Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B863CD4FE2311EE8E219E33017001B1.roa
File: 0B863CD4FE2311EE8E219E33017001B1.roa (raw, json)
Hash identifier: UrwSKy77l5uG4jxvqAmzmiFHesEdkGIWn5Y6YF3v+Pw=
Subject key identifier: A2:1D:5F:44:7E:ED:7C:6A:28:6E:F1:F4:71:47:75:51:9D:B9:71:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8390
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B863CD4FE2311EE8E219E33017001B1.roa
Signing time: Fri 19 Apr 2024 08:01:37 +0000
ROA not before: Fri 19 Apr 2024 08:01:33 +0000
ROA not after: Mon 29 Apr 2024 08:01:33 +0000
asID: 5065
IP address blocks: 156.248.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33680 (0x8390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 08:01:33 2024 GMT
Not After : Apr 29 08:01:33 2024 GMT
Subject: CN=662224e0-dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:d8:6d:8c:23:1c:6c:97:8d:23:8a:23:3e:
a6:71:91:65:8c:bb:b2:f2:21:61:01:67:a7:42:a8:
42:42:13:3e:c0:47:3f:6a:d5:05:59:4e:3a:95:1d:
e4:4d:53:22:1b:10:9b:73:97:a3:c3:1d:6c:76:39:
43:46:4a:a3:50:39:e2:04:82:f9:40:be:85:a3:54:
80:9a:08:dc:f1:4d:ec:9f:36:de:09:64:de:e8:db:
67:c1:fc:c1:70:ab:cf:7a:11:cd:f8:6e:63:7b:89:
79:3f:61:ef:1e:f0:fd:4e:7f:03:9c:0e:65:6e:a2:
12:eb:3f:43:fc:c7:68:d7:51:e8:44:3b:e5:4a:2d:
60:76:1e:ca:ec:6b:78:dc:c2:e7:67:26:d2:23:77:
c4:96:98:24:13:60:69:ce:32:01:a1:f0:3c:80:14:
e4:d6:82:ab:3d:45:37:28:61:2a:6b:f7:25:b5:9a:
f2:08:94:67:74:a3:fe:98:99:c6:4a:24:b8:60:ce:
3f:96:53:4d:aa:db:0e:57:2e:06:55:07:4f:25:64:
8e:52:fa:9a:ac:d8:5a:e0:fd:e1:5a:8f:32:e0:b9:
e3:c1:06:91:ab:27:28:d6:a9:42:f2:6c:af:7a:95:
4b:e7:78:77:31:cd:2c:d8:14:06:a7:05:29:60:b0:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:5F:44:7E:ED:7C:6A:28:6E:F1:F4:71:47:75:51:9D:B9:71:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B863CD4FE2311EE8E219E33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.80.0/22
Signature Algorithm: sha256WithRSAEncryption
09:d5:2f:a1:58:24:e9:d3:4e:f0:a0:d3:32:87:a3:95:f9:7c:
47:ea:9a:e3:eb:22:53:e6:25:9f:b0:b5:ff:a0:c0:f0:3f:86:
8c:df:8f:12:ec:47:4e:91:2a:8c:5a:66:46:8b:5f:7f:a7:60:
a1:1e:a5:ef:27:d6:1d:76:df:44:40:4e:30:fc:61:91:8e:1d:
e8:df:29:13:ea:6a:e9:c4:7f:b5:bd:0b:1d:13:9b:cb:16:6f:
d6:17:bb:fc:7f:1d:49:31:92:3b:bb:b5:3d:5c:7d:91:b8:5d:
38:13:8b:04:20:12:59:bc:f3:90:78:a5:5e:2d:32:f1:39:a6:
24:5f:a5:0f:3f:4e:43:af:b3:e4:3e:1c:35:53:af:52:54:01:
36:ce:68:b5:f0:0c:ab:6a:fd:d1:58:fb:10:16:c0:96:91:47:
b8:eb:d1:6e:6b:f3:d3:2d:aa:71:f3:9c:3f:ac:1e:41:83:2a:
57:29:57:66:c1:f4:24:7d:f6:fd:db:01:74:e6:e5:50:fd:67:
82:da:31:fc:38:db:0e:b1:0d:88:38:dd:75:57:0d:76:98:24:
23:a4:b5:7d:ca:ff:b1:3c:39:b7:fa:85:a6:d8:bf:08:b0:b6:
23:6b:ac:68:ba:3e:d7:88:29:55:0a:40:8f:4e:e9:18:26:58:
2c:1e:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:16 2024 by rpki-client on console-ams.rpki-client.org