9c:c6:81:91:cf:74:9e:49:90:49:26:53:04:e0:aa:
ad:c2:ba:d0:dd:0b:bd:1e:e3:f9:46:7b:c7:ce:fb:
3f:f7:90:67:1a:2e:f0:d4:95:2e:78:e1:ad:b6:31:
1c:c3:11:f9:b1:f3:82:bc:78:c8:11:15:ec:3e:63:
5e:20:d8:eb:8f:f6:eb:00:6f:71:fb:f9:29:ff:99:
fa:fe:1d:f8:18:c5:08:44:10:74:2a:f7:38:54:38:
77:3e:c1:da:74:42:d0:49:5b:64:13:1d:09:46:cc:
f3:fd:59:dd:fe:96:61:60:10:7c:72:56:25:75:29:
0e:85:7f:09:a7:d6:57:0d:76:dd:1c:b6:ad:ec:5e:
61:47:07:ee:9d:04:7e:3c:b7:45:b9:4f:bd:b8:a2:
7c:75:56:22:7e:77:e9:35:a4:2a:e0:32:47:25:cf:
41:4c:12:e6:a4:21:9c:59:d0:e9:1d:fa:76:82:63:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:5E:A4:65:33:12:D7:52:00:E2:4D:53:1A:FB:1F:CC:1B:EA:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD3280C4A19011EF84E24F80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b6:55:11:da:07:8d:95:a9:c4:4c:49:80:49:6e:2f:f3:f3:
56:2b:23:34:f9:8e:c5:fc:68:0d:90:fc:c7:ac:7b:d7:ab:93:
ac:7e:82:8a:7f:b6:8b:67:c0:a1:92:ae:09:c7:97:15:04:fb:
a5:4e:26:7b:10:6d:55:99:b5:23:75:2b:ce:14:8c:b9:cc:55:
f0:75:9c:cd:ac:ad:97:8d:b3:89:2e:55:59:49:08:63:38:d2:
04:3c:79:50:e4:37:86:85:42:ca:7a:47:aa:bf:3c:f7:45:3a:
02:59:17:91:bd:0c:3a:9e:83:36:61:f8:75:a8:60:96:87:6f:
ff:81:04:a0:cb:64:45:00:42:37:07:81:22:27:8d:71:8f:b6:
0f:97:1f:da:f4:c3:1e:27:72:25:e0:8e:7b:c5:25:be:5a:bc:
11:2c:b5:73:b9:8e:25:83:db:1a:e1:14:ec:08:02:d3:f9:2d:
4a:05:eb:6e:00:7e:e5:0a:d5:3a:05:f3:c0:87:97:d9:0a:f9:
8f:d9:35:3c:59:25:a1:5e:e9:df:5c:5b:9c:87:de:72:88:84:
da:e8:1f:97:c1:eb:a8:5e:76:7b:e4:83:04:e5:b6:b4:7a:17:
94:88:99:d1:fd:7f:88:3a:76:e5:92:2a:76:37:69:64:65:a8:
9d:95:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org