Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DE8E504A2C911EE9D6E2A30D25BE465.roa
File: 0DE8E504A2C911EE9D6E2A30D25BE465.roa (raw, json)
Hash identifier: 2clVnwgLrxWrucfnXiUkMN16o0ZlWFJj95KZm/PuEHQ=
Subject key identifier: BD:E9:68:5B:57:3A:92:92:A9:7F:58:6A:0C:A5:A7:84:9A:1A:BF:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 58E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DE8E504A2C911EE9D6E2A30D25BE465.roa
Signing time: Mon 25 Dec 2023 01:58:10 +0000
ROA not before: Mon 25 Dec 2023 01:58:07 +0000
ROA not after: Mon 13 Jan 2025 01:58:07 +0000
asID: 139057
IP address blocks: 156.225.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22754 (0x58e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 01:58:07 2023 GMT
Not After : Jan 13 01:58:07 2025 GMT
Subject: CN=6588e1b2-f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:10:bb:05:59:57:e9:aa:fd:45:b1:87:7c:
dc:5f:13:69:9e:b2:13:ce:32:67:49:6b:85:6b:ec:
e7:6a:38:ea:90:9a:2c:f7:dd:d5:ad:4f:65:53:54:
68:8e:08:cb:95:c7:ca:92:69:fc:93:7c:f3:7b:56:
26:a9:9a:ea:ea:a8:17:bb:62:42:d7:6a:1b:ac:81:
e4:28:68:ad:60:c9:b8:d0:ac:b4:c5:69:ea:1a:66:
1a:eb:0a:ae:72:1a:25:85:47:8a:00:d7:4b:8a:b5:
78:d3:b0:2f:e2:5a:32:29:ff:16:b8:82:57:f5:2e:
83:67:99:18:a9:93:01:6f:fb:c8:d2:f5:21:66:a9:
a1:17:ca:78:60:d9:7c:09:6a:d2:38:03:a6:d0:48:
05:57:4f:ee:00:00:98:de:9e:3c:5e:59:94:19:7b:
78:be:ca:a3:de:09:ab:79:ef:a9:07:88:b0:af:64:
6f:7b:b3:5d:24:a7:3b:1c:78:3c:b9:34:db:a3:ab:
78:ea:f7:60:5e:2f:90:75:20:c5:46:3a:4c:35:38:
a6:9e:60:20:97:2e:93:75:ff:72:9c:0a:63:b8:f6:
dd:00:a0:d3:ab:f7:aa:be:7e:67:48:4d:80:0d:49:
87:0b:72:c6:62:1b:ab:13:5a:bc:08:1e:29:06:46:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:68:5B:57:3A:92:92:A9:7F:58:6A:0C:A5:A7:84:9A:1A:BF:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DE8E504A2C911EE9D6E2A30D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.109.0/24
Signature Algorithm: sha256WithRSAEncryption
05:81:db:05:fc:1c:2c:c7:d0:2d:55:a4:2e:47:dd:65:9d:80:
fa:0f:7b:72:e7:2d:67:3f:4d:c6:08:3c:b3:5f:6d:a8:41:25:
1c:a4:c0:72:5c:d8:ef:c4:07:1c:8e:cc:68:b3:6d:0f:df:35:
0b:ad:88:df:a5:dd:ea:2d:21:5a:1a:44:15:2c:32:34:35:b5:
b7:62:d0:37:71:8b:57:b6:50:0a:75:b8:50:7f:df:10:ec:27:
e4:74:a8:ac:18:b1:32:4c:de:40:2a:72:55:57:42:50:ab:a5:
b9:88:b2:24:14:42:62:d1:27:7d:1d:30:ee:58:f8:9c:ca:e6:
e9:51:28:60:b7:3c:e5:07:19:c7:4d:b5:82:1f:e7:10:5c:db:
bd:e3:6e:de:bb:b6:8b:7e:d7:6d:17:ba:6c:80:c6:bc:3b:19:
52:1b:ea:e5:cb:f9:48:57:2b:ac:3c:b2:c9:e5:2f:1c:58:cb:
d5:48:3f:7c:6e:0c:ad:63:7f:b7:14:30:a9:93:a0:e0:a9:e0:
05:52:5b:f7:d9:2e:38:0b:c6:85:d9:6f:52:a0:59:82:d0:a3:
3c:02:6a:e2:45:dc:2b:fe:3b:fe:00:1f:7d:67:6a:53:d6:be:
b2:74:89:5c:93:b7:3c:86:8e:12:b9:ef:d9:a2:a1:e0:b5:ee:
40:b9:9e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:04 2024 by rpki-client on console-fra.rpki-client.org