Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D37D8FC039111EFAF23ACFC007001B1.roa
File: 6D37D8FC039111EFAF23ACFC007001B1.roa (raw, json)
Hash identifier: Nfwhn+j07xAllOxxSugWQcUHfREv4DdgVTkfGMW4UwY=
Subject key identifier: A9:5A:8A:46:D2:72:6F:C6:D3:4D:7B:BA:03:F5:F1:0A:85:1E:D7:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 861D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D37D8FC039111EFAF23ACFC007001B1.roa
Signing time: Fri 26 Apr 2024 05:54:21 +0000
ROA not before: Fri 26 Apr 2024 05:54:18 +0000
ROA not after: Mon 27 May 2024 05:54:18 +0000
asID: 138195
IP address blocks: 156.255.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34333 (0x861d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:54:18 2024 GMT
Not After : May 27 05:54:18 2024 GMT
Subject: CN=662b418d-1a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:ef:c9:34:87:f6:f8:9b:07:db:02:ad:29:
2e:63:70:8c:be:b5:1f:b1:8f:9d:06:b0:71:b3:29:
53:0d:41:e3:ce:f0:80:32:37:ac:5c:e6:7f:17:34:
fa:28:b3:7c:33:ed:2e:a4:b0:ca:67:41:d5:79:41:
0e:cb:93:94:31:b9:dd:2c:9c:cd:25:42:a0:4c:17:
70:32:cd:4d:0d:ba:86:48:83:8f:89:ff:85:2d:49:
81:c6:d2:1e:0a:49:66:fa:01:f6:e7:9f:ef:0c:b7:
cf:f5:74:01:68:fd:2b:93:93:ee:1d:a9:72:b8:00:
25:bf:8b:bc:16:92:bc:f0:ff:5d:97:a7:6a:ad:bb:
b9:0b:3a:cf:ec:1d:6a:29:e2:b2:3b:c6:af:7d:3a:
9c:6f:12:0f:c8:ea:2e:22:1b:40:f3:18:fc:56:60:
16:a0:dc:43:a6:b2:ad:13:30:e7:87:f5:5a:8b:73:
fa:05:12:3b:1e:6f:74:14:e7:87:21:0e:c2:d3:69:
83:d1:6d:b5:91:f5:e2:3e:2a:64:d1:66:4d:e6:ea:
a4:e1:7d:b6:de:e6:93:0c:8d:1d:b3:f8:09:a5:87:
a1:7f:9e:2a:b8:0b:d7:01:03:9c:73:3c:5b:fe:0a:
16:b3:74:b5:5e:d7:a3:b3:e0:2e:83:27:4a:96:51:
9f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:8A:46:D2:72:6F:C6:D3:4D:7B:BA:03:F5:F1:0A:85:1E:D7:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D37D8FC039111EFAF23ACFC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:08:1d:d9:d3:8a:96:07:9d:21:df:94:27:2f:a3:fc:a3:9d:
2d:24:de:50:4a:f7:86:90:19:9c:60:5b:30:e6:01:f7:6b:f2:
d3:d5:59:8f:12:b4:cb:44:08:d3:69:2c:37:d6:b9:84:e8:f6:
97:d2:93:5e:14:d3:f3:37:b4:ea:e2:95:c4:0c:df:9e:92:d9:
c0:d1:7e:0b:3d:52:e0:4b:11:55:d3:86:6f:b1:41:22:b3:19:
77:5a:f8:50:0f:2a:f5:80:05:ad:6a:ae:e5:60:72:01:63:e7:
30:2d:a1:5a:35:a1:75:07:9f:ac:68:99:63:1c:16:ef:46:9d:
c9:5c:4a:69:06:b8:67:7c:75:67:9e:ea:b4:69:f2:22:b0:e8:
85:68:e9:ca:47:96:e0:11:83:76:28:02:b0:ca:c2:d0:95:9c:
05:71:9e:48:56:78:77:ec:49:d8:3e:eb:cd:df:cf:4d:c2:46:
ad:91:84:0a:f9:75:32:88:4f:81:75:c1:fe:f2:78:cb:d6:3a:
ab:3c:ec:cd:ce:05:40:6c:6f:e9:2f:02:98:4d:90:22:3a:f2:
89:d1:63:73:23:08:d4:f7:8a:bd:ca:14:58:f5:45:02:d4:b0:
2c:98:ae:81:c8:4b:9b:7f:93:79:bd:88:78:2b:a9:7d:4c:73:
03:19:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:17 2024 by rpki-client on console-fra.rpki-client.org