Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08456CF2FD4711EEB09C4D34017001B1.roa
File: 08456CF2FD4711EEB09C4D34017001B1.roa (raw, json)
Hash identifier: Ytp5ju+BnMalRgN6+icWRKdpGfgyKPgducIgT9KxwNk=
Subject key identifier: B5:08:82:7F:C7:0C:F9:AE:59:6D:E7:99:0D:E3:1F:52:F7:52:62:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8349
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08456CF2FD4711EEB09C4D34017001B1.roa
Signing time: Thu 18 Apr 2024 05:46:42 +0000
ROA not before: Thu 18 Apr 2024 05:46:38 +0000
ROA not after: Fri 26 Apr 2024 05:46:38 +0000
asID: 39600
IP address blocks: 156.233.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 05:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33609 (0x8349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 05:46:38 2024 GMT
Not After : Apr 26 05:46:38 2024 GMT
Subject: CN=6620b3c2-39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:af:43:5f:23:ed:15:63:f7:13:7d:32:de:
1b:53:af:22:ae:e0:ff:19:ca:82:da:b7:7d:9b:94:
16:db:c0:ca:f1:7e:8d:08:39:56:e2:47:71:f4:2e:
87:2c:87:1c:0c:62:32:e6:8a:28:ab:30:5d:9a:b9:
a2:d7:46:4f:b1:b4:ce:52:43:76:2b:a2:65:e3:9c:
bd:20:2a:7a:08:5c:8f:59:da:57:f6:ef:99:47:35:
79:63:e2:bd:19:62:b2:0d:38:8a:20:b2:50:75:bd:
2e:b4:62:85:7e:c2:3f:7e:cc:a7:c7:74:7c:27:cd:
70:7d:b8:6f:5b:ea:47:6b:f8:0e:ef:ab:a6:37:c0:
96:da:1b:6a:5e:6c:57:a6:12:94:67:4a:c2:7b:1e:
77:e0:54:0c:c3:5c:d6:01:c2:e7:6b:fa:e9:d8:dd:
e6:33:52:67:52:1b:c8:4a:cf:4d:46:94:24:a9:6d:
ba:a3:d2:d1:7f:79:14:9c:0f:12:fc:18:6a:7c:2e:
ba:a9:24:4f:cf:0b:5d:8c:70:7f:79:9d:47:e3:a5:
75:a5:3e:3d:ef:d2:8c:29:41:41:b5:79:18:13:e0:
77:a4:91:fc:d7:aa:4a:a9:00:46:c7:59:19:08:cb:
85:08:d5:e7:02:26:eb:3b:27:f1:18:14:7a:77:21:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:08:82:7F:C7:0C:F9:AE:59:6D:E7:99:0D:E3:1F:52:F7:52:62:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08456CF2FD4711EEB09C4D34017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.8.0/21
Signature Algorithm: sha256WithRSAEncryption
04:2a:0a:c7:ff:10:ce:cb:9b:9f:8e:35:76:19:03:07:1b:78:
93:85:a5:6b:ee:6e:73:19:49:5b:b8:2a:76:a5:69:41:63:18:
2f:91:e5:60:3d:9e:d8:fa:a7:74:9e:45:ca:6c:8c:ea:55:68:
45:bb:44:ed:e5:43:7e:81:aa:66:42:d9:2e:8f:34:f8:f8:72:
be:e0:6c:55:95:e4:68:ba:27:49:90:6c:f0:ba:d1:75:2e:67:
40:bd:68:87:ad:fe:cf:7b:15:54:3d:e0:0d:a1:7a:68:bd:41:
1c:a1:4e:27:a8:c8:84:d4:8b:66:ea:1e:20:91:7a:90:0b:46:
39:67:3b:7e:50:f7:77:dc:7f:cc:2d:e0:01:d8:8e:d5:71:d5:
e9:b3:ec:97:16:e5:d4:ee:db:56:09:9c:7d:c8:a9:05:3a:5a:
d2:91:63:7a:a2:28:fd:be:18:c4:f2:41:5b:29:df:42:37:87:
41:4a:37:c7:74:5f:ac:d5:31:ca:51:cb:4b:46:e6:6b:a6:ee:
bb:e8:0d:0a:0b:3d:13:67:0d:94:29:7e:f6:10:46:a1:22:7f:
44:66:67:7f:6d:fc:b7:6c:6d:64:01:eb:d8:5d:9c:14:a8:3e:
6b:b3:31:9d:e2:52:0f:ef:a6:e2:92:36:35:8c:63:af:b7:42:
99:7a:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:41 2024 by rpki-client on console-fra.rpki-client.org