Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/031F0FC6F0C711EEB3A8F8A1775412E6.roa
File: 031F0FC6F0C711EEB3A8F8A1775412E6.roa (raw, json)
Hash identifier: XXSlkl3os0dWw+PAv3KwK3hNlZPq1NOzXtPdvpwg2ks=
Subject key identifier: 03:42:67:1E:A8:68:EE:FE:F1:19:EE:25:78:4E:39:68:29:92:04:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 815E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/031F0FC6F0C711EEB3A8F8A1775412E6.roa
Signing time: Tue 02 Apr 2024 08:00:04 +0000
ROA not before: Tue 02 Apr 2024 08:00:00 +0000
ROA not after: Mon 29 Apr 2024 08:00:00 +0000
asID: 139646
IP address blocks: 156.240.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33118 (0x815e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 08:00:00 2024 GMT
Not After : Apr 29 08:00:00 2024 GMT
Subject: CN=660bbb04-8abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:13:39:77:51:6b:a0:f2:7d:d6:8f:22:08:e9:
83:3e:d5:73:d7:a7:a0:49:84:f1:6e:1e:6d:75:e8:
0e:51:34:aa:bc:34:fc:23:ae:21:cc:dc:23:20:7b:
4a:51:66:4d:7a:11:b8:6d:8d:2e:51:04:6d:b2:33:
9c:59:73:ab:15:05:7c:4e:16:88:65:7b:b6:95:f2:
e3:f5:94:9d:44:55:7e:a9:06:54:8a:76:8d:b0:e3:
84:40:9c:e9:ca:05:d2:53:a7:a2:c4:6a:f1:71:7c:
2d:ea:69:0a:9e:2a:cb:56:30:e6:46:3c:e5:03:f8:
df:c7:18:c5:4a:1a:19:2f:59:49:c5:83:d8:25:ef:
cf:40:0f:3d:95:e1:f0:c9:45:76:42:93:e7:9b:e1:
49:b1:ce:d4:d0:c2:f2:47:bf:18:e5:94:dc:17:17:
ec:68:61:64:ef:72:72:4f:b1:6b:7c:7c:99:ce:aa:
1b:c6:95:b0:99:29:48:33:1f:82:2f:b0:31:99:51:
ba:38:6d:b8:60:97:04:27:4e:85:6a:61:f7:d3:05:
99:b8:a2:3e:cd:60:1c:95:df:d9:f5:09:ce:01:75:
21:c9:db:1e:2a:4c:b0:d3:c0:21:f4:f1:34:1f:01:
bc:68:4d:e2:14:bf:6d:4f:29:f1:0b:a1:02:f7:e7:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:42:67:1E:A8:68:EE:FE:F1:19:EE:25:78:4E:39:68:29:92:04:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/031F0FC6F0C711EEB3A8F8A1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.48.0/21
Signature Algorithm: sha256WithRSAEncryption
af:0f:da:86:14:eb:5e:ca:cd:21:d3:a9:fe:cb:b7:14:08:b3:
4b:71:31:19:52:41:57:d4:e9:f7:31:f2:cf:0f:ba:e9:24:f3:
c5:b6:17:d3:b6:51:ae:6d:2e:c9:b0:04:fb:81:c8:d3:e3:9e:
2b:42:4b:b3:5c:5f:4f:62:45:53:5a:c4:92:a1:76:3d:56:8d:
bf:c5:f9:ee:f0:c0:a7:5e:2c:98:0f:d3:40:02:31:68:2e:ae:
0d:6f:7e:39:8e:69:0b:f3:fb:65:3a:fa:b9:ec:6b:87:80:88:
dc:ff:07:35:bc:9e:2d:fc:52:3d:a4:f4:a7:f9:ca:d5:18:b4:
dc:ca:ba:a9:7f:38:a3:e3:ab:ae:5c:0f:02:c5:b9:4d:a8:9b:
50:03:27:04:c3:53:ae:df:48:f4:c0:a7:a2:65:32:70:c4:42:
53:0d:01:9c:8f:27:17:b9:57:3c:38:c3:61:05:74:62:a8:49:
71:e6:6e:1e:88:c2:95:e3:04:91:9e:ad:2b:01:78:71:bc:f6:
bc:11:6c:08:5f:00:63:f2:2c:cc:ce:2d:9f:dd:23:84:03:0c:
27:4c:ae:57:67:66:14:d9:2e:18:f2:74:23:2f:ff:cf:e1:ec:
9e:8c:7a:f1:af:3f:0c:27:b6:10:a0:d6:de:81:3b:f3:03:88:
f2:76:f6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:16 2024 by rpki-client on console-ams.rpki-client.org