Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFAD6080A4C311EFB66D1EA5762E951A.roa
File: EFAD6080A4C311EFB66D1EA5762E951A.roa (raw, json)
Hash identifier: ikX0cSJvByLGait2bo6GdfVjXv4xuk4haUaVWN4ZT38=
Subject key identifier: 94:39:71:A1:CC:DC:0B:5F:DB:1A:1D:C1:98:FD:D4:18:E3:61:A0:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D481
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFAD6080A4C311EFB66D1EA5762E951A.roa
Signing time: Sun 17 Nov 2024 09:11:32 +0000
ROA not before: Sun 17 Nov 2024 09:11:28 +0000
ROA not after: Sat 23 Nov 2024 09:11:28 +0000
asID: 54467
IP address blocks: 156.239.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54401 (0xd481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:11:28 2024 GMT
Not After : Nov 23 09:11:28 2024 GMT
Subject: CN=6739b344-ecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:44:6e:9d:de:9b:4e:d9:e6:df:2c:e4:33:
18:5d:ce:ff:13:f1:79:b4:e5:44:d3:de:83:24:7c:
43:7a:8e:12:84:5a:3c:9e:11:4f:66:45:3a:08:a8:
45:17:94:00:9e:26:61:6b:46:60:09:5e:b6:91:ec:
28:3d:2b:d9:5e:2e:db:9a:34:96:8a:21:80:5d:39:
01:58:75:c3:00:f3:0f:01:c0:8b:52:cf:08:19:a9:
23:89:1f:9e:68:86:27:68:bd:5a:24:0c:bb:b5:37:
22:88:42:3f:86:72:12:ae:c9:99:97:e8:20:a2:c6:
c1:ab:28:b5:dc:be:8e:09:00:d0:9d:7b:11:55:09:
73:88:3a:70:d3:5c:19:fa:5f:6b:9e:4d:b9:2d:f9:
8c:f6:24:f1:74:08:ed:d2:66:65:65:6f:0c:b9:da:
eb:4b:d5:c8:cd:f0:a2:6b:6f:9f:66:b1:48:2c:9f:
c5:7f:32:f5:01:1c:76:d8:d2:69:4d:32:ce:b5:32:
d8:41:03:5f:51:8a:d9:3e:ea:19:f3:83:6a:04:2b:
b2:ed:9c:88:cf:93:9a:f4:0e:8b:92:f6:08:16:b3:
19:f1:91:98:b4:52:ce:00:d3:96:45:ed:06:47:7f:
cf:3d:6f:e1:05:ab:44:d8:c3:cc:81:5a:88:91:bd:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:39:71:A1:CC:DC:0B:5F:DB:1A:1D:C1:98:FD:D4:18:E3:61:A0:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFAD6080A4C311EFB66D1EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
22:6c:8c:65:17:85:a7:6d:bd:95:ae:7f:51:d5:30:5e:c2:5c:
a9:73:86:2a:95:2b:45:35:3b:38:a1:ce:31:7b:e3:4a:ea:54:
6b:69:1c:71:3f:65:2e:c8:04:83:bb:5a:93:8f:17:39:e0:6c:
96:65:52:8b:ac:c3:92:76:0b:92:fb:35:72:c2:f6:7a:88:26:
5a:97:3d:b3:b1:df:35:8a:dc:22:00:b1:02:60:3e:6d:9f:2a:
e8:6a:b4:c7:2d:be:3b:78:e2:1e:98:46:3b:b2:50:2e:d2:e0:
93:83:a4:bd:63:5d:1f:4b:6d:37:43:10:fd:49:90:bc:8e:1b:
9c:bd:fe:c2:10:37:f3:2e:bb:f7:8a:17:fe:72:63:b8:cb:88:
45:ac:c0:59:ca:c4:ef:77:37:ea:b9:1d:53:55:d1:54:24:70:
c8:92:a6:4c:4d:4d:b6:7a:04:43:3e:06:7c:d1:ec:d0:c2:3f:
43:12:0f:7d:d8:b8:7c:77:e2:5a:a4:0b:98:1b:f0:a2:55:ad:
4e:8a:28:93:39:d9:dc:22:5c:db:62:87:0b:d9:19:2d:3b:6a:
e7:9d:70:8a:24:af:b0:39:2e:dd:40:45:58:8c:8e:88:1b:2c:
01:55:d9:9e:d8:82:6c:72:13:b5:1b:36:1f:55:d8:d3:e5:d1:
0f:77:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org