Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/195A9516CCBF11EE965ADC86775412E6.roa
File: 195A9516CCBF11EE965ADC86775412E6.roa (raw, json)
Hash identifier: RKy7NW9S2QzWMksLU90AdahS6/+y6njWAXwLuiCG7Yc=
Subject key identifier: 40:70:13:06:EB:60:5F:E2:6C:02:F6:0B:7E:2E:C4:ED:DC:19:E1:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 713D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/195A9516CCBF11EE965ADC86775412E6.roa
Signing time: Fri 16 Feb 2024 11:32:43 +0000
ROA not before: Fri 16 Feb 2024 11:32:40 +0000
ROA not after: Fri 26 Apr 2024 11:32:40 +0000
asID: 9009
IP address blocks: 156.246.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28989 (0x713d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 11:32:40 2024 GMT
Not After : Apr 26 11:32:40 2024 GMT
Subject: CN=65cf47db-8246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:fa:8d:15:47:8d:f7:90:57:f1:6c:00:58:
29:bb:d6:55:d8:1e:08:0d:89:31:15:5b:e6:dc:e0:
a1:15:95:c1:13:58:9a:a5:02:21:15:9c:d9:d2:07:
f8:6d:a0:b5:1a:8a:88:4f:db:09:47:ec:84:7b:da:
d6:ad:0a:98:a5:d6:fb:2c:8e:0d:7c:ca:0e:eb:cc:
e4:89:58:31:58:4e:93:c8:a2:83:d9:fb:8d:2f:cd:
0c:79:2e:fb:07:bb:96:06:26:95:8d:77:df:01:b1:
40:72:4d:5d:fe:92:40:a7:76:db:e9:17:11:e7:e2:
f3:99:7b:c1:07:f9:11:79:2a:fa:f5:29:ef:90:c7:
ee:45:5f:a3:df:10:43:95:28:82:ab:2d:59:ca:42:
db:52:97:b9:fa:82:31:4b:61:1a:6e:49:cf:e9:fa:
f6:25:2b:eb:c3:f2:a5:c2:e9:c6:e2:a3:5a:64:ec:
f9:a9:8a:c6:fa:5e:93:ec:fe:68:8c:da:de:0f:ae:
a0:93:fb:96:f5:a0:c9:d5:80:47:cd:ef:46:f1:c2:
a0:24:80:64:94:03:5d:b5:6e:bc:2c:a4:e8:fa:21:
7a:00:a1:e5:8b:60:b9:15:38:f1:86:79:d8:96:9e:
b4:e4:55:5c:7e:9d:43:aa:13:2b:65:ba:17:62:02:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:13:06:EB:60:5F:E2:6C:02:F6:0B:7E:2E:C4:ED:DC:19:E1:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/195A9516CCBF11EE965ADC86775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:86:a0:24:f3:1c:84:19:d1:33:96:5d:d9:7e:fe:08:aa:44:
d4:b5:c2:2b:47:11:97:9e:ee:22:da:b2:dd:3b:7e:ba:86:32:
c1:7d:82:e7:ec:8c:24:93:cd:b1:98:ad:2e:54:af:5c:1b:ad:
2f:2b:32:57:1c:48:f5:e2:a4:68:ca:f3:b1:df:28:88:3b:40:
69:5e:0e:07:0f:f8:3d:da:00:0a:ba:fc:74:b0:13:8b:83:e3:
de:99:ba:d7:1c:bc:41:fb:1f:5e:b2:70:36:51:98:a7:21:5c:
42:71:93:92:1f:0d:9a:e3:0d:de:67:1c:c9:98:96:aa:81:21:
7e:d7:ff:85:a0:b0:94:6a:71:8e:d7:d3:70:a0:3d:db:d8:47:
49:1c:3c:21:6a:2a:f3:8a:d2:9e:11:9e:f1:84:26:ad:7a:81:
81:40:53:30:f5:c9:83:56:3a:21:02:a8:9c:91:dd:d9:34:f2:
d8:07:fe:0e:b4:58:2c:35:b3:02:a2:34:ce:8b:7b:f7:d8:3e:
46:cf:b2:37:fc:be:50:c9:f4:ad:35:66:d2:53:43:f0:6c:06:
fc:37:7b:51:15:e7:62:e4:0e:1b:1a:cd:25:3f:65:24:2d:61:
4c:8c:ee:4e:aa:ac:0a:85:eb:f4:f6:3f:5a:7a:6f:d5:e5:dd:
e7:59:23:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:42 2024 by rpki-client on console-fra.rpki-client.org