Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5DCCDA0976911EF99D54B5C762E951A.roa
File: E5DCCDA0976911EF99D54B5C762E951A.roa (raw, json)
Hash identifier: XxSIpWePk4EFoRFYXWESPWrix46Wh/P90ukwoyaQty8=
Subject key identifier: 55:72:F9:B2:D3:C5:AA:0E:A3:04:3D:6B:D8:C9:5F:3F:2B:16:00:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5DCCDA0976911EF99D54B5C762E951A.roa
Signing time: Thu 31 Oct 2024 09:24:16 +0000
ROA not before: Thu 31 Oct 2024 09:24:12 +0000
ROA not after: Fri 13 Dec 2024 09:24:12 +0000
asID: 55320
IP address blocks: 156.244.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52002 (0xcb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:24:12 2024 GMT
Not After : Dec 13 09:24:12 2024 GMT
Subject: CN=67234cbf-cd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:89:2e:e6:b9:1b:f4:11:a8:e9:b8:c4:c5:
b6:39:61:a2:c0:86:1b:76:9c:1e:ec:4c:7d:2c:a3:
09:10:29:5d:74:c0:75:42:13:aa:54:df:df:62:40:
ed:e5:27:07:43:2b:30:36:ee:8e:1b:44:c0:cc:41:
a6:0d:59:e3:7c:41:9a:3b:97:fb:db:09:25:b9:b4:
d6:51:ed:75:38:a6:94:68:72:a2:db:4a:af:32:72:
86:e5:9f:cd:04:cd:9a:71:ad:22:1a:7e:09:20:97:
dc:ca:bc:26:ac:26:a9:da:d5:c3:82:3f:2d:a5:b2:
12:47:5f:f5:a6:f5:d2:77:84:89:a5:f1:b7:51:56:
62:39:62:f3:57:7f:a7:9c:14:2b:32:c8:e5:0c:4e:
63:9b:12:6b:f8:98:d2:cf:d7:a2:f0:4b:5a:f1:17:
d0:8f:b6:57:15:ae:6b:d9:7c:ca:80:97:43:fa:78:
13:a1:7b:60:06:c9:45:1e:66:a5:ca:7d:15:ac:01:
fa:21:f2:7c:d3:13:21:92:63:b9:64:4e:23:e3:b9:
b1:50:2e:f8:59:4a:a2:bf:25:c8:b2:1d:b1:a7:df:
f9:2d:3b:df:4b:b4:8d:31:f9:cb:fb:fe:43:52:59:
5e:4f:d1:23:fb:70:08:4f:b5:27:db:ca:c7:6b:9e:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:F9:B2:D3:C5:AA:0E:A3:04:3D:6B:D8:C9:5F:3F:2B:16:00:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5DCCDA0976911EF99D54B5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.23.0/24
Signature Algorithm: sha256WithRSAEncryption
12:32:ea:51:b6:7d:3c:5f:7a:43:ee:5f:81:4a:70:bd:fa:57:
20:c1:ab:0c:b9:ee:8a:c4:1d:85:f1:46:80:e7:0d:00:94:a0:
d5:47:cc:47:3b:8f:c1:0e:d3:c5:fc:b5:46:dc:d1:9d:7f:93:
dd:8d:e9:3d:77:09:7d:34:1d:05:42:ea:dd:68:ca:b9:d5:42:
ec:98:e4:95:5d:64:a3:46:c6:9e:f2:ec:f3:55:65:26:83:05:
13:c4:d8:77:43:ba:9f:94:09:16:1a:e7:26:38:87:e1:e1:72:
01:e8:9b:20:7b:44:05:88:2d:6c:3b:ba:39:94:dc:80:44:ea:
b2:7c:ea:e3:15:d1:fe:c1:18:18:63:f9:39:d5:73:6b:4b:14:
08:33:64:90:23:e4:16:01:88:9a:f9:c0:ee:4f:ab:ae:17:9f:
9a:55:48:ad:1c:05:40:56:1a:ce:02:1e:a9:70:ad:8e:22:67:
69:22:f2:5b:ac:02:34:a8:c2:d7:3d:72:9b:57:84:b4:2c:c2:
3e:8f:e3:a8:92:29:ef:91:68:41:a4:5b:48:57:c2:33:21:cc:
fc:6c:dd:66:f6:d1:7b:6d:dc:a4:ac:60:ca:c8:f0:0b:07:8d:
76:ef:e2:8a:96:30:1b:92:75:5a:5f:b7:2a:19:b7:e3:3a:72:
6c:5d:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org