Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525B6AE008FE11EFBE806D37017001B1.roa
File: 525B6AE008FE11EFBE806D37017001B1.roa (raw, json)
Hash identifier: 0cys5Qcjhk9tWYsUr0X0gcxXvuTa1rjiinaTvub30Go=
Subject key identifier: 85:FB:35:C7:BB:D1:6C:C1:4F:EB:B2:EC:01:0C:C9:38:61:B5:D7:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8777
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525B6AE008FE11EFBE806D37017001B1.roa
Signing time: Fri 03 May 2024 03:36:27 +0000
ROA not before: Fri 03 May 2024 03:36:24 +0000
ROA not after: Mon 28 Apr 2025 03:36:24 +0000
asID: 211392
IP address blocks: 156.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34679 (0x8777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:36:24 2024 GMT
Not After : Apr 28 03:36:24 2025 GMT
Subject: CN=66345bbb-e2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:a0:0c:d2:45:be:40:3c:26:09:17:51:14:
25:12:24:68:a6:3d:6d:c7:20:8d:56:1e:6c:65:4c:
08:0e:6b:ea:8a:78:22:f3:0e:e8:59:d0:1f:6f:10:
b2:aa:e5:9c:b5:d4:43:fc:84:77:e6:a0:aa:99:09:
24:b9:dc:2c:7f:7d:a8:96:44:63:18:14:97:9c:ff:
12:cd:ec:0d:eb:61:ed:6f:d9:ed:35:ce:44:0b:b3:
65:34:a8:23:58:7d:ec:95:d7:2c:29:29:6d:0d:99:
9a:ef:51:cb:b6:18:46:3d:6a:11:da:92:48:80:55:
99:b2:54:5a:3d:4f:60:0a:51:99:66:19:87:37:ca:
69:cc:22:06:e7:9a:41:61:b4:d8:f0:3d:8f:54:01:
13:c6:2f:34:8a:1c:b3:d2:a7:05:f0:6a:06:30:e7:
5c:c2:04:03:c8:3b:4e:8c:8f:ca:bf:79:2a:80:3b:
6b:10:52:20:a1:a9:bc:d6:5f:cc:aa:8d:37:5f:53:
dc:93:4d:97:1b:a3:c6:09:b0:63:5f:81:97:a1:58:
d3:a7:0e:1a:6f:ad:23:c5:75:f1:94:7c:c8:58:25:
46:13:74:e4:50:b6:9a:56:7e:55:c6:97:50:8f:2c:
02:91:c2:ff:ad:89:12:96:db:42:28:6a:89:fe:af:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:35:C7:BB:D1:6C:C1:4F:EB:B2:EC:01:0C:C9:38:61:B5:D7:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/525B6AE008FE11EFBE806D37017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
78:10:28:a8:14:04:4c:84:2b:3e:0b:72:db:a3:47:5e:5b:b7:
a9:d1:ac:6f:85:6a:18:14:1c:4f:59:fd:f4:7b:31:6b:2c:e5:
2d:93:fa:5b:b7:3c:8f:6c:2b:02:3f:3e:1e:92:88:2e:cb:26:
83:17:19:44:b0:37:d8:c0:da:43:af:f6:7f:85:6e:eb:4b:3f:
58:e3:f6:29:88:ed:36:c4:e4:fe:64:ba:ec:75:ee:b8:ed:1c:
b2:49:e3:a7:68:eb:20:3e:0b:85:bc:69:bf:58:91:55:2d:49:
68:7b:ef:3b:81:36:be:09:eb:df:3b:16:f2:e2:aa:9f:50:7a:
9e:1d:23:33:f3:8a:c4:fd:17:be:ab:8b:19:e9:2d:13:aa:de:
5d:75:9f:ab:23:1f:68:af:e6:f8:bd:3b:69:74:b4:a3:2a:e6:
fe:51:76:ac:6f:53:32:c5:a4:c4:ac:82:d2:67:78:28:28:9f:
a5:14:3c:0c:55:a1:dd:6c:f1:cf:76:7c:0a:9b:a0:97:c2:ed:
b8:56:92:58:b3:21:24:e0:76:e0:2b:a6:8a:99:ba:ac:2a:a3:
96:ca:22:03:14:86:55:99:c4:ba:ff:57:b0:40:15:11:e7:1c:
7d:3d:bd:d0:4e:77:46:36:68:89:47:68:22:a8:82:75:8b:ca:
3c:37:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:16 2024 by rpki-client on console-fra.rpki-client.org