Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E777EF309B8511EFBE653545762E951A.roa
File: E777EF309B8511EFBE653545762E951A.roa (raw, json)
Hash identifier: RJQBcrrQQGzpRrAiTED5jfkQFi2o4yTLX4Z/nMIDJbs=
Subject key identifier: 3F:D1:3D:65:BF:57:18:7A:77:5E:E2:C0:8F:52:BC:37:7F:9B:52:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CEB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E777EF309B8511EFBE653545762E951A.roa
Signing time: Tue 05 Nov 2024 14:54:49 +0000
ROA not before: Tue 05 Nov 2024 14:54:45 +0000
ROA not after: Wed 04 Dec 2024 14:54:45 +0000
asID: 32708
IP address blocks: 156.236.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52917 (0xceb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:54:45 2024 GMT
Not After : Dec 4 14:54:45 2024 GMT
Subject: CN=672a31b9-6e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:fa:cc:ee:26:bc:8b:ba:0c:e8:e1:fa:69:
21:f8:ca:fb:28:2f:d7:89:b9:1f:9a:4c:20:e5:2a:
bd:db:01:c5:15:53:95:97:4e:70:ef:99:ca:b5:49:
16:e4:98:99:7e:1f:6d:22:05:0b:e0:e1:e5:60:28:
f8:67:99:b5:c9:fc:3b:e9:64:cc:0a:27:dc:c2:0b:
0f:e1:d4:cf:31:55:ad:5b:88:4a:90:5f:8d:6c:8d:
f0:46:59:07:79:6a:3d:85:ba:3c:cf:d3:67:c3:f3:
03:5b:be:83:c6:28:d1:f6:0a:e0:cc:ce:01:f2:47:
50:be:09:ae:dc:aa:36:86:2e:6f:cc:70:6e:1f:58:
ff:3b:07:10:07:af:42:55:ea:84:99:ff:51:f3:93:
3a:01:72:ef:5c:d0:76:66:3e:9e:b4:f0:4d:b1:54:
5c:19:a9:d3:87:61:a0:dc:9f:7c:a1:f8:2f:84:59:
de:5a:eb:c0:9e:84:53:cd:2a:f3:e1:8d:64:cc:01:
c5:79:43:f4:fa:da:27:d6:67:f6:fb:3a:e5:91:d8:
0c:5e:18:b1:65:48:99:75:4b:42:d6:8a:7f:8c:e5:
a9:85:f1:f7:33:8e:dc:ec:ac:09:43:c1:f1:fc:e3:
15:c4:10:0f:f6:d1:65:b7:0d:2d:3d:1b:c4:ef:9b:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:3D:65:BF:57:18:7A:77:5E:E2:C0:8F:52:BC:37:7F:9B:52:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E777EF309B8511EFBE653545762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.39.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8e:8f:35:c7:a6:98:20:06:94:21:2f:a1:5a:d6:42:e8:34:
85:72:64:54:43:e7:9a:ce:69:ac:7a:04:31:4c:c4:d7:29:cc:
e3:72:4f:e0:e5:85:11:85:20:7a:b2:f8:96:b2:f6:53:59:b5:
bc:62:b8:f6:2b:cc:3c:ad:d2:49:2e:ab:78:07:b5:25:a9:f8:
0e:77:4f:c7:23:14:f6:ee:2c:b8:76:2b:6a:40:03:2d:3b:75:
dc:aa:10:27:bd:0f:8f:06:ab:e1:74:a9:dc:a0:04:f6:6b:7e:
cb:dc:de:d9:99:7f:c6:e3:d4:08:a8:8f:0d:e9:de:c3:08:2d:
b2:b7:71:2c:ef:e0:d6:e0:a3:93:bf:07:93:e7:b9:40:be:1a:
4c:86:f7:e0:15:e5:32:43:10:f6:7f:e3:59:26:d5:63:8e:22:
36:05:68:f9:6d:8a:0f:d4:09:e3:f6:8b:46:87:32:c8:d5:36:
2b:12:7a:c9:53:89:44:da:6b:2b:54:c4:fe:65:6a:ac:f0:6c:
f3:65:9a:06:d6:33:fe:cb:e3:f2:be:12:00:53:8b:3f:eb:22:
bf:c1:eb:86:91:93:a7:ff:d4:0a:76:f9:c3:22:9a:b8:12:16:
55:d2:63:80:b0:f9:72:a5:f8:24:bc:a0:c0:33:0c:0c:39:8d:
31:c5:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org