Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FB457A3B2811EEBC903D384AD9E6FC.roa
File: 00FB457A3B2811EEBC903D384AD9E6FC.roa (raw, json)
Hash identifier: LQamHMZbhebsYflF1TRZ6aHXlIrv/abfwP205QthYkQ=
Subject key identifier: 43:E2:60:CE:C0:D7:51:DD:59:31:F4:72:D1:98:1C:C6:C5:2D:5F:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FB457A3B2811EEBC903D384AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:55:50 +0000
ROA not before: Tue 15 Aug 2023 04:55:47 +0000
ROA not after: Mon 27 May 2024 04:55:47 +0000
asID: 140627
IP address blocks: 156.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13747 (0x35b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:55:47 2023 GMT
Not After : May 27 04:55:47 2024 GMT
Subject: CN=64db0556-73c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:f3:20:73:01:56:49:b6:3a:dd:9b:82:99:
93:b2:88:7c:97:79:77:79:39:ff:ce:6d:ce:89:81:
14:3b:fb:94:0e:68:a0:5a:d6:39:78:cb:b6:72:e6:
1c:76:8d:b1:5e:31:1e:32:68:34:76:46:5d:93:d8:
c5:da:4f:f7:4c:f2:eb:f6:70:cb:11:57:34:d7:fe:
54:90:ef:c3:7c:7f:e1:6b:81:4b:55:83:e6:6b:0b:
1f:be:e4:64:08:de:65:c5:4f:fe:a2:fe:65:e2:2d:
45:9e:8e:e3:ec:e7:63:f8:ef:1a:48:9a:07:c4:1d:
71:b6:07:16:f0:dd:00:fd:1a:e0:d1:84:fb:f1:8c:
1d:a6:f6:fd:63:6f:02:fb:74:dd:87:15:ab:4f:a6:
d1:06:c1:73:ec:5b:59:c6:24:bb:50:7f:f7:65:9a:
b1:05:7b:a1:cb:62:ef:59:9d:31:97:86:17:ec:e8:
97:af:47:cd:8e:1b:70:00:5b:09:c2:19:f1:fd:75:
5b:31:f8:8d:16:43:52:f2:63:e1:3d:98:46:97:42:
4d:e5:86:1f:e8:a7:1a:67:41:0d:38:23:67:a9:3b:
fc:e7:9c:e0:b0:19:b6:fd:83:f1:b4:56:cf:99:6a:
e0:b5:1e:49:9f:57:9b:20:b7:04:23:93:4a:96:e7:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:60:CE:C0:D7:51:DD:59:31:F4:72:D1:98:1C:C6:C5:2D:5F:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00FB457A3B2811EEBC903D384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:bc:27:8c:06:f1:88:67:cd:fd:60:12:42:59:8e:56:de:0c:
45:4e:d2:33:fb:03:ec:d1:47:15:c8:98:59:6a:43:d4:1c:a5:
09:e0:ee:9b:89:4e:33:08:2b:c9:9d:7a:9a:95:bb:0a:cc:af:
e3:3d:7d:82:5e:2a:e7:f9:51:e1:3c:3c:ce:ad:cf:d9:ec:59:
57:91:ac:e0:ed:cf:fe:00:10:93:ee:8c:47:86:31:19:b3:92:
63:d2:86:4f:95:88:85:21:a4:07:ed:50:00:f9:71:df:51:bc:
7d:41:1e:5b:42:e4:93:b0:02:0e:78:8a:c0:59:7b:3d:24:d8:
95:73:1c:fb:1b:4e:6f:0a:b2:8c:fe:96:4c:a8:6b:15:75:80:
56:d9:82:d7:51:3f:c7:d2:9f:29:31:09:ef:f2:80:42:55:19:
a2:10:48:86:bc:c9:7f:87:e8:e1:ca:c5:09:7b:bf:96:a9:58:
60:fd:26:8f:e8:7e:8b:6b:e9:b5:f5:3a:e9:eb:30:5a:73:f9:
79:52:f2:41:38:b9:a9:92:b1:42:4b:56:5f:e0:02:af:51:eb:
35:0d:76:cd:31:86:54:fc:5b:b2:51:ae:57:37:91:a8:c9:9c:
3c:ad:53:1e:0d:9d:c9:3e:1f:35:c2:fa:21:9f:c6:e1:a9:51:
bf:1d:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:03 2024 by rpki-client on console-fra.rpki-client.org