Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/080383723B2911EE89E3473B4AD9E6FC.roa
File: 080383723B2911EE89E3473B4AD9E6FC.roa (raw, json)
Hash identifier: WnsjziQPhSRwaONPZOPDd7uQrmGHzJwcmA5jDg6IHwg=
Subject key identifier: 7C:82:F3:C6:60:2C:07:92:92:A6:10:A4:D6:41:63:D7:8E:B0:E9:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/080383723B2911EE89E3473B4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:03:11 +0000
ROA not before: Tue 15 Aug 2023 05:03:08 +0000
ROA not after: Mon 27 May 2024 05:03:08 +0000
asID: 140627
IP address blocks: 156.247.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13763 (0x35c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:03:08 2023 GMT
Not After : May 27 05:03:08 2024 GMT
Subject: CN=64db070f-1590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:70:03:a2:dc:5d:3d:05:e8:bd:ca:65:01:
dd:f8:65:84:f4:61:12:1a:d9:21:42:9c:9b:80:67:
f4:a3:97:a0:d5:4d:bc:fb:73:f4:91:77:ab:26:13:
5f:f2:e4:f9:fe:95:2a:45:d7:44:64:db:32:16:bf:
02:19:d8:94:6b:fb:eb:df:86:88:d9:83:7d:96:12:
26:86:e8:d0:86:96:e5:2f:e6:55:45:17:ec:ff:80:
d3:20:df:8b:2e:84:01:16:63:fe:43:e7:33:62:3d:
3b:c4:bf:29:a8:fe:ac:78:9b:60:86:8d:7f:3b:1e:
48:1f:78:67:f7:f3:6d:f9:f2:36:86:ea:9f:f2:a3:
d8:0f:b3:68:a6:18:63:ec:b3:6d:54:ff:ef:1f:54:
58:a2:4b:c3:1f:1d:68:75:df:62:ca:d6:68:f6:45:
eb:2c:9b:3c:91:20:54:0d:dc:ab:0f:01:1f:84:a2:
ca:e6:9b:cc:cb:c0:29:81:79:5f:66:ab:e4:3c:dc:
2a:57:2b:19:a0:d4:51:05:94:1c:98:69:85:a1:6f:
d1:89:6d:06:5e:a5:06:85:63:77:f3:6c:9a:ba:3d:
3a:02:e7:2d:da:f4:a3:46:6a:bc:1e:cc:f1:13:27:
3f:a4:c1:d4:9c:43:b5:4d:35:11:06:48:41:64:9e:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:82:F3:C6:60:2C:07:92:92:A6:10:A4:D6:41:63:D7:8E:B0:E9:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/080383723B2911EE89E3473B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1a:9f:f7:c4:b3:1a:88:86:82:53:e6:42:2b:a1:36:7d:fa:
6d:86:1d:e6:f1:b2:42:1a:f3:51:e0:54:bd:d9:d0:03:63:4a:
9e:83:4b:4c:4d:42:68:1f:ad:1e:34:fb:f7:44:47:63:b3:3f:
b2:f0:43:12:e9:04:03:78:5d:ed:b2:8e:1f:7f:cc:7e:99:69:
e6:c2:9c:5e:5d:3e:b9:69:7c:8d:7e:f6:6f:bd:7d:24:26:81:
5b:77:9a:91:80:24:91:85:9c:1a:ff:10:75:60:00:d8:04:d1:
20:5c:f2:e8:2a:1a:24:67:6e:2a:b5:2d:93:f8:d7:d9:1f:43:
bf:e5:81:df:16:a7:0a:a2:90:d6:a7:e0:a4:3b:14:a4:f8:04:
6b:e0:15:6a:d0:be:10:2a:e9:5c:22:a6:cf:79:2e:d7:fe:6f:
49:ee:a5:bb:c4:13:8e:75:d2:70:31:1a:5c:5b:f4:d4:4a:aa:
da:e3:3c:1f:01:2e:ef:27:8e:20:fe:a2:de:0a:9c:86:63:8c:
74:bb:9f:f6:17:b0:4a:c3:67:b2:20:5f:cb:95:5d:5d:86:f0:
ba:10:1b:dc:2f:ff:4a:bf:99:60:c2:84:73:bb:b2:fe:be:8f:
3e:10:1d:2f:9c:66:22:c2:8b:3a:8a:78:5b:35:7c:c2:71:28:
08:14:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:43 2024 by rpki-client on console-ams.rpki-client.org