Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADC1873418CB11EFA1AF4CFE007001B1.roa
File: ADC1873418CB11EFA1AF4CFE007001B1.roa (raw, json)
Hash identifier: x0UGAPbhN5OniuzgdnyQLdfapTVjxxq6cw55Hv1nags=
Subject key identifier: 62:24:7D:C0:90:AE:71:DF:01:F2:64:50:C7:14:DE:FD:4A:C3:0D:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8B57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADC1873418CB11EFA1AF4CFE007001B1.roa
Signing time: Thu 23 May 2024 06:14:14 +0000
ROA not before: Thu 23 May 2024 06:14:11 +0000
ROA not after: Sun 30 Jun 2024 06:14:11 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 30 Jun 2024 06:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35671 (0x8b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 06:14:11 2024 GMT
Not After : Jun 30 06:14:11 2024 GMT
Subject: CN=664edeb6-91ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:4b:0a:2e:7e:96:14:d3:47:98:a8:29:84:
02:f2:b0:68:cd:0d:87:b2:98:92:ac:6b:43:30:42:
31:f7:83:8c:34:df:38:95:fc:85:3d:75:ad:dd:cb:
e0:48:ce:1d:59:3e:59:bd:ff:0c:a3:44:11:0a:e9:
ba:02:58:62:66:e0:89:61:90:e9:5e:21:2e:9d:f7:
0d:e1:5d:99:fa:87:66:78:db:c1:e0:c6:4d:26:d6:
44:86:fa:7d:fc:c5:c6:aa:b7:d7:88:bc:63:11:0c:
16:23:e6:07:9e:86:77:d3:ab:e5:6c:59:6b:22:8d:
9d:25:1c:8f:48:f4:7f:95:8a:52:a2:20:fd:01:8f:
52:a5:df:32:9b:59:f6:5e:a1:ad:ec:b7:4f:a8:5c:
60:f2:b1:ba:17:e6:8c:42:4b:5e:c1:e6:5f:c8:e4:
2e:29:e1:4f:dc:28:f3:0f:c3:5b:2e:72:b4:67:d3:
6b:b1:63:70:3f:28:e6:91:78:bf:ad:d6:0f:9b:8e:
0e:1a:9f:f1:da:58:d1:7a:70:d4:90:dd:75:3f:1f:
6b:76:f4:e0:49:bf:99:f3:ee:ed:22:5a:0f:41:61:
d6:03:24:96:b2:8d:47:7c:85:d4:16:ae:76:35:54:
fc:f0:3e:5f:44:5a:1d:b7:44:04:bc:2e:bb:5e:1e:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:7D:C0:90:AE:71:DF:01:F2:64:50:C7:14:DE:FD:4A:C3:0D:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADC1873418CB11EFA1AF4CFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
40:03:07:f5:a8:92:69:13:62:fa:20:00:8d:8d:0c:80:c4:eb:
48:b4:0f:92:c6:ff:8f:c7:b1:c2:28:1f:ac:eb:1a:a7:c0:14:
b7:33:aa:c5:1f:c9:ac:e1:6e:c4:5e:8e:da:13:e5:10:af:ee:
40:09:99:48:d7:a8:f0:0c:20:42:a1:80:e1:87:72:c4:c9:ef:
03:61:7d:a1:18:88:d4:5c:4c:1d:ef:2e:d2:61:f8:af:95:2a:
6b:92:93:41:a6:96:52:6f:0b:bf:dd:e8:aa:88:31:90:56:f6:
0f:ae:da:7f:8d:6f:14:00:f1:95:cc:80:b9:c0:53:8d:51:3b:
a8:9e:e7:e5:8b:b9:f8:b4:c7:66:17:05:34:44:fa:45:af:6d:
df:f6:82:e0:ac:c4:30:f1:c6:e4:d4:4e:a2:0a:1b:25:8e:16:
48:54:43:c7:0c:5d:a8:99:7d:a9:1c:80:94:d5:90:f9:2c:37:
15:24:b8:ef:6b:e1:0d:2c:05:15:65:f9:7f:75:20:4f:d5:38:
4f:b1:d3:81:b3:44:6e:f1:83:0b:da:ea:72:a8:aa:72:99:a3:
04:9f:86:81:b9:84:ea:85:0a:92:5b:9c:26:1f:eb:43:46:88:
f0:20:07:ff:6a:33:96:0c:e8:fc:9c:02:8c:70:d1:49:cd:3b:
5b:f4:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:31:58 2024 by rpki-client on console-ams.rpki-client.org