Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07643C42377B11EEBC34CD6C4AD9E6FC.roa
File: 07643C42377B11EEBC34CD6C4AD9E6FC.roa (raw, json)
Hash identifier: NJ0KqEF2x/vs7RkIUSebrcbF6VzNtE78h51Y5OuGQ8c=
Subject key identifier: A3:F1:D5:64:88:65:1A:BE:70:DD:77:66:62:CF:BE:EB:52:E5:D6:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3456
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07643C42377B11EEBC34CD6C4AD9E6FC.roa
Signing time: Thu 10 Aug 2023 12:40:04 +0000
ROA not before: Thu 10 Aug 2023 12:40:00 +0000
ROA not after: Sat 10 Aug 2024 12:40:00 +0000
asID: 328608
IP address blocks: 156.254.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13398 (0x3456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 12:40:00 2023 GMT
Not After : Aug 10 12:40:00 2024 GMT
Subject: CN=64d4daa4-6d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:c7:90:91:d2:12:33:b4:10:f6:ae:d6:1a:
75:eb:c9:d4:ed:40:ce:4a:12:fe:f1:69:06:03:fb:
de:90:f2:04:f9:19:90:d7:7f:17:27:e2:3c:27:b2:
9f:e8:9f:e2:a0:7d:c5:8f:c2:21:f9:db:10:b5:29:
7f:f5:4d:02:c6:d9:2d:33:22:f3:b5:6c:b2:5d:b4:
14:fc:f5:78:a9:79:ba:94:f2:be:73:81:ba:eb:49:
5e:30:05:04:f9:97:be:b6:a1:36:ee:f7:25:5e:2d:
4f:26:8a:fd:3b:d3:4a:36:97:7e:d0:ca:9c:99:95:
55:d4:e2:4e:fe:de:9b:d1:d3:cf:03:8f:5e:06:5c:
3c:1e:d0:dd:79:a4:1a:cc:ee:6b:44:e0:2c:c5:fe:
9a:bf:95:75:65:fe:3e:f5:92:0d:ea:6b:32:f4:44:
71:3a:85:ee:c6:4e:c4:39:d4:3b:09:c1:fa:bd:03:
d6:df:ed:10:80:f3:9d:34:46:16:22:a3:3b:82:ed:
46:aa:99:f3:be:87:f9:d4:73:2d:9b:e0:79:3d:d2:
7b:a4:2c:3e:69:98:14:fa:44:17:d9:57:f2:96:d6:
bc:e1:f8:63:a7:c8:03:55:9d:dc:a2:af:6f:97:e7:
47:37:02:ba:24:c5:7a:83:fc:ca:77:a2:5d:a5:32:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:D5:64:88:65:1A:BE:70:DD:77:66:62:CF:BE:EB:52:E5:D6:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07643C42377B11EEBC34CD6C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:23:1d:96:07:37:30:0c:0c:c2:2d:07:da:e9:90:b3:28:43:
ef:b0:f9:c1:c6:b4:28:dc:f8:ef:90:03:64:52:84:5a:eb:80:
7a:66:c4:2f:ab:00:2c:e1:df:9d:3d:57:b7:54:17:33:3f:6a:
51:9f:2b:c5:c4:c8:38:fe:15:95:67:5e:4c:7c:2a:14:e5:7d:
99:16:e7:68:df:e6:6c:97:cb:f0:e5:3f:91:30:ec:b7:c5:b8:
18:90:a7:f7:41:49:c1:41:e4:e7:01:50:88:32:ce:08:8b:54:
16:cc:7d:20:39:32:74:d4:07:71:b7:2f:5c:eb:9f:3f:8d:fe:
09:d9:57:31:e5:c2:b2:1f:0e:7d:60:99:e0:b7:f1:7b:e7:79:
b8:78:1e:e3:44:76:34:1c:8e:f4:8d:89:8e:5c:0a:03:dd:37:
fa:10:ac:98:86:1a:d8:2a:51:c2:12:77:d9:ea:92:bb:6c:8b:
1a:1c:7d:a8:cb:4a:5a:72:92:8c:d8:c0:fc:d9:5d:05:b2:79:
5e:54:58:c4:2c:ec:5b:1e:48:81:bb:02:3a:99:83:0b:65:fe:
6a:86:f8:8b:d6:ae:64:71:d6:1d:d2:37:9d:72:66:32:cf:12:
6c:ff:e4:98:90:1b:92:e2:8c:03:78:b7:d6:3c:89:ae:92:13:
e7:dc:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:29:57 2024 by rpki-client on console-fra.rpki-client.org