Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12709E481D1011EF866B9D2B7DDC24C2.roa
File: 12709E481D1011EF866B9D2B7DDC24C2.roa (raw, json)
Hash identifier: i9OJGrAjDMJ1NgW3X3TVIiCDZf5jfDhtRzTFZxaxYEc=
Subject key identifier: F7:38:CB:10:71:15:7E:EA:5B:F3:C5:AA:D4:C0:63:2B:80:7F:03:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12709E481D1011EF866B9D2B7DDC24C2.roa
Signing time: Tue 28 May 2024 16:33:54 +0000
ROA not before: Tue 28 May 2024 16:33:50 +0000
ROA not after: Sun 29 Dec 2024 16:33:50 +0000
asID: 18013
IP address blocks: 156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36010 (0x8caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:33:50 2024 GMT
Not After : Dec 29 16:33:50 2024 GMT
Subject: CN=66560772-79f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:d9:9d:4a:a0:10:bd:20:72:89:6f:9c:f3:
17:45:f6:a0:d0:a9:48:b1:da:eb:0d:80:b9:4e:11:
01:c1:ff:54:73:4b:7f:8f:d1:02:60:fa:30:26:48:
80:19:e7:bb:bb:b2:8d:3a:d2:27:22:81:ee:a2:40:
93:c2:6d:9c:7d:6f:2b:f5:e3:40:c6:df:64:8f:55:
b1:7a:18:69:01:32:6c:4b:f0:93:e4:f9:ec:ff:77:
f4:3f:3b:fa:64:93:e2:47:5a:b2:2d:f3:45:17:bc:
8e:fb:36:c4:ca:3d:a1:19:0f:b4:4b:2f:42:ea:70:
73:c0:bb:dd:74:30:56:b3:38:47:8c:1d:8f:09:4a:
35:52:5e:db:1b:b1:aa:1a:4f:be:ec:d4:07:18:46:
d2:55:59:ed:bb:3a:84:17:e4:06:95:b3:fe:92:27:
3f:0a:f5:47:6e:9b:aa:38:2a:1e:63:1e:62:c2:85:
88:ff:d5:80:48:a5:47:3f:82:58:9a:27:e6:ea:19:
c8:68:f2:61:d4:0c:9d:23:6e:87:26:57:c3:96:8e:
12:4d:b2:c0:d0:3c:83:ad:3c:b9:4d:69:d9:d0:4e:
68:21:6c:f0:44:24:f4:77:7b:78:e6:51:9e:d2:ef:
04:ac:91:36:a6:c5:33:d6:f8:f4:65:34:f6:87:53:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:38:CB:10:71:15:7E:EA:5B:F3:C5:AA:D4:C0:63:2B:80:7F:03:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12709E481D1011EF866B9D2B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ce:53:c7:63:a5:d2:c3:ee:ca:8e:a5:13:7a:ef:0b:40:f3:
c8:7a:47:37:e4:2d:29:97:6e:80:5f:89:21:90:c2:9a:d9:75:
c3:a8:49:fd:3b:84:3a:f5:17:fb:47:9f:e2:ba:2f:f5:3b:25:
6a:1f:fc:c8:48:40:2c:92:e6:17:af:a0:67:eb:35:7e:ef:e8:
d2:dc:05:ba:2b:d8:16:62:7f:02:06:8e:7b:33:75:4b:2f:cf:
30:69:1e:5a:a3:64:50:c8:a7:3a:2d:f1:ce:ad:76:d0:10:79:
58:d0:79:a6:96:2e:71:2d:17:3d:43:a3:c0:15:4a:74:05:ac:
2a:e4:eb:63:34:9c:96:42:d3:3a:7e:a5:d4:7c:41:a0:9d:fd:
9d:11:6c:b4:d0:e1:43:51:1c:75:a1:ba:10:77:b5:3c:50:9d:
98:ea:64:82:be:87:48:cb:5c:f2:53:1e:d9:c1:dc:5b:cd:44:
4b:53:0d:b9:cc:f8:2f:01:a6:06:f7:84:6b:4b:2a:7f:78:6b:
de:7b:4c:d6:ba:3d:7c:2d:a9:97:0c:04:ca:56:19:b3:ed:23:
dd:25:01:8f:84:13:30:49:9f:c1:78:aa:a0:ab:27:b4:cf:c6:
3e:b3:5a:aa:02:60:b1:f2:1e:86:2a:31:f0:b8:78:1f:93:f7:
2c:08:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:21 2024 by rpki-client on console-fra.rpki-client.org