Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8FE0841A3211EE96C802794AD9E6FC.roa
File: DD8FE0841A3211EE96C802794AD9E6FC.roa (raw, json)
Hash identifier: hZ8lxi9GcYXoIRLogipG/wQaz1/rpG7JBA2Ztq1Nmys=
Subject key identifier: 11:44:A2:63:3A:57:81:1A:B4:3F:D2:FB:AA:73:13:B2:BE:C5:CB:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2E8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8FE0841A3211EE96C802794AD9E6FC.roa
Signing time: Tue 04 Jul 2023 06:20:26 +0000
ROA not before: Mon 27 Nov 2023 06:20:22 +0000
ROA not after: Sat 29 Nov 2025 06:20:22 +0000
asID: 133012
IP address blocks: 156.248.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11919 (0x2e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 27 06:20:22 2023 GMT
Not After : Nov 29 06:20:22 2025 GMT
Subject: CN=64a3ba2a-db9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:9c:0b:93:e0:a8:e4:b1:45:8c:f3:53:d3:
ec:1f:69:b8:cd:34:85:29:ca:0e:66:c7:87:fd:c9:
63:8f:a4:80:40:2f:bb:1b:1f:d7:b2:bc:dd:ee:5b:
a7:e8:89:b9:22:07:a1:6b:81:73:04:70:66:c4:14:
54:a8:d4:f7:e5:65:34:b4:02:c2:02:18:a7:5f:6e:
1e:a3:74:83:aa:05:4b:d9:24:fe:d5:0b:fd:f3:43:
bf:c1:96:d8:90:fb:78:39:77:a5:7e:4f:fb:eb:7e:
45:1d:2f:a1:b9:f7:e9:83:25:d7:37:3c:c9:83:43:
a2:8f:a7:a5:bd:6f:76:3a:30:16:6c:f4:09:04:dd:
d0:d9:2f:ff:bb:38:fb:e4:76:e3:8d:c4:92:71:68:
7a:90:57:a2:21:98:2b:d3:09:a8:72:fa:7f:f3:2d:
fb:23:1b:a9:3d:0a:04:5c:47:6c:f6:e0:74:1e:28:
bf:d8:33:ed:9e:91:90:4c:db:cc:42:3d:fe:96:c7:
26:f9:6d:bc:3c:b1:5e:d9:0c:c7:49:50:72:d6:5b:
32:97:61:ff:4a:6a:73:b9:44:bb:67:68:05:e4:a0:
41:12:2c:45:e1:1a:50:e2:3a:15:c3:ad:22:9e:34:
b8:6b:2c:db:2e:f9:de:96:6c:4f:5f:1d:09:c0:2b:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:A2:63:3A:57:81:1A:B4:3F:D2:FB:AA:73:13:B2:BE:C5:CB:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8FE0841A3211EE96C802794AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.2.0/24
Signature Algorithm: sha256WithRSAEncryption
59:30:f1:fd:14:b4:64:8b:a6:ad:6c:5c:ff:1e:f5:12:3e:b4:
f7:59:e4:85:7a:97:61:10:28:8f:bb:d8:0d:4c:0f:1e:88:c8:
5e:a4:4e:8b:7d:3f:dd:79:08:3b:d0:ad:08:81:c9:92:02:da:
f8:34:e4:7b:e3:4b:2d:3f:03:b5:45:19:01:18:8b:fd:77:b3:
e1:bf:ad:1f:27:74:51:97:57:59:0a:e5:a4:42:0d:4b:b3:d4:
b0:33:1c:85:4f:0b:ce:40:b0:7d:33:22:cb:9d:af:de:0f:58:
aa:bc:1e:85:e3:af:48:72:89:85:29:e9:4a:59:c8:79:f9:79:
00:9e:84:58:b6:bf:f7:0c:58:a3:aa:03:c7:d4:28:73:01:bc:
4c:59:e8:06:78:ed:36:a7:ab:17:4f:c6:77:14:5e:df:1d:47:
e7:d6:cf:82:10:d5:0a:8e:26:01:f3:c4:24:0f:d4:fb:f9:a5:
f4:90:e2:e2:4a:a5:6a:e6:36:f3:0f:83:05:db:fc:67:d9:07:
66:82:cb:88:be:56:df:a1:86:d9:8c:97:8d:23:2a:6c:49:ac:
90:31:fd:33:cc:ef:c1:47:0e:8c:60:87:61:0e:6a:9c:9e:b7:
3c:02:1d:5b:1f:ab:af:fc:30:a8:49:f0:d8:d5:dc:bc:75:7b:
9f:24:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:18 2024 by rpki-client on console-fra.rpki-client.org